@opensoha/contracts 0.1.18 → 0.1.20

package/openapi/soha-api.json

@@ -1614,6 +1614,65 @@
         ],
         "type": "object"
       },
+      "AgentPrometheusQueryRequest": {
+        "additionalProperties": false,
+        "description": "Range queries require start, end and step. The runtime also enforces end greater than start, a maximum 24-hour range and at most 11000 intervals.",
+        "if": {
+          "properties": {
+            "kind": {
+              "const": "range"
+            }
+          },
+          "required": [
+            "kind"
+          ]
+        },
+        "properties": {
+          "end": {
+            "format": "int64",
+            "minimum": 1,
+            "type": "integer"
+          },
+          "endpoint": {
+            "maxLength": 2048,
+            "type": "string"
+          },
+          "kind": {
+            "enum": [
+              "instant",
+              "range"
+            ],
+            "type": "string"
+          },
+          "query": {
+            "maxLength": 16384,
+            "minLength": 1,
+            "type": "string"
+          },
+          "start": {
+            "format": "int64",
+            "minimum": 1,
+            "type": "integer"
+          },
+          "step": {
+            "minimum": 1,
+            "type": "integer"
+          }
+        },
+        "required": [
+          "endpoint",
+          "query",
+          "kind"
+        ],
+        "then": {
+          "required": [
+            "start",
+            "end",
+            "step"
+          ]
+        },
+        "type": "object"
+      },
       "AgentProviderCatalog": {
         "additionalProperties": false,
         "properties": {
@@ -6981,6 +7040,14 @@
           "collapsedLogoUrl": {
             "type": "string"
           },
+          "darkCollapsedLogoUrl": {
+            "description": "Optional dark-theme compact logo. Empty or absent uses collapsedLogoUrl.",
+            "type": "string"
+          },
+          "darkExpandedLogoUrl": {
+            "description": "Optional dark-theme expanded logo. Empty or absent uses expandedLogoUrl.",
+            "type": "string"
+          },
           "expandedLogoUrl": {
             "type": "string"
           },
@@ -8579,6 +8646,97 @@
         ],
         "type": "string"
       },
+      "ClusterAgentUpgradeInput": {
+        "additionalProperties": false,
+        "properties": {
+          "version": {
+            "description": "Explicit stable official Agent version, such as v0.1.7. Registry and container identity cannot be overridden.",
+            "maxLength": 64,
+            "pattern": "^v?(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)$",
+            "type": "string"
+          }
+        },
+        "required": [
+          "version"
+        ],
+        "type": "object"
+      },
+      "ClusterAgentUpgradeResult": {
+        "additionalProperties": false,
+        "properties": {
+          "previousImage": {
+            "type": "string"
+          },
+          "targetImage": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "previousImage",
+          "targetImage"
+        ],
+        "type": "object"
+      },
+      "ClusterAgentUpgradeResultEnvelope": {
+        "properties": {
+          "data": {
+            "$ref": "#/components/schemas/ClusterAgentUpgradeResult"
+          }
+        },
+        "required": [
+          "data"
+        ],
+        "type": "object"
+      },
+      "ClusterAgentUpgradeStatus": {
+        "additionalProperties": false,
+        "properties": {
+          "canUpgrade": {
+            "type": "boolean"
+          },
+          "image": {
+            "description": "Desired image of the standard Agent Deployment.",
+            "type": "string"
+          },
+          "message": {
+            "type": "string"
+          },
+          "recommendedVersion": {
+            "description": "Agent version bundled with this Core release.",
+            "type": "string"
+          },
+          "rolloutStatus": {
+            "type": "string"
+          },
+          "upgradeDisabledReason": {
+            "type": "string"
+          },
+          "version": {
+            "description": "Version reported by the currently connected Agent process.",
+            "type": "string"
+          }
+        },
+        "required": [
+          "version",
+          "image",
+          "recommendedVersion",
+          "rolloutStatus",
+          "message",
+          "canUpgrade"
+        ],
+        "type": "object"
+      },
+      "ClusterAgentUpgradeStatusEnvelope": {
