@opensoha/contracts 0.1.20 → 0.1.22

package/auth/catalog_generated.go

@@ -6,8 +6,8 @@ import _ "embed"
 
 const (
 	PermissionCatalogVersion = "2.0.0"
-	PermissionCatalogContentSHA256 = "5b4c9eed71c549d61a6fd538db542681cb2932619d66ab031c74fcbaaa0c9867"
-	PermissionCatalogSHA256 = "e1e4bab807f64894c9bbde245394902fb1e82253d5847585102560ea6f853894"
+	PermissionCatalogContentSHA256 = "be2c1caf05e680f75b40e6ce017e55f1c35f7977cf045ca3ec562adbd6cb37dc"
+	PermissionCatalogSHA256 = "2822fab5a3963270e806884ce46402bb42f3384d5530e6ae0acc8bf253811de5"
 )
 
 //go:embed permission-catalog.json

package/auth/permission-catalog.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "authorization.opensoha.io/v1",
   "catalogVersion": "2.0.0",
-  "contentHash": "sha256:5b4c9eed71c549d61a6fd538db542681cb2932619d66ab031c74fcbaaa0c9867",
+  "contentHash": "sha256:be2c1caf05e680f75b40e6ce017e55f1c35f7977cf045ca3ec562adbd6cb37dc",
   "permissions": [
     {
       "key": "access.directory.create",
@@ -4998,6 +4998,86 @@
       "status": "active",
       "assignable": true
     },
+    {
+      "key": "network_access.proxy_connections.close",
+      "domain": "network_access",
+      "resource": "proxy_connections",
+      "action": "close",
+      "displayName": "断开代理连接",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.proxy_connections.view",
+      "domain": "network_access",
+      "resource": "proxy_connections",
+      "action": "view",
+      "displayName": "查看代理连接详情",
+      "riskLevel": "read",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.proxy_instances.create",
+      "domain": "network_access",
+      "resource": "proxy_instances",
+      "action": "create",
+      "displayName": "创建代理实例",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.proxy_instances.update",
+      "domain": "network_access",
+      "resource": "proxy_instances",
+      "action": "update",
+      "displayName": "更新代理实例配置",
+      "riskLevel": "high",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "eligible",
+      "status": "active",
+      "assignable": true
+    },
+    {
+      "key": "network_access.proxy_instances.view",
+      "domain": "network_access",
+      "resource": "proxy_instances",
+      "action": "view",
+      "displayName": "查看代理实例",
+      "riskLevel": "read",
+      "scopeKinds": [
+        "tenant",
+        "workspace",
+        "resource"
+      ],
+      "approvalPolicy": "never",
+      "status": "active",
+      "assignable": true
+    },
     {
       "key": "network_access.resources.create",
       "domain": "network_access",

package/compat/json-schema-ecosystem-0.1.0.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.20",
+  "version": "0.1.22",
   "schemas": {
     "plugins/plugin-manifest.schema.json": {
       "rootRequired": ["id", "name", "publisher", "type", "version"],

package/compat/openapi-loose-boundaries-0.1.0.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.20",
+  "version": "0.1.22",
   "generatedFrom": "openapi/soha-api.yaml",
   "entries": [
     {

package/fixtures/json-schema/network-ingest-event/invalid/proxy-runtime-negative-total.json

@@ -0,0 +1,19 @@
+{
+  "schemaVersion": "network-ingest/v1alpha1",
+  "batchId": "proxy-sample-batch-invalid",
+  "producerId": "proxy-mihomo",
+  "producerKind": "proxy",
+  "sentAt": "2026-09-27T08:00:00Z",
+  "events": [{
+    "id": "proxy-sample-invalid",
+    "type": "proxy.runtime.sample",
+    "sequence": 1,
+    "occurredAt": "2026-09-27T08:00:00Z",
+    "payload": {
+      "engine": "mihomo",
+      "uptimeSeconds": 60,
+      "uploadTotal": -1,
+      "downloadTotal": 4096
+    }
+  }]
+}

package/fixtures/json-schema/network-ingest-event/valid/proxy-runtime-sample.json

