@opensoha/contracts 0.1.20 → 0.1.21

package/gen/ts/sohaapi/index.ts

@@ -19569,6 +19569,56 @@ export interface components {
             usesInformerCache: boolean;
             customResourceRules?: components["schemas"]["KubernetesAgentCustomResourceRule"][];
         };
+        KubernetesCustomResourceAccess: {
+            allowedActions: ("list" | "view" | "create" | "update" | "delete")[];
+        };
+        KubernetesCustomResourceAccessEnvelope: {
+            data: components["schemas"]["KubernetesCustomResourceAccess"];
+        };
+        KubernetesClusterRegistrationRequest: {
+            id?: string;
+            name?: string;
+            region?: string;
+            environment?: string;
+            labels?: {
+                [key: string]: string;
+            };
+            connectionMode?: components["schemas"]["KubernetesConnectionMode"];
+            kubeconfig?: string;
+            context?: string;
+            agentEndpoint?: string;
+            agentToken?: string;
+            prometheusBaseUrl?: string;
+            prometheusBearerToken?: string;
+            prometheusClusterLabel?: string;
+            grafanaBaseUrl?: string;
+            prometheusTransport?: components["schemas"]["KubernetesPrometheusTransport"];
+            agentCustomResourceRules?: components["schemas"]["KubernetesAgentCustomResourceRule"][];
+        };
+        KubernetesAgentCustomResourceRule: {
+            apiGroup: string;
+            resources: string[];
+            verbs: ("get" | "list" | "watch" | "create" | "update" | "patch" | "delete")[];
+            /** @description Explicit namespaces; omitted or empty grants cluster-wide access to the named resources only. */
+            namespaces?: string[];
+        };
+        /**
+         * @default direct
+         * @enum {string}
+         */
+        KubernetesPrometheusTransport: "direct" | "agent";
+        /** @description Range queries require start, end and step. The runtime also enforces end greater than start, a maximum 24-hour range and at most 11000 intervals. */
+        AgentPrometheusQueryRequest: {
+            endpoint: string;
+            query: string;
+            /** @enum {string} */
+            kind: "instant" | "range";
+            /** Format: int64 */
+            start?: number;
+            /** Format: int64 */
+            end?: number;
+            step?: number;
+        };
         KubernetesPrometheusDetail: {
             baseUrl?: string;
             clusterLabel?: string;
@@ -20258,6 +20308,62 @@ export interface components {
         KubernetesConfigMapListEnvelope: {
             items: components["schemas"]["KubernetesConfigMap"][];
         };
+        KubernetesNamespaceInput: {
+            name?: string;
+            labels?: components["schemas"]["KubernetesStringMap"];
+            annotations?: components["schemas"]["KubernetesStringMap"];
+        };
+        KubernetesNamespaceCreateInput: {
+            name: string;
+            labels?: components["schemas"]["KubernetesStringMap"];
+            annotations?: components["schemas"]["KubernetesStringMap"];
+        };
+        KubernetesNamespaceEnvelope: {
+            data: components["schemas"]["KubernetesNamespace"];
+        };
+        KubernetesNodeUpdateInput: {
+            labels?: components["schemas"]["KubernetesStringMap"];
+            taints?: components["schemas"]["KubernetesNodeTaint"][];
+        };
+        KubernetesNodeSchedulabilityInput: {
+            unschedulable: boolean;
+        };
+        KubernetesNodeDrainInput: {
+            force?: boolean;
+            deleteEmptyDirData?: boolean;
+            /** @default 300 */
+            timeoutSeconds?: number;
+        };
+        KubernetesResourceYamlInput: {
+            content: string;
+        };
+        KubernetesConfigMapDataInput: {
+            data?: components["schemas"]["KubernetesStringMap"];
+            binaryData?: components["schemas"]["KubernetesStringMap"];
+        };
+        /** @description Data values are plain text. The response detail returns Kubernetes Base64-encoded values. */
+        KubernetesSecretDataInput: {
+            data?: components["schemas"]["KubernetesStringMap"];
+        };
+        KubernetesCronJobSuspendInput: {