+        "properties": {
+          "data": {
+            "$ref": "#/components/schemas/ClusterAgentUpgradeStatus"
+          }
+        },
+        "required": [
+          "data"
+        ],
+        "type": "object"
+      },
       "ClusterCapabilityMatrixEntry": {
         "additionalProperties": false,
         "properties": {
@@ -10967,6 +11125,52 @@
         ],
         "type": "object"
       },
+      "ConnectionCheckResult": {
+        "additionalProperties": false,
+        "description": "Current connection health from a synchronous probe. This result is not a task and has no task identifier or lifecycle actions.",
+        "properties": {
+          "checkedAt": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "healthy": {
+            "type": "boolean"
+          },
+          "httpStatus": {
+            "type": "integer"
+          },
+          "message": {
+            "type": "string"
+          },
+          "nextAction": {
+            "type": "string"
+          },
+          "reason": {
+            "type": "string"
+          },
+          "status": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "healthy",
+          "status",
+          "checkedAt"
+        ],
+        "type": "object"
+      },
+      "ConnectionCheckResultEnvelope": {
+        "additionalProperties": false,
+        "properties": {
+          "data": {
+            "$ref": "#/components/schemas/ConnectionCheckResult"
+          }
+        },
+        "required": [
+          "data"
+        ],
+        "type": "object"
+      },
       "CreatedPersonalAccessToken": {
         "additionalProperties": false,
         "properties": {
@@ -23593,6 +23797,70 @@
         },
         "type": "object"
       },
+      "KubernetesAgentCustomResourceRule": {
+        "additionalProperties": false,
+        "properties": {
+          "apiGroup": {
+            "maxLength": 253,
+            "pattern": "^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$",
+            "type": "string"
+          },
+          "namespaces": {
+            "description": "Explicit namespaces; omitted or empty grants cluster-wide access to the named resources only.",
+            "items": {
+              "maxLength": 63,
+              "pattern": "^[a-z0-9]([a-z0-9-]*[a-z0-9])?$",
+              "type": "string"
+            },
+            "maxItems": 50,
+            "type": "array",
+            "uniqueItems": true
+          },
+          "resources": {
+            "items": {
+              "maxLength": 63,
+              "pattern": "^[a-z]([a-z0-9-]*[a-z0-9])?$",
+              "type": "string"
+            },
+            "maxItems": 50,
+            "minItems": 1,
+            "type": "array",
+            "uniqueItems": true
+          },
+          "verbs": {
+            "items": {
+              "enum": [
+                "get",
+                "list",
+                "watch",
+                "create",
+                "update",
+                "patch",
+                "delete"
+              ],
+              "type": "string",
+              "x-enum-varnames": [
+                "KubernetesAgentCustomResourceRuleVerbsGet",
+                "KubernetesAgentCustomResourceRuleVerbsList",
+                "KubernetesAgentCustomResourceRuleVerbsWatch",
+                "KubernetesAgentCustomResourceRuleVerbsCreate",
+                "KubernetesAgentCustomResourceRuleVerbsUpdate",
+                "KubernetesAgentCustomResourceRuleVerbsPatch",
+                "KubernetesAgentCustomResourceRuleVerbsDelete"
+              ]
+            },
+            "minItems": 1,
+            "type": "array",
+            "uniqueItems": true
+          }
+        },
+        "required": [
+          "apiGroup",
+          "resources",
+          "verbs"
+        ],
+        "type": "object"
+      },
       "KubernetesBackendTLSPolicy": {
         "additionalProperties": false,
         "properties": {
@@ -23760,6 +24028,13 @@
           "credentialType": {
             "type": "string"
           },
+          "customResourceRules": {
+            "items": {
+              "$ref": "#/components/schemas/KubernetesAgentCustomResourceRule"
+            },
+            "maxItems": 50,
+            "type": "array"
+          },
           "endpoint": {
             "type": "string"
           },
@@ -23973,6 +24248,69 @@
         ],
         "type": "object"
       },
+      "KubernetesClusterRegistrationRequest": {
+        "additionalProperties": false,
+        "properties": {
+          "agentCustomResourceRules": {
