@opensoha/contracts 0.1.19 → 0.1.21

package/auth/catalog_generated.go

@@ -6,8 +6,8 @@ import _ "embed"
 
 const (
 	PermissionCatalogVersion = "2.0.0"
-	PermissionCatalogContentSHA256 = "5b4c9eed71c549d61a6fd538db542681cb2932619d66ab031c74fcbaaa0c9867"
-	PermissionCatalogSHA256 = "e1e4bab807f64894c9bbde245394902fb1e82253d5847585102560ea6f853894"
+	PermissionCatalogContentSHA256 = "be2c1caf05e680f75b40e6ce017e55f1c35f7977cf045ca3ec562adbd6cb37dc"
+	PermissionCatalogSHA256 = "2822fab5a3963270e806884ce46402bb42f3384d5530e6ae0acc8bf253811de5"
 )
 
 //go:embed permission-catalog.json

package/auth/permission-catalog.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "authorization.opensoha.io/v1",
   "catalogVersion": "2.0.0",
-  "contentHash": "sha256:5b4c9eed71c549d61a6fd538db542681cb2932619d66ab031c74fcbaaa0c9867",
+  "contentHash": "sha256:be2c1caf05e680f75b40e6ce017e55f1c35f7977cf045ca3ec562adbd6cb37dc",
   "permissions": [
     {
       "key": "access.directory.create",
@@ -4998,6 +4998,86 @@
       "status": "active",
       "assignable": true
     },
+    {
+      "key": "network_access.proxy_connections.close",
+      "domain": "network_access",
+      "resource": "proxy_connections",
+      "action": "close",
+      "displayName": "断开代理连接",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.proxy_connections.view",
+      "domain": "network_access",
+      "resource": "proxy_connections",
+      "action": "view",
+      "displayName": "查看代理连接详情",
+      "riskLevel": "read",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.proxy_instances.create",
+      "domain": "network_access",
+      "resource": "proxy_instances",
+      "action": "create",
+      "displayName": "创建代理实例",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.proxy_instances.update",
+      "domain": "network_access",
+      "resource": "proxy_instances",
+      "action": "update",
+      "displayName": "更新代理实例配置",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.proxy_instances.view",
+      "domain": "network_access",
+      "resource": "proxy_instances",
+      "action": "view",
+      "displayName": "查看代理实例",
+      "riskLevel": "read",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
     {
       "key": "network_access.resources.create",
       "domain": "network_access",

package/compat/json-schema-ecosystem-0.1.0.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.19",
+  "version": "0.1.21",
   "schemas": {
     "plugins/plugin-manifest.schema.json": {
       "rootRequired": ["id", "name", "publisher", "type", "version"],

package/compat/openapi-loose-boundaries-0.1.0.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.19",
+  "version": "0.1.21",
   "generatedFrom": "openapi/soha-api.yaml",
   "entries": [
     {

package/fixtures/json-schema/network-ingest-event/invalid/proxy-runtime-negative-total.json

@@ -0,0 +1,19 @@
+{
+  "schemaVersion": "network-ingest/v1alpha1",
+  "batchId": "proxy-sample-batch-invalid",
+  "producerId": "proxy-mihomo",
+  "producerKind": "proxy",
+  "sentAt": "2026-09-27T08:00:00Z",
+  "events": [{
+    "id": "proxy-sample-invalid",
+    "type": "proxy.runtime.sample",
+    "sequence": 1,
+    "occurredAt": "2026-09-27T08:00:00Z",
+    "payload": {
+      "engine": "mihomo",
+      "uptimeSeconds": 60,
+      "uploadTotal": -1,
+      "downloadTotal": 4096
+    }
+  }]
+}

package/fixtures/json-schema/network-ingest-event/valid/proxy-runtime-sample.json