+            suspend: boolean;
+        };
+        KubernetesSecretDetail: {
+            name: string;
+            namespace: string;
+            labels?: components["schemas"]["KubernetesStringMap"];
+            annotations?: components["schemas"]["KubernetesStringMap"];
+            /** @description Secret data values encoded with standard Base64. Requires secret-data.view. */
+            data?: components["schemas"]["KubernetesStringMap"];
+            immutable: boolean;
+            createdAt?: string;
+            /** Format: int64 */
+            ageSeconds: number;
+            type: string;
+        };
+        KubernetesSecretDetailEnvelope: {
+            data: components["schemas"]["KubernetesSecretDetail"];
+        };
         KubernetesConfigMapDetail: {
             name: string;
             namespace: string;
@@ -21277,6 +21383,9 @@ export interface components {
             data: components["schemas"]["KubernetesIngressClassDetail"];
         };
         KubernetesCustomResourceDefinition: {
+            uid?: string;
+            /** Format: date-time */
+            deletingAt?: string;
             name: string;
             group: string;
             scope: string;
@@ -21664,6 +21773,32 @@ export interface components {
         PlatformOperationSummaryEnvelope: {
             data: components["schemas"]["PlatformOperationSummary"];
         };
+        ClusterAgentUpgradeInput: {
+            /** @description Explicit stable official Agent version, such as v0.1.7. Registry and container identity cannot be overridden. */
+            version: string;
+        };
+        ClusterAgentUpgradeStatus: {
+            /** @description Version reported by the currently connected Agent process. */
+            version: string;
+            /** @description Desired image of the standard Agent Deployment. */
+            image: string;
+            /** @description Agent version bundled with this Core release. */
+            recommendedVersion: string;
+            rolloutStatus: string;
+            message: string;
+            canUpgrade: boolean;
+            upgradeDisabledReason?: string;
+        };
+        ClusterAgentUpgradeStatusEnvelope: {
+            data: components["schemas"]["ClusterAgentUpgradeStatus"];
+        };
+        ClusterAgentUpgradeResult: {
+            previousImage: string;
+            targetImage: string;
+        };
+        ClusterAgentUpgradeResultEnvelope: {
+            data: components["schemas"]["ClusterAgentUpgradeResult"];
+        };
         AgentInstallation: {
             clusterId: string;
             /** Format: uri */
@@ -25557,9 +25692,101 @@ export interface components {
             items: components["schemas"]["NetworkSiteProfileBinding"][];
         };
         /** @enum {string} */
-        NetworkRuntimeKind: "endpoint" | "gateway" | "nas";
+        NetworkProxyEngine: "mihomo" | "sing-box" | "v2ray";
+        NetworkProxyInstanceInput: {
+            id: string;
+            name: string;
+            engine: components["schemas"]["NetworkProxyEngine"];
+            host?: string;
+        };
+        /** @enum {string} */
+        NetworkProxyInstanceStatus: "unregistered" | "online" | "degraded" | "offline" | "disabled";
+        /** @enum {string} */
+        NetworkProxyCapability: "traffic" | "connections" | "close_connection";
+        NetworkProxyInstance: {
+            id: string;
+            name: string;
+            engine: components["schemas"]["NetworkProxyEngine"];
+            enabled: boolean;
+            host?: string;
+            engineVersion?: string;
+            status: components["schemas"]["NetworkProxyInstanceStatus"];
+            capabilities: components["schemas"]["NetworkProxyCapability"][];
+            /** Format: int64 */
+            desiredRevision: number;
+            /** Format: int64 */
+            observedRevision: number;
+            /** Format: date-time */
+            lastSeenAt?: string;
+            /** Format: date-time */
+            lastSampleAt?: string;
+            reasonCode?: string;
+            /** Format: date-time */
+            createdAt: string;
+            /** Format: date-time */
+            updatedAt: string;
+        };
+        NetworkProxyInstanceEnvelope: {