+            "items": {
+              "$ref": "#/components/schemas/KubernetesAgentCustomResourceRule"
+            },
+            "maxItems": 50,
+            "type": "array"
+          },
+          "agentEndpoint": {
+            "type": "string"
+          },
+          "agentToken": {
+            "type": "string",
+            "writeOnly": true
+          },
+          "connectionMode": {
+            "$ref": "#/components/schemas/KubernetesConnectionMode"
+          },
+          "context": {
+            "type": "string"
+          },
+          "environment": {
+            "type": "string"
+          },
+          "grafanaBaseUrl": {
+            "type": "string"
+          },
+          "id": {
+            "type": "string"
+          },
+          "kubeconfig": {
+            "type": "string"
+          },
+          "labels": {
+            "additionalProperties": {
+              "type": "string"
+            },
+            "type": "object"
+          },
+          "name": {
+            "type": "string"
+          },
+          "prometheusBaseUrl": {
+            "type": "string"
+          },
+          "prometheusBearerToken": {
+            "type": "string",
+            "writeOnly": true
+          },
+          "prometheusClusterLabel": {
+            "type": "string"
+          },
+          "prometheusTransport": {
+            "$ref": "#/components/schemas/KubernetesPrometheusTransport"
+          },
+          "region": {
+            "type": "string"
+          }
+        },
+        "type": "object"
+      },
       "KubernetesClusterRole": {
         "additionalProperties": false,
         "properties": {
@@ -24249,6 +24587,18 @@
         ],
         "type": "object"
       },
+      "KubernetesConfigMapDataInput": {
+        "additionalProperties": false,
+        "properties": {
+          "binaryData": {
+            "$ref": "#/components/schemas/KubernetesStringMap"
+          },
+          "data": {
+            "$ref": "#/components/schemas/KubernetesStringMap"
+          }
+        },
+        "type": "object"
+      },
       "KubernetesConfigMapDetail": {
         "additionalProperties": false,
         "properties": {
@@ -24501,6 +24851,18 @@
         ],
         "type": "object"
       },
+      "KubernetesCronJobSuspendInput": {
+        "additionalProperties": false,
+        "properties": {
+          "suspend": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "suspend"
+        ],
+        "type": "object"
+      },
       "KubernetesCustomResource": {
         "additionalProperties": false,
         "properties": {
@@ -24559,6 +24921,40 @@
         ],
         "type": "object"
       },
+      "KubernetesCustomResourceAccess": {
+        "additionalProperties": false,
+        "properties": {
+          "allowedActions": {
+            "items": {
+              "enum": [
+                "list",
+                "view",
+                "create",
+                "update",
+                "delete"
+              ],
+              "type": "string"
+            },
+            "type": "array"
+          }
+        },
+        "required": [
+          "allowedActions"
+        ],
+        "type": "object"
+      },
+      "KubernetesCustomResourceAccessEnvelope": {
+        "additionalProperties": false,
+        "properties": {
+          "data": {
+            "$ref": "#/components/schemas/KubernetesCustomResourceAccess"
+          }
+        },
+        "required": [
+          "data"
+        ],
+        "type": "object"
+      },
       "KubernetesCustomResourceDefinition": {
         "additionalProperties": false,
         "properties": {
@@ -27825,6 +28221,53 @@
         ],
         "type": "object"
       },
+      "KubernetesNamespaceCreateInput": {
+        "additionalProperties": false,
+        "properties": {
+          "annotations": {
+            "$ref": "#/components/schemas/KubernetesStringMap"
+          },
+          "labels": {
+            "$ref": "#/components/schemas/KubernetesStringMap"
+          },
+          "name": {
+            "minLength": 1,
+            "pattern": "\\S",
+            "type": "string"
+          }
+        },
+        "required": [
+          "name"
+        ],
+        "type": "object"
+      },
+      "KubernetesNamespaceEnvelope": {
+        "additionalProperties": false,
+        "properties": {
+          "data": {
+            "$ref": "#/components/schemas/KubernetesNamespace"
+          }
+        },
+        "required": [
+          "data"
+        ],
+        "type": "object"
+      },