@@ -0,0 +1,20 @@
+{
+  "schemaVersion": "network-ingest/v1alpha1",
+  "batchId": "proxy-sample-batch-1",
+  "producerId": "proxy-mihomo",
+  "producerKind": "proxy",
+  "sentAt": "2026-09-27T08:00:00Z",
+  "events": [{
+    "id": "proxy-sample-1",
+    "type": "proxy.runtime.sample",
+    "sequence": 1,
+    "occurredAt": "2026-09-27T08:00:00Z",
+    "payload": {
+      "engine": "mihomo",
+      "uptimeSeconds": 60,
+      "uploadTotal": 1024,
+      "downloadTotal": 4096,
+      "activeConnections": 2
+    }
+  }]
+}

package/fixtures/json-schema/proxy-runtime/invalid/v2ray-connection-snapshot.json

@@ -0,0 +1,10 @@
+{
+  "schemaVersion": "proxy-runtime/v1alpha1",
+  "runtimeId": "proxy-lab-v2ray",
+  "messageType": "connections.snapshot",
+  "occurredAt": "2026-09-27T00:00:00Z",
+  "payload": {
+    "engine": "v2ray",
+    "connections": []
+  }
+}

package/fixtures/json-schema/proxy-runtime/valid/mihomo-observation.json

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": "proxy-runtime/v1alpha1",
+  "runtimeId": "proxy-lab-mihomo",
+  "messageType": "observation",
+  "occurredAt": "2026-09-27T00:00:00Z",
+  "payload": {
+    "engine": "mihomo",
+    "engineVersion": "v1.19.30",
+    "health": "healthy",
+    "capabilities": ["traffic", "connections", "close_connection"],
+    "uptimeSeconds": 60,
+    "uploadTotal": 2048,
+    "downloadTotal": 4096,
+    "activeConnections": 1
+  }
+}

package/fixtures/openapi/AgentPrometheusQueryRequest/invalid/basic.json

@@ -0,0 +1,5 @@
+{
+  "endpoint": "http://prometheus:9090",
+  "query": "",
+  "kind": "proxy"
+}

package/fixtures/openapi/AgentPrometheusQueryRequest/invalid/missing-range-fields.json

@@ -0,0 +1,5 @@
+{
+  "endpoint": "http://prometheus.monitoring.svc:9090",
+  "query": "up",
+  "kind": "range"
+}

package/fixtures/openapi/AgentPrometheusQueryRequest/invalid/zero-start.json

@@ -0,0 +1,8 @@
+{
+  "endpoint": "http://prometheus.monitoring.svc:9090",
+  "query": "up",
+  "kind": "range",
+  "start": 0,
+  "end": 100,
+  "step": 1
+}

package/fixtures/openapi/AgentPrometheusQueryRequest/valid/basic.json

@@ -0,0 +1,8 @@
+{
+  "endpoint": "http://prometheus.monitoring:9090",
+  "query": "up",
+  "kind": "range",
+  "start": 1,
+  "end": 60,
+  "step": 10
+}

package/fixtures/openapi/AgentPrometheusQueryRequest/valid/instant.json

@@ -0,0 +1,5 @@
+{
+  "endpoint": "http://prometheus.monitoring.svc:9090",
+  "query": "up",
+  "kind": "instant"
+}

package/fixtures/openapi/ClusterAgentUpgradeInput/invalid/image.json

@@ -0,0 +1 @@
+{"version":"other.example/agent:latest"}

package/fixtures/openapi/ClusterAgentUpgradeInput/invalid/missing.json

@@ -0,0 +1 @@
+{}

package/fixtures/openapi/ClusterAgentUpgradeInput/invalid/mutable-tag.json

@@ -0,0 +1 @@
+{"version":"latest"}

package/fixtures/openapi/ClusterAgentUpgradeInput/valid/stable.json

@@ -0,0 +1 @@
+{"version":"v0.1.7"}

package/fixtures/openapi/ClusterAgentUpgradeInput/valid/unprefixed.json

@@ -0,0 +1 @@
+{"version":"0.1.7"}

package/fixtures/openapi/KubernetesAgentCustomResourceRule/invalid/basic.json

@@ -0,0 +1,9 @@
+{
+  "apiGroup": "*",
+  "resources": [
+    "*"
+  ],
+  "verbs": [
+    "*"
+  ]
+}