+            data: components["schemas"]["NetworkProxyInstance"];
+        };
+        NetworkProxyInstanceListEnvelope: {
+            items: components["schemas"]["NetworkProxyInstance"][];
+        };
+        NetworkProxyConfigurationInput: {
+            /** Format: int64 */
+            expectedRevision: number;
+            enabled: boolean;
+            /** Format: password */
+            content: string;
+        };
+        NetworkProxyTrafficSample: {
+            /** Format: date-time */
+            observedAt: string;
+            /** Format: int64 */
+            uploadTotal: number;
+            /** Format: int64 */
+            downloadTotal: number;
+            uploadBytesPerSecond: number;
+            downloadBytesPerSecond: number;
+            activeConnections?: number;
+        };
+        NetworkProxyTrafficEnvelope: {
+            instanceId: string;
+            supported: boolean;
+            samples: components["schemas"]["NetworkProxyTrafficSample"][];
+        };
+        NetworkProxyConnection: {
+            id: string;
+            destination: string;
+            /** @enum {string} */
+            network: "tcp" | "udp" | "other";
+            /** Format: int64 */
+            uploadBytes: number;
+            /** Format: int64 */
+            downloadBytes: number;
+            /** Format: date-time */
+            startedAt?: string;
+        };
+        NetworkProxyConnectionsEnvelope: {
+            instanceId: string;
+            /** @enum {string} */
+            state: "available" | "unsupported" | "unavailable";
+            /** Format: date-time */
+            observedAt?: string;
+            connections: components["schemas"]["NetworkProxyConnection"][];
+        };
+        NetworkProxyCloseCommandEnvelope: {
+            commandId: string;
+            /** @enum {string} */
+            status: "pending" | "closed" | "not-found" | "failed" | "expired";
+            /** Format: date-time */
+            expiresAt: string;
+        };
+        /** @enum {string} */
+        NetworkRuntimeKind: "endpoint" | "gateway" | "nas" | "proxy";
         /** @enum {string} */
         NetworkRuntimeEnrollmentStatus: "pending" | "consumed" | "revoked";
+        /** @description For proxy runtimes, runtimeId identifies an existing proxy instance and deviceId and subjectId must equal runtimeId. */
         NetworkRuntimeEnrollmentInput: {
             runtimeId: string;
             runtimeKind: components["schemas"]["NetworkRuntimeKind"];
@@ -25877,138 +26104,6 @@ export interface components {
         NetworkPolicyPreviewEnvelope: {
             data: components["schemas"]["NetworkPolicyPreviewResult"];
         };
-        KubernetesCustomResourceAccess: {
-            allowedActions: ("list" | "view" | "create" | "update" | "delete")[];
-        };
-        KubernetesCustomResourceAccessEnvelope: {
-            data: components["schemas"]["KubernetesCustomResourceAccess"];
-        };
-        KubernetesClusterRegistrationRequest: {
-            id?: string;
-            name?: string;
-            region?: string;
-            environment?: string;
-            labels?: {
-                [key: string]: string;
-            };
-            connectionMode?: components["schemas"]["KubernetesConnectionMode"];
-            kubeconfig?: string;
-            context?: string;
-            agentEndpoint?: string;
-            agentToken?: string;
-            prometheusBaseUrl?: string;
-            prometheusBearerToken?: string;
-            prometheusClusterLabel?: string;
-            grafanaBaseUrl?: string;
-            prometheusTransport?: components["schemas"]["KubernetesPrometheusTransport"];
-            agentCustomResourceRules?: components["schemas"]["KubernetesAgentCustomResourceRule"][];
-        };
-        KubernetesAgentCustomResourceRule: {
-            apiGroup: string;
-            resources: string[];
-            verbs: ("get" | "list" | "watch" | "create" | "update" | "patch" | "delete")[];
-            /** @description Explicit namespaces; omitted or empty grants cluster-wide access to the named resources only. */
-            namespaces?: string[];
-        };
-        /**
-         * @default direct
-         * @enum {string}
-         */
-        KubernetesPrometheusTransport: "direct" | "agent";