+      "KubernetesNamespaceInput": {
+        "additionalProperties": false,
+        "properties": {
+          "annotations": {
+            "$ref": "#/components/schemas/KubernetesStringMap"
+          },
+          "labels": {
+            "$ref": "#/components/schemas/KubernetesStringMap"
+          },
+          "name": {
+            "type": "string"
+          }
+        },
+        "type": "object"
+      },
       "KubernetesNamespaceListEnvelope": {
         "additionalProperties": false,
         "properties": {
@@ -28412,6 +28855,24 @@
         ],
         "type": "object"
       },
+      "KubernetesNodeDrainInput": {
+        "additionalProperties": false,
+        "properties": {
+          "deleteEmptyDirData": {
+            "type": "boolean"
+          },
+          "force": {
+            "type": "boolean"
+          },
+          "timeoutSeconds": {
+            "default": 300,
+            "maximum": 1800,
+            "minimum": 30,
+            "type": "integer"
+          }
+        },
+        "type": "object"
+      },
       "KubernetesNodeListEnvelope": {
         "additionalProperties": false,
         "properties": {
@@ -28511,6 +28972,18 @@
         },
         "type": "object"
       },
+      "KubernetesNodeSchedulabilityInput": {
+        "additionalProperties": false,
+        "properties": {
+          "unschedulable": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "unschedulable"
+        ],
+        "type": "object"
+      },
       "KubernetesNodeTaint": {
         "additionalProperties": false,
         "properties": {
@@ -28530,6 +29003,21 @@
         ],
         "type": "object"
       },
+      "KubernetesNodeUpdateInput": {
+        "additionalProperties": false,
+        "properties": {
+          "labels": {
+            "$ref": "#/components/schemas/KubernetesStringMap"
+          },
+          "taints": {
+            "items": {
+              "$ref": "#/components/schemas/KubernetesNodeTaint"
+            },
+            "type": "array"
+          }
+        },
+        "type": "object"
+      },
       "KubernetesPersistentVolume": {
         "additionalProperties": false,
         "properties": {
@@ -29391,6 +29879,9 @@
           },
           "hasBearerToken": {
             "type": "boolean"
+          },
+          "transport": {
+            "$ref": "#/components/schemas/KubernetesPrometheusTransport"
           }
         },
         "required": [
@@ -29398,6 +29889,14 @@
         ],
         "type": "object"
       },
+      "KubernetesPrometheusTransport": {
+        "default": "direct",
+        "enum": [
+          "direct",
+          "agent"
+        ],
+        "type": "string"
+      },
       "KubernetesReferenceGrant": {
         "additionalProperties": false,
         "properties": {
@@ -30324,7 +30823,10 @@
             "enum": [
               "create"
             ],
-            "type": "string"
+            "type": "string",
+            "x-enum-varnames": [
+              "Create"
+            ]
           },
           "apiVersion": {
             "minLength": 1,
@@ -31308,6 +31810,19 @@
         ],
         "type": "object"
       },
+      "KubernetesResourceYamlInput": {
+        "additionalProperties": false,
+        "properties": {
+          "content": {
+            "minLength": 1,
+            "type": "string"
+          }
+        },
+        "required": [
+          "content"
+        ],
+        "type": "object"
+      },
       "KubernetesRole": {
         "additionalProperties": false,
         "properties": {
@@ -31560,6 +32075,71 @@
         ],
         "type": "object"
       },
+      "KubernetesSecretDataInput": {
+        "additionalProperties": false,
+        "description": "Data values are plain text. The response detail returns Kubernetes Base64-encoded values.",
+        "properties": {
+          "data": {
+            "$ref": "#/components/schemas/KubernetesStringMap"
+          }
+        },
+        "type": "object"
+      },
+      "KubernetesSecretDetail": {
+        "additionalProperties": false,
+        "properties": {
+          "ageSeconds": {
+            "format": "int64",
+            "minimum": 0,
+            "type": "integer"
+          },
+          "annotations": {
+            "$ref": "#/components/schemas/KubernetesStringMap"
+          },
+          "createdAt": {
+            "type": "string"
+          },
+          "data": {
+            "$ref": "#/components/schemas/KubernetesStringMap",
+            "description": "Secret data values encoded with standard Base64. Requires secret-data.view."