@@ -0,0 +1,20 @@
+{
+  "schemaVersion": "network-ingest/v1alpha1",
+  "batchId": "proxy-sample-batch-1",
+  "producerId": "proxy-mihomo",
+  "producerKind": "proxy",
+  "sentAt": "2026-09-27T08:00:00Z",
+  "events": [{
+    "id": "proxy-sample-1",
+    "type": "proxy.runtime.sample",
+    "sequence": 1,
+    "occurredAt": "2026-09-27T08:00:00Z",
+    "payload": {
+      "engine": "mihomo",
+      "uptimeSeconds": 60,
+      "uploadTotal": 1024,
+      "downloadTotal": 4096,
+      "activeConnections": 2
+    }
+  }]
+}

package/fixtures/json-schema/proxy-runtime/invalid/v2ray-connection-snapshot.json

@@ -0,0 +1,10 @@
+{
+  "schemaVersion": "proxy-runtime/v1alpha1",
+  "runtimeId": "proxy-lab-v2ray",
+  "messageType": "connections.snapshot",
+  "occurredAt": "2026-09-27T00:00:00Z",
+  "payload": {
+    "engine": "v2ray",
+    "connections": []
+  }
+}

package/fixtures/json-schema/proxy-runtime/valid/mihomo-observation.json

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": "proxy-runtime/v1alpha1",
+  "runtimeId": "proxy-lab-mihomo",
+  "messageType": "observation",
+  "occurredAt": "2026-09-27T00:00:00Z",
+  "payload": {
+    "engine": "mihomo",
+    "engineVersion": "v1.19.30",
+    "health": "healthy",
+    "capabilities": ["traffic", "connections", "close_connection"],
+    "uptimeSeconds": 60,
+    "uploadTotal": 2048,
+    "downloadTotal": 4096,
+    "activeConnections": 1
+  }
+}

package/fixtures/openapi/KubernetesCustomResourceDefinition/invalid/empty-uid.json

@@ -0,0 +1 @@
+{"uid":"","name":"widgets.example.com","group":"example.com","scope":"Namespaced","kind":"Widget","plural":"widgets","ageSeconds":42}

package/fixtures/openapi/KubernetesCustomResourceDefinition/valid/deleting-definition.json

@@ -0,0 +1 @@
+{"uid":"crd-uid-1","name":"widgets.example.com","group":"example.com","scope":"Namespaced","kind":"Widget","plural":"widgets","version":"v1","ageSeconds":42,"deletingAt":"2026-09-29T02:00:00Z","allowedActions":["list","delete"]}

package/fixtures/openapi/KubernetesResourceUpdatePlanRequest/valid/range-kind.json

@@ -0,0 +1,5 @@
+{
+  "kind": "range",
+  "name": "example",
+  "content": "apiVersion: example.io/v1\nkind: range\nmetadata:\n  name: example\n"
+}

package/fixtures/openapi/KubernetesResourceYaml/valid/range-kind.json

@@ -0,0 +1,5 @@
+{
+  "kind": "range",
+  "name": "example",
+  "content": "apiVersion: example.io/v1\nkind: range\nmetadata:\n  name: example\n"
+}

package/fixtures/openapi/NetworkProxyConfigurationInput/invalid/empty-content.json

@@ -0,0 +1 @@
+{"expectedRevision":0,"enabled":true,"content":""}

package/fixtures/openapi/NetworkProxyConfigurationInput/valid/enabled.json

@@ -0,0 +1 @@
+{"expectedRevision":0,"enabled":true,"content":"mixed-port: 7890\nsecret: example-test-secret\n"}

package/fixtures/openapi/NetworkProxyInstanceInput/invalid/unknown-engine.json

@@ -0,0 +1 @@
+{"id":"proxy-lab","name":"Proxy Lab","engine":"clash"}

package/fixtures/openapi/NetworkProxyInstanceInput/valid/mihomo.json

@@ -0,0 +1 @@
+{"id":"proxy-lab-mihomo","name":"middleware Mihomo","engine":"mihomo","host":"middleware"}

package/gen/go/sohaapi/client.go

@@ -16,7 +16,7 @@ import (
 	"time"
 )
 
-const defaultUserAgent = "opensoha-contracts/0.1.20"
+const defaultUserAgent = "opensoha-contracts/0.1.22"
 
 type Client struct {
 	BaseURL    string

package/gen/go/sohaapi/client_test.go

@@ -25,6 +25,31 @@ func TestDeliveryPlanStatusLegacyConstants(t *testing.T) {
 	}
 }
 