-        /** @description Range queries require start, end and step. The runtime also enforces end greater than start, a maximum 24-hour range and at most 11000 intervals. */
-        AgentPrometheusQueryRequest: {
-            endpoint: string;
-            query: string;
-            /** @enum {string} */
-            kind: "instant" | "range";
-            /** Format: int64 */
-            start?: number;
-            /** Format: int64 */
-            end?: number;
-            step?: number;
-        };
-        KubernetesNamespaceInput: {
-            name?: string;
-            labels?: components["schemas"]["KubernetesStringMap"];
-            annotations?: components["schemas"]["KubernetesStringMap"];
-        };
-        KubernetesNamespaceCreateInput: {
-            name: string;
-            labels?: components["schemas"]["KubernetesStringMap"];
-            annotations?: components["schemas"]["KubernetesStringMap"];
-        };
-        KubernetesNamespaceEnvelope: {
-            data: components["schemas"]["KubernetesNamespace"];
-        };
-        KubernetesNodeUpdateInput: {
-            labels?: components["schemas"]["KubernetesStringMap"];
-            taints?: components["schemas"]["KubernetesNodeTaint"][];
-        };
-        KubernetesNodeSchedulabilityInput: {
-            unschedulable: boolean;
-        };
-        KubernetesNodeDrainInput: {
-            force?: boolean;
-            deleteEmptyDirData?: boolean;
-            /** @default 300 */
-            timeoutSeconds?: number;
-        };
-        KubernetesResourceYamlInput: {
-            content: string;
-        };
-        KubernetesConfigMapDataInput: {
-            data?: components["schemas"]["KubernetesStringMap"];
-            binaryData?: components["schemas"]["KubernetesStringMap"];
-        };
-        /** @description Data values are plain text. The response detail returns Kubernetes Base64-encoded values. */
-        KubernetesSecretDataInput: {
-            data?: components["schemas"]["KubernetesStringMap"];
-        };
-        KubernetesCronJobSuspendInput: {
-            suspend: boolean;
-        };
-        KubernetesSecretDetail: {
-            name: string;
-            namespace: string;
-            labels?: components["schemas"]["KubernetesStringMap"];
-            annotations?: components["schemas"]["KubernetesStringMap"];
-            /** @description Secret data values encoded with standard Base64. Requires secret-data.view. */
-            data?: components["schemas"]["KubernetesStringMap"];
-            immutable: boolean;
-            createdAt?: string;
-            /** Format: int64 */
-            ageSeconds: number;
-            type: string;
-        };
-        KubernetesSecretDetailEnvelope: {
-            data: components["schemas"]["KubernetesSecretDetail"];
-        };
-        ClusterAgentUpgradeInput: {
-            /** @description Explicit stable official Agent version, such as v0.1.7. Registry and container identity cannot be overridden. */
-            version: string;
-        };
-        ClusterAgentUpgradeStatus: {
-            /** @description Version reported by the currently connected Agent process. */
-            version: string;
-            /** @description Desired image of the standard Agent Deployment. */
-            image: string;
-            /** @description Agent version bundled with this Core release. */
-            recommendedVersion: string;
-            rolloutStatus: string;
-            message: string;
-            canUpgrade: boolean;
-            upgradeDisabledReason?: string;
-        };
-        ClusterAgentUpgradeStatusEnvelope: {
-            data: components["schemas"]["ClusterAgentUpgradeStatus"];
-        };
-        ClusterAgentUpgradeResult: {
-            previousImage: string;
-            targetImage: string;
-        };
-        ClusterAgentUpgradeResultEnvelope: {
-            data: components["schemas"]["ClusterAgentUpgradeResult"];
-        };
     };
     responses: {
         /** @description Stable redacted Identity protocol or management error. */
@@ -27251,6 +27346,12 @@ export type KubernetesClusterListEnvelope = components['schemas']['KubernetesClu
 export type KubernetesCacheResourceDiagnostic = components['schemas']['KubernetesCacheResourceDiagnostic'];