package/fixtures/openapi/KubernetesAgentCustomResourceRule/valid/basic.json

@@ -0,0 +1,14 @@
+{
+  "apiGroup": "example.io",
+  "resources": [
+    "widgets"
+  ],
+  "verbs": [
+    "get",
+    "list",
+    "update"
+  ],
+  "namespaces": [
+    "apps"
+  ]
+}

package/fixtures/openapi/KubernetesAgentCustomResourceRule/valid/dns-names.json

@@ -0,0 +1 @@
+{"apiGroup":"apps--demo.example.io","resources":["widget-sets"],"verbs":["get","list"],"namespaces":["apps"]}

package/fixtures/openapi/KubernetesClusterRegistrationRequest/invalid/basic.json

@@ -0,0 +1,4 @@
+{
+  "name": "private",
+  "prometheusTransport": "fallback"
+}

package/fixtures/openapi/KubernetesClusterRegistrationRequest/valid/basic.json

@@ -0,0 +1,6 @@
+{
+  "name": "private",
+  "connectionMode": "agent",
+  "prometheusTransport": "agent",
+  "agentCustomResourceRules": []
+}

package/fixtures/openapi/KubernetesConfigMapDataInput/invalid/basic.json

@@ -0,0 +1,5 @@
+{
+  "data": {
+    "key": 1
+  }
+}

package/fixtures/openapi/KubernetesConfigMapDataInput/valid/basic.json

@@ -0,0 +1,8 @@
+{
+  "data": {
+    "key": "text"
+  },
+  "binaryData": {
+    "payload": "AAEC"
+  }
+}

package/fixtures/openapi/KubernetesCronJobSuspendInput/invalid/basic.json

@@ -0,0 +1,3 @@
+{
+  "suspend": "yes"
+}

package/fixtures/openapi/KubernetesCronJobSuspendInput/valid/basic.json

@@ -0,0 +1,3 @@
+{
+  "suspend": true
+}

package/fixtures/openapi/KubernetesCustomResourceAccess/invalid/basic.json

@@ -0,0 +1,5 @@
+{
+  "allowedActions": [
+    "*"
+  ]
+}

package/fixtures/openapi/KubernetesCustomResourceAccess/valid/basic.json

@@ -0,0 +1,6 @@
+{
+  "allowedActions": [
+    "list",
+    "view"
+  ]
+}

package/fixtures/openapi/KubernetesCustomResourceDefinition/invalid/empty-uid.json

@@ -0,0 +1 @@
+{"uid":"","name":"widgets.example.com","group":"example.com","scope":"Namespaced","kind":"Widget","plural":"widgets","ageSeconds":42}

package/fixtures/openapi/KubernetesCustomResourceDefinition/valid/deleting-definition.json

@@ -0,0 +1 @@
+{"uid":"crd-uid-1","name":"widgets.example.com","group":"example.com","scope":"Namespaced","kind":"Widget","plural":"widgets","version":"v1","ageSeconds":42,"deletingAt":"2026-09-29T02:00:00Z","allowedActions":["list","delete"]}

package/fixtures/openapi/KubernetesNamespaceCreateInput/invalid/basic.json

@@ -0,0 +1 @@
+{"name":"  "}

package/fixtures/openapi/KubernetesNamespaceCreateInput/valid/basic.json

@@ -0,0 +1 @@
+{"name":"team-a","labels":{"environment":"test"}}

package/fixtures/openapi/KubernetesNodeDrainInput/invalid/basic.json

@@ -0,0 +1,3 @@
+{
+  "timeoutSeconds": 29
+}

package/fixtures/openapi/KubernetesNodeDrainInput/valid/basic.json

@@ -0,0 +1,3 @@
+{
+  "timeoutSeconds": 30
+}

package/fixtures/openapi/KubernetesNodeSchedulabilityInput/invalid/basic.json

@@ -0,0 +1 @@
+{}

package/fixtures/openapi/KubernetesNodeSchedulabilityInput/valid/basic.json

@@ -0,0 +1,3 @@
+{
+  "unschedulable": false
+}

package/fixtures/openapi/KubernetesResourceUpdatePlanRequest/valid/range-kind.json