+func TestRuntimeAndWorkbenchLegacyEnumConstants(t *testing.T) {
+	scopes := map[RuntimeNetworkUsageScope]string{
+		NetworkNamespace: "network_namespace",
+		Process:          "process",
+		Unavailable:      "unavailable",
+	}
+	for scope, want := range scopes {
+		if string(scope) != want || !scope.Valid() {
+			t.Fatalf("RuntimeNetworkUsageScope %q is not the compatible value %q", scope, want)
+		}
+	}
+	statuses := map[WorkbenchAgentStatusEventStatus]string{
+		Cancelled: "cancelled",
+		Failed:    "failed",
+		Queued:    "queued",
+		Running:   "running",
+		Succeeded: "succeeded",
+	}
+	for status, want := range statuses {
+		if string(status) != want || !status.Valid() {
+			t.Fatalf("WorkbenchAgentStatusEventStatus %q is not the compatible value %q", status, want)
+		}
+	}
+}
+
 func TestObservabilityCredentialKeyLegacyTypes(t *testing.T) {
 	dataSource := ObservabilityDataSource{
 		CredentialKeys: []ObservabilityDataSourceCredentialKeys{

package/gen/go/sohaapi/types.go

@@ -6749,6 +6749,27 @@ func (e NetworkPolicyPath) Valid() bool {
 	}
 }
 
+// Defines values for NetworkProxyEngine.
+const (
+	NetworkProxyEngineMihomo  NetworkProxyEngine = "mihomo"
+	NetworkProxyEngineSingBox NetworkProxyEngine = "sing-box"
+	NetworkProxyEngineV2Ray   NetworkProxyEngine = "v2ray"
+)
+
+// Valid indicates whether the value is a known member of the NetworkProxyEngine enum.
+func (e NetworkProxyEngine) Valid() bool {
+	switch e {
+	case NetworkProxyEngineMihomo:
+		return true
+	case NetworkProxyEngineSingBox:
+		return true
+	case NetworkProxyEngineV2Ray:
+		return true
+	default:
+		return false
+	}
+}
+
 // Defines values for NetworkResourceKind.
 const (
 	NetworkResourceKindCIDR NetworkResourceKind = "cidr"
@@ -6820,6 +6841,7 @@ const (
 	NetworkRuntimeKindEndpoint NetworkRuntimeKind = "endpoint"
 	NetworkRuntimeKindGateway  NetworkRuntimeKind = "gateway"
 	NetworkRuntimeKindNAS      NetworkRuntimeKind = "nas"
+	NetworkRuntimeKindProxy    NetworkRuntimeKind = "proxy"
 )
 
 // Valid indicates whether the value is a known member of the NetworkRuntimeKind enum.
@@ -6831,6 +6853,8 @@ func (e NetworkRuntimeKind) Valid() bool {
 		return true
 	case NetworkRuntimeKindNAS:
 		return true
+	case NetworkRuntimeKindProxy:
+		return true
 	default:
 		return false
 	}
@@ -18305,16 +18329,18 @@ type KubernetesCustomResource struct {
 
 // KubernetesCustomResourceDefinition defines model for KubernetesCustomResourceDefinition.
 type KubernetesCustomResourceDefinition struct {
-	AgeSeconds     int64    `json:"ageSeconds"`
-	AllowedActions []string `json:"allowedActions,omitempty"`
-	CreatedAt      string   `json:"createdAt,omitempty"`
-	Group          string   `json:"group"`
-	Kind           string   `json:"kind"`
-	Name           string   `json:"name"`
-	Plural         string   `json:"plural"`
-	Scope          string   `json:"scope"`
-	Version        string   `json:"version,omitempty"`
-	Versions       []string `json:"versions,omitempty"`
+	AgeSeconds     int64      `json:"ageSeconds"`
+	AllowedActions []string   `json:"allowedActions,omitempty"`
+	CreatedAt      string     `json:"createdAt,omitempty"`
+	DeletingAt     *time.Time `json:"deletingAt,omitempty"`
+	Group          string     `json:"group"`
+	Kind           string     `json:"kind"`
+	Name           string     `json:"name"`
+	Plural         string     `json:"plural"`
+	Scope          string     `json:"scope"`
+	UID            string     `json:"uid,omitempty"`
+	Version        string     `json:"version,omitempty"`
+	Versions       []string   `json:"versions,omitempty"`
 }
 