 export type KubernetesClusterDiagnostics = components['schemas']['KubernetesClusterDiagnostics'];
 export type KubernetesClusterConnectionDetail = components['schemas']['KubernetesClusterConnectionDetail'];
+export type KubernetesCustomResourceAccess = components['schemas']['KubernetesCustomResourceAccess'];
+export type KubernetesCustomResourceAccessEnvelope = components['schemas']['KubernetesCustomResourceAccessEnvelope'];
+export type KubernetesClusterRegistrationRequest = components['schemas']['KubernetesClusterRegistrationRequest'];
+export type KubernetesAgentCustomResourceRule = components['schemas']['KubernetesAgentCustomResourceRule'];
+export type KubernetesPrometheusTransport = components['schemas']['KubernetesPrometheusTransport'];
+export type AgentPrometheusQueryRequest = components['schemas']['AgentPrometheusQueryRequest'];
 export type KubernetesPrometheusDetail = components['schemas']['KubernetesPrometheusDetail'];
 export type KubernetesMonitoringDetail = components['schemas']['KubernetesMonitoringDetail'];
 export type KubernetesClusterDetail = components['schemas']['KubernetesClusterDetail'];
@@ -27331,6 +27432,18 @@ export type KubernetesReplicationControllerDetail = components['schemas']['Kuber
 export type KubernetesReplicationControllerDetailEnvelope = components['schemas']['KubernetesReplicationControllerDetailEnvelope'];
 export type KubernetesConfigMap = components['schemas']['KubernetesConfigMap'];
 export type KubernetesConfigMapListEnvelope = components['schemas']['KubernetesConfigMapListEnvelope'];
+export type KubernetesNamespaceInput = components['schemas']['KubernetesNamespaceInput'];
+export type KubernetesNamespaceCreateInput = components['schemas']['KubernetesNamespaceCreateInput'];
+export type KubernetesNamespaceEnvelope = components['schemas']['KubernetesNamespaceEnvelope'];
+export type KubernetesNodeUpdateInput = components['schemas']['KubernetesNodeUpdateInput'];
+export type KubernetesNodeSchedulabilityInput = components['schemas']['KubernetesNodeSchedulabilityInput'];
+export type KubernetesNodeDrainInput = components['schemas']['KubernetesNodeDrainInput'];
+export type KubernetesResourceYamlInput = components['schemas']['KubernetesResourceYamlInput'];
+export type KubernetesConfigMapDataInput = components['schemas']['KubernetesConfigMapDataInput'];
+export type KubernetesSecretDataInput = components['schemas']['KubernetesSecretDataInput'];
+export type KubernetesCronJobSuspendInput = components['schemas']['KubernetesCronJobSuspendInput'];
+export type KubernetesSecretDetail = components['schemas']['KubernetesSecretDetail'];
+export type KubernetesSecretDetailEnvelope = components['schemas']['KubernetesSecretDetailEnvelope'];
 export type KubernetesConfigMapDetail = components['schemas']['KubernetesConfigMapDetail'];
 export type KubernetesConfigMapDetailEnvelope = components['schemas']['KubernetesConfigMapDetailEnvelope'];
 export type KubernetesSecretMetadata = components['schemas']['KubernetesSecretMetadata'];
@@ -27503,6 +27616,11 @@ export type PlatformOperationLog = components['schemas']['PlatformOperationLog']
 export type PlatformOperationLogListEnvelope = components['schemas']['PlatformOperationLogListEnvelope'];
 export type PlatformOperationSummary = components['schemas']['PlatformOperationSummary'];
 export type PlatformOperationSummaryEnvelope = components['schemas']['PlatformOperationSummaryEnvelope'];
+export type ClusterAgentUpgradeInput = components['schemas']['ClusterAgentUpgradeInput'];
+export type ClusterAgentUpgradeStatus = components['schemas']['ClusterAgentUpgradeStatus'];
+export type ClusterAgentUpgradeStatusEnvelope = components['schemas']['ClusterAgentUpgradeStatusEnvelope'];
+export type ClusterAgentUpgradeResult = components['schemas']['ClusterAgentUpgradeResult'];
+export type ClusterAgentUpgradeResultEnvelope = components['schemas']['ClusterAgentUpgradeResultEnvelope'];
 export type AgentInstallation = components['schemas']['AgentInstallation'];
 export type AgentInstallationEnvelope = components['schemas']['AgentInstallationEnvelope'];
 export type DockerHostAgentInstallation = components['schemas']['DockerHostAgentInstallation'];
@@ -27980,6 +28098,19 @@ export type NetworkSiteProfileBindingInput = components['schemas']['NetworkSiteP