+          },
+          "immutable": {
+            "type": "boolean"
+          },
+          "labels": {
+            "$ref": "#/components/schemas/KubernetesStringMap"
+          },
+          "name": {
+            "type": "string"
+          },
+          "namespace": {
+            "type": "string"
+          },
+          "type": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "name",
+          "namespace",
+          "immutable",
+          "ageSeconds",
+          "type"
+        ],
+        "type": "object"
+      },
+      "KubernetesSecretDetailEnvelope": {
+        "additionalProperties": false,
+        "properties": {
+          "data": {
+            "$ref": "#/components/schemas/KubernetesSecretDetail"
+          }
+        },
+        "required": [
+          "data"
+        ],
+        "type": "object"
+      },
       "KubernetesSecretMetadata": {
         "additionalProperties": false,
         "properties": {
@@ -54718,6 +55298,14 @@
           "collapsedLogoUrl": {
             "type": "string"
           },
+          "darkCollapsedLogoUrl": {
+            "description": "Optional dark-theme compact logo. Empty or absent clears the override.",
+            "type": "string"
+          },
+          "darkExpandedLogoUrl": {
+            "description": "Optional dark-theme expanded logo. Empty or absent clears the override.",
+            "type": "string"
+          },
           "expandedLogoUrl": {
             "type": "string"
           },
@@ -60734,7 +61322,7 @@
   "info": {
     "description": "Public OpenSoha core API contract. This first contract focuses on stable cross-repository boundaries: auth, health, runner-facing control-plane callbacks, AI Gateway, and MCP capability discovery.\n",
     "title": "Soha API",
-    "version": "0.1.18"
+    "version": "0.1.20"
   },
   "openapi": "3.1.0",
   "paths": {
@@ -68992,6 +69580,7 @@
     },
     "/applications/{applicationID}": {
       "delete": {
+        "description": "Deletes the application and its owned configuration and history. Does not uninstall cluster workloads. Unfinished delivery tasks or external references prevent deletion.",
         "operationId": "deleteApplication",
         "parameters": [
           {
@@ -69014,6 +69603,9 @@
           },
           "404": {
             "$ref": "#/components/responses/Error"
+          },
+          "409": {
+            "$ref": "#/components/responses/Error"
           }
         },
         "tags": [
@@ -77566,6 +78158,16 @@
           "required": true
         },
         "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ConnectionCheckResultEnvelope"
+                }
+              }
+            },
+            "description": "Completed synchronous health check. Each request probes the connection and returns its current health; no task or task log is created. Idempotency-Key is accepted for request compatibility but does not replay an earlier check."
+          },
           "202": {
             "content": {
               "application/json": {
@@ -77574,7 +78176,7 @@
                 }
               }
             },
-            "description": "Health check accepted as a source-domain task. The request never returns the Provider raw response."
+            "description": "Legacy health-check response retained for older servers. The task contains the completed result, never the Provider raw response."
           },
           "400": {
             "$ref": "#/components/responses/ComputeError"
@@ -77683,6 +78285,7 @@
     },
     "/compute/resources/{domain}/{kind}/{id}/actions/{action}": {
       "post": {
+        "description": "Enqueue a supported resource mutation. Container service actions are start, stop and restart. Log reads use the direct project log query API; action logs is rejected without creating a task.",
         "operationId": "executeComputeResourceAction",
         "parameters": [
           {
@@ -78013,6 +78616,7 @@
     },
     "/compute/tasks/{domain}/{id}/retry": {
       "post": {
+        "description": "Retry an asynchronous operation when its returned state permits it. Historical connection_test, port_reserve and service_action logs records remain readable but cannot be requeued; use their direct check, metadata or log query APIs instead.",
         "operationId": "retryComputeTask",
         "parameters": [
           {
@@ -78046,6 +78650,9 @@
             },
             "description": "Retry delegated to the source domain and returned as a new task with a new immutable Provider snapshot."
           },
+          "400": {
+            "$ref": "#/components/responses/ComputeError"
+          },
           "403": {
             "$ref": "#/components/responses/ComputeError"
           },
@@ -84739,6 +85346,7 @@
     },
     "/docker/projects/{dockerProjectID}/logs/query": {
       "post": {
+        "description": "Requires docker.services.logs. Reads bounded logs directly from the runtime without submitting an operation.",
         "operationId": "queryDockerProjectLogs",
         "parameters": [
           {
@@ -84789,6 +85397,7 @@
     },
     "/docker/projects/{dockerProjectID}/logs/stream-ticket": {
       "post": {
+        "description": "Requires docker.services.logs. The same permission is rechecked when opening the stream.",
         "operationId": "issueDockerProjectLogStreamTicket",
         "parameters": [
           {
@@ -96185,6 +96794,16 @@
           }
         ],
         "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ConnectionCheckResultEnvelope"
+                }
+              }
+            },
+            "description": "Completed synchronous connection check. Each request probes the connection and returns its current health; no task or task log is created."
+          },
           "202": {
             "content": {
               "application/json": {
@@ -96193,7 +96812,7 @@
                 }
               }
             },
-            "description": "Completed connection-test operation."
+            "description": "Legacy response for a completed connection check, retained for older servers. Read the operation result directly."
           },
           "403": {
             "$ref": "#/components/responses/Error"