@@ -0,0 +1,5 @@
+{
+  "kind": "range",
+  "name": "example",
+  "content": "apiVersion: example.io/v1\nkind: range\nmetadata:\n  name: example\n"
+}

package/fixtures/openapi/KubernetesResourceYaml/valid/range-kind.json

@@ -0,0 +1,5 @@
+{
+  "kind": "range",
+  "name": "example",
+  "content": "apiVersion: example.io/v1\nkind: range\nmetadata:\n  name: example\n"
+}

package/fixtures/openapi/KubernetesSecretDataInput/invalid/basic.json

@@ -0,0 +1,5 @@
+{
+  "data": {
+    "example": true
+  }
+}

package/fixtures/openapi/KubernetesSecretDataInput/valid/basic.json

@@ -0,0 +1,5 @@
+{
+  "data": {
+    "example": "example-value"
+  }
+}

package/fixtures/openapi/NetworkProxyConfigurationInput/invalid/empty-content.json

@@ -0,0 +1 @@
+{"expectedRevision":0,"enabled":true,"content":""}

package/fixtures/openapi/NetworkProxyConfigurationInput/valid/enabled.json

@@ -0,0 +1 @@
+{"expectedRevision":0,"enabled":true,"content":"mixed-port: 7890\nsecret: example-test-secret\n"}

package/fixtures/openapi/NetworkProxyInstanceInput/invalid/unknown-engine.json

@@ -0,0 +1 @@
+{"id":"proxy-lab","name":"Proxy Lab","engine":"clash"}

package/fixtures/openapi/NetworkProxyInstanceInput/valid/mihomo.json

@@ -0,0 +1 @@
+{"id":"proxy-lab-mihomo","name":"middleware Mihomo","engine":"mihomo","host":"middleware"}

package/gen/go/sohaapi/client.go

@@ -16,7 +16,7 @@ import (
 	"time"
 )
 
-const defaultUserAgent = "opensoha-contracts/0.1.19"
+const defaultUserAgent = "opensoha-contracts/0.1.21"
 
 type Client struct {
 	BaseURL    string

package/gen/go/sohaapi/client_test.go

@@ -25,6 +25,31 @@ func TestDeliveryPlanStatusLegacyConstants(t *testing.T) {
 	}
 }
 
+func TestRuntimeAndWorkbenchLegacyEnumConstants(t *testing.T) {
+	scopes := map[RuntimeNetworkUsageScope]string{
+		NetworkNamespace: "network_namespace",
+		Process:          "process",
+		Unavailable:      "unavailable",
+	}
+	for scope, want := range scopes {
+		if string(scope) != want || !scope.Valid() {
+			t.Fatalf("RuntimeNetworkUsageScope %q is not the compatible value %q", scope, want)
+		}
+	}
+	statuses := map[WorkbenchAgentStatusEventStatus]string{
+		Cancelled: "cancelled",
+		Failed:    "failed",
+		Queued:    "queued",
+		Running:   "running",
+		Succeeded: "succeeded",
+	}
+	for status, want := range statuses {
+		if string(status) != want || !status.Valid() {
+			t.Fatalf("WorkbenchAgentStatusEventStatus %q is not the compatible value %q", status, want)
+		}
+	}
+}
+
 func TestObservabilityCredentialKeyLegacyTypes(t *testing.T) {
 	dataSource := ObservabilityDataSource{
 		CredentialKeys: []ObservabilityDataSourceCredentialKeys{