 export type NetworkSiteProfileBinding = components['schemas']['NetworkSiteProfileBinding'];
 export type NetworkSiteProfileBindingEnvelope = components['schemas']['NetworkSiteProfileBindingEnvelope'];
 export type NetworkSiteProfileBindingListEnvelope = components['schemas']['NetworkSiteProfileBindingListEnvelope'];
+export type NetworkProxyEngine = components['schemas']['NetworkProxyEngine'];
+export type NetworkProxyInstanceInput = components['schemas']['NetworkProxyInstanceInput'];
+export type NetworkProxyInstanceStatus = components['schemas']['NetworkProxyInstanceStatus'];
+export type NetworkProxyCapability = components['schemas']['NetworkProxyCapability'];
+export type NetworkProxyInstance = components['schemas']['NetworkProxyInstance'];
+export type NetworkProxyInstanceEnvelope = components['schemas']['NetworkProxyInstanceEnvelope'];
+export type NetworkProxyInstanceListEnvelope = components['schemas']['NetworkProxyInstanceListEnvelope'];
+export type NetworkProxyConfigurationInput = components['schemas']['NetworkProxyConfigurationInput'];
+export type NetworkProxyTrafficSample = components['schemas']['NetworkProxyTrafficSample'];
+export type NetworkProxyTrafficEnvelope = components['schemas']['NetworkProxyTrafficEnvelope'];
+export type NetworkProxyConnection = components['schemas']['NetworkProxyConnection'];
+export type NetworkProxyConnectionsEnvelope = components['schemas']['NetworkProxyConnectionsEnvelope'];
+export type NetworkProxyCloseCommandEnvelope = components['schemas']['NetworkProxyCloseCommandEnvelope'];
 export type NetworkRuntimeKind = components['schemas']['NetworkRuntimeKind'];
 export type NetworkRuntimeEnrollmentStatus = components['schemas']['NetworkRuntimeEnrollmentStatus'];
 export type NetworkRuntimeEnrollmentInput = components['schemas']['NetworkRuntimeEnrollmentInput'];
@@ -28031,29 +28162,6 @@ export type NetworkSessionCommandEnvelope = components['schemas']['NetworkSessio
 export type NetworkPolicyPreviewRequest = components['schemas']['NetworkPolicyPreviewRequest'];
 export type NetworkPolicyPreviewResult = components['schemas']['NetworkPolicyPreviewResult'];
 export type NetworkPolicyPreviewEnvelope = components['schemas']['NetworkPolicyPreviewEnvelope'];
-export type KubernetesCustomResourceAccess = components['schemas']['KubernetesCustomResourceAccess'];
-export type KubernetesCustomResourceAccessEnvelope = components['schemas']['KubernetesCustomResourceAccessEnvelope'];
-export type KubernetesClusterRegistrationRequest = components['schemas']['KubernetesClusterRegistrationRequest'];
-export type KubernetesAgentCustomResourceRule = components['schemas']['KubernetesAgentCustomResourceRule'];
-export type KubernetesPrometheusTransport = components['schemas']['KubernetesPrometheusTransport'];
-export type AgentPrometheusQueryRequest = components['schemas']['AgentPrometheusQueryRequest'];
-export type KubernetesNamespaceInput = components['schemas']['KubernetesNamespaceInput'];
-export type KubernetesNamespaceCreateInput = components['schemas']['KubernetesNamespaceCreateInput'];
-export type KubernetesNamespaceEnvelope = components['schemas']['KubernetesNamespaceEnvelope'];
-export type KubernetesNodeUpdateInput = components['schemas']['KubernetesNodeUpdateInput'];
-export type KubernetesNodeSchedulabilityInput = components['schemas']['KubernetesNodeSchedulabilityInput'];
-export type KubernetesNodeDrainInput = components['schemas']['KubernetesNodeDrainInput'];
-export type KubernetesResourceYamlInput = components['schemas']['KubernetesResourceYamlInput'];
-export type KubernetesConfigMapDataInput = components['schemas']['KubernetesConfigMapDataInput'];
-export type KubernetesSecretDataInput = components['schemas']['KubernetesSecretDataInput'];
-export type KubernetesCronJobSuspendInput = components['schemas']['KubernetesCronJobSuspendInput'];
-export type KubernetesSecretDetail = components['schemas']['KubernetesSecretDetail'];
-export type KubernetesSecretDetailEnvelope = components['schemas']['KubernetesSecretDetailEnvelope'];
-export type ClusterAgentUpgradeInput = components['schemas']['ClusterAgentUpgradeInput'];
-export type ClusterAgentUpgradeStatus = components['schemas']['ClusterAgentUpgradeStatus'];
-export type ClusterAgentUpgradeStatusEnvelope = components['schemas']['ClusterAgentUpgradeStatusEnvelope'];
-export type ClusterAgentUpgradeResult = components['schemas']['ClusterAgentUpgradeResult'];
-export type ClusterAgentUpgradeResultEnvelope = components['schemas']['ClusterAgentUpgradeResultEnvelope'];
 export type ResponseIdentityError = components['responses']['IdentityError'];
 export type ResponseError = components['responses']['Error'];
 export type ResponseComputeError = components['responses']['ComputeError'];

package/go.mod

@@ -3,10 +3,12 @@ module github.com/opensoha/soha-contracts
 go 1.26.6
 
 require (
+	github.com/google/uuid v1.6.0
 	github.com/oapi-codegen/runtime v1.4.2
 	github.com/santhosh-tekuri/jsonschema/v6 v6.0.2
 	go.yaml.in/yaml/v3 v3.0.4
 	helm.sh/helm/v4 v4.1.4
+	k8s.io/api v0.35.1
 	k8s.io/apimachinery v0.35.1
 	k8s.io/cli-runtime v0.35.1
 	k8s.io/client-go v0.35.1
@@ -49,7 +51,6 @@ require (
 	github.com/google/btree v1.1.3 // indirect
 	github.com/google/gnostic-models v0.7.0 // indirect
 	github.com/google/go-cmp v0.7.0 // indirect
-	github.com/google/uuid v1.6.0 // indirect
 	github.com/gosuri/uitable v0.0.4 // indirect
 	github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect
 	github.com/huandu/xstrings v1.5.0 // indirect
@@ -93,7 +94,7 @@ require (
 	golang.org/x/crypto v0.51.0 // indirect
 	golang.org/x/net v0.55.0 // indirect
 	golang.org/x/oauth2 v0.34.0 // indirect
-	golang.org/x/sync v0.21.0 // indirect
+	golang.org/x/sync v0.22.0 // indirect
 	golang.org/x/sys v0.45.0 // indirect
 	golang.org/x/term v0.43.0 // indirect
 	golang.org/x/text v0.39.0 // indirect
@@ -102,7 +103,6 @@ require (
 	gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	k8s.io/api v0.35.1 // indirect
 	k8s.io/apiextensions-apiserver v0.35.1 // indirect
 	k8s.io/apiserver v0.35.1 // indirect
 	k8s.io/component-base v0.35.1 // indirect
@@ -110,7 +110,7 @@ require (
 	k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 // indirect
 	k8s.io/kubectl v0.35.1 // indirect
 	k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 // indirect
-	oras.land/oras-go/v2 v2.6.0 // indirect
+	oras.land/oras-go/v2 v2.6.2 // indirect
 	sigs.k8s.io/controller-runtime v0.23.1 // indirect
 	sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
 	sigs.k8s.io/kustomize/api v0.21.1 // indirect

package/go.sum

@@ -333,8 +333,8 @@ golang.org/x/net v0.55.0 h1:bcvxaJn3e1U6InsFWt1JUq1aSjnRxLzT2rtD2KfkDF8=
 golang.org/x/net v0.55.0/go.mod h1:L5U2KuzuOe1lY7Z+aWVIKK6qEeJXnXV9yzGA+WCHJww=
 golang.org/x/oauth2 v0.34.0 h1:hqK/t4AKgbqWkdkcAeI8XLmbK+4m4G5YeQRrmiotGlw=
 golang.org/x/oauth2 v0.34.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
-golang.org/x/sync v0.21.0 h1:HLII4xRRTtCRkxYp4HNFF0Js/Og6q2i++KXbg0gHCwM=
-golang.org/x/sync v0.21.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=
+golang.org/x/sync v0.22.0 h1:SZjpbeLmrCk4xhRSZFNZW5gFUeCeFgjekvI/+gfScek=
+golang.org/x/sync v0.22.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=
 golang.org/x/sys v0.0.0-20210616094352-59db8d763f22/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.45.0 h1:dO4czNzziLiiXplLQgBCEpCvXQ3dnkn0SdaZSYdQ+FY=
@@ -391,8 +391,8 @@ k8s.io/kubectl v0.35.1 h1:zP3Er8C5i1dcAFUMh9Eva0kVvZHptXIn/+8NtRWMxwg=
 k8s.io/kubectl v0.35.1/go.mod h1:cQ2uAPs5IO/kx8R5s5J3Ihv3VCYwrx0obCXum0CvnXo=
 k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 h1:SjGebBtkBqHFOli+05xYbK8YF1Dzkbzn+gDM4X9T4Ck=
 k8s.io/utils v0.0.0-20251002143259-bc988d571ff4/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
-oras.land/oras-go/v2 v2.6.0 h1:X4ELRsiGkrbeox69+9tzTu492FMUu7zJQW6eJU+I2oc=
-oras.land/oras-go/v2 v2.6.0/go.mod h1:magiQDfG6H1O9APp+rOsvCPcW1GD2MM7vgnKY0Y+u1o=
+oras.land/oras-go/v2 v2.6.2 h1:N04RXngAp1LJKTG6ifz3xHPipasEkWr+hFmInja5YKo=
+oras.land/oras-go/v2 v2.6.2/go.mod h1:PlTtg4JTDJkDe8yVHpM2wz7/YDc00GVas+i4jAW2TZ4=
 sigs.k8s.io/controller-runtime v0.23.1 h1:TjJSM80Nf43Mg21+RCy3J70aj/W6KyvDtOlpKf+PupE=
 sigs.k8s.io/controller-runtime v0.23.1/go.mod h1:B6COOxKptp+YaUT5q4l6LqUJTRpizbgf9KSRNdQGns0=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg=

package/network/README.md

@@ -4,6 +4,18 @@ The JSON Schemas in this directory define strict serialized shapes. Every
 consumer must also enforce the cross-field rules below before using a message
 for authorization, routing, firewall configuration or accounting.
 
+## Server proxy telemetry
+
+- A Linux proxy runtime uses a separate `network-ingest/proxy/{instanceId}`
+  certificate to submit `proxy.runtime.sample`; its control certificate cannot
+  be used for ingest. The authenticated producer ID is the managed instance ID.
+- Each event records sampled cumulative bytes and process uptime at
+  `occurredAt`. Readers derive rates only between samples from the same process
+  lifetime with nondecreasing counters. A process restart starts a new series.
+- The existing `proxy.flow.aggregate` remains an endpoint Mihomo profile
+  window and is not a server instance sample. Neither event authorizes access
+  or exposes individual connections.
+
 ## Runtime messages
 
 - Runtime mTLS certificates carry exactly one Soha URI SAN:

package/network/network-ingest-event.schema.json

@@ -10,7 +10,7 @@
     "schemaVersion": { "const": "network-ingest/v1alpha1" },
     "batchId": { "$ref": "#/$defs/Identifier" },
     "producerId": { "$ref": "#/$defs/Identifier" },
-    "producerKind": { "enum": ["endpoint", "gateway", "freeradius", "network-control"] },
+    "producerKind": { "enum": ["endpoint", "gateway", "freeradius", "network-control", "proxy"] },
     "sentAt": { "type": "string", "format": "date-time" },
     "events": {
       "type": "array",
@@ -207,7 +207,8 @@
             "radius.accounting",
             "network.flow.aggregate",
             "network.connection.summary",
-            "proxy.flow.aggregate"
+            "proxy.flow.aggregate",
+            "proxy.runtime.sample"
           ]
         },
         "sequence": { "type": "integer", "minimum": 0 },
@@ -221,7 +222,8 @@
             { "$ref": "#/$defs/RadiusAccounting" },
             { "$ref": "#/$defs/FlowAggregate" },
             { "$ref": "#/$defs/ConnectionSummary" },
-            { "$ref": "#/$defs/ProxyFlowAggregate" }
+            { "$ref": "#/$defs/ProxyFlowAggregate" },
+            { "$ref": "#/$defs/ProxyRuntimeSample" }
           ]
         }
       },
@@ -302,6 +304,10 @@
         {
           "if": { "properties": { "type": { "const": "proxy.flow.aggregate" } }, "required": ["type"] },
           "then": { "properties": { "payload": { "$ref": "#/$defs/ProxyFlowAggregate" } } }
+        },
+        {
+          "if": { "properties": { "type": { "const": "proxy.runtime.sample" } }, "required": ["type"] },
+          "then": { "properties": { "payload": { "$ref": "#/$defs/ProxyRuntimeSample" } } }
         }
       ]
     },
@@ -410,6 +416,18 @@
         "downloadBytes": { "type": "integer", "minimum": 0, "maximum": 9223372036854775807 },
         "activeConnections": { "type": "integer", "minimum": 0, "maximum": 1000000 }
       }
+    },
+    "ProxyRuntimeSample": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["engine", "uptimeSeconds", "uploadTotal", "downloadTotal"],
+      "properties": {
+        "engine": { "enum": ["mihomo", "sing-box", "v2ray"] },
+        "uptimeSeconds": { "type": "integer", "minimum": 0 },
+        "uploadTotal": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 },
+        "downloadTotal": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 },
+        "activeConnections": { "type": "integer", "minimum": 0, "maximum": 1000000 }
+      }
     }
   }
 }