 // KubernetesCustomResourceDefinitionListEnvelope defines model for KubernetesCustomResourceDefinitionListEnvelope.
@@ -23022,6 +23048,16 @@ type NetworkPolicySubjects struct {
 	Users []string `json:"users"`
 }
 
+// NetworkProxyConfigurationInput defines model for NetworkProxyConfigurationInput.
+type NetworkProxyConfigurationInput struct {
+	Content          string `json:"content,omitempty"`
+	Enabled          bool   `json:"enabled"`
+	ExpectedRevision int64  `json:"expectedRevision"`
+}
+
+// NetworkProxyEngine defines model for NetworkProxyEngine.
+type NetworkProxyEngine string
+
 // NetworkProxyFlowSummary defines model for NetworkProxyFlowSummary.
 type NetworkProxyFlowSummary struct {
 	ActiveConnections int64             `json:"activeConnections"`
@@ -23036,6 +23072,14 @@ type NetworkProxyFlowSummary struct {
 	UploadBytes       int64             `json:"uploadBytes"`
 }
 
+// NetworkProxyInstanceInput defines model for NetworkProxyInstanceInput.
+type NetworkProxyInstanceInput struct {
+	Engine NetworkProxyEngine `json:"engine"`
+	Host   string             `json:"host,omitempty"`
+	ID     string             `json:"id"`
+	Name   string             `json:"name"`
+}
+
 // NetworkResource defines model for NetworkResource.
 type NetworkResource struct {
 	CreatedAt time.Time               `json:"createdAt"`
@@ -23100,7 +23144,7 @@ type NetworkRuntimeEnrollmentEnvelope struct {
 	Data NetworkRuntimeEnrollment `json:"data"`
 }
 
-// NetworkRuntimeEnrollmentInput defines model for NetworkRuntimeEnrollmentInput.
+// NetworkRuntimeEnrollmentInput For proxy runtimes, runtimeId identifies an existing proxy instance and deviceId and subjectId must equal runtimeId.
 type NetworkRuntimeEnrollmentInput struct {
 	DeviceID    string             `json:"deviceId"`
 	RuntimeID   string             `json:"runtimeId"`
@@ -39985,3 +40029,27 @@ const ListAIGatewayRelayUpstreamsParamsStatusDegraded ListAIGatewayRelayUpstream
 
 // Deprecated: retained for Go SDK source compatibility.
 const ListAIGatewayRelayUpstreamsParamsStatusDisabled ListAIGatewayRelayUpstreamsParamsStatus = "disabled"
+
+// Deprecated: retained for Go SDK source compatibility.
+const RuntimeNetworkUsageScopeNetworkNamespace RuntimeNetworkUsageScope = "network_namespace"
+
+// Deprecated: retained for Go SDK source compatibility.
+const RuntimeNetworkUsageScopeProcess RuntimeNetworkUsageScope = "process"
+
+// Deprecated: retained for Go SDK source compatibility.
+const RuntimeNetworkUsageScopeUnavailable RuntimeNetworkUsageScope = "unavailable"
+
+// Deprecated: retained for Go SDK source compatibility.
+const WorkbenchAgentStatusEventStatusCancelled WorkbenchAgentStatusEventStatus = "cancelled"
+
+// Deprecated: retained for Go SDK source compatibility.
+const WorkbenchAgentStatusEventStatusFailed WorkbenchAgentStatusEventStatus = "failed"
+
+// Deprecated: retained for Go SDK source compatibility.
+const WorkbenchAgentStatusEventStatusQueued WorkbenchAgentStatusEventStatus = "queued"
+
+// Deprecated: retained for Go SDK source compatibility.
+const WorkbenchAgentStatusEventStatusRunning WorkbenchAgentStatusEventStatus = "running"
+
+// Deprecated: retained for Go SDK source compatibility.
+const WorkbenchAgentStatusEventStatusSucceeded WorkbenchAgentStatusEventStatus = "succeeded"

package/gen/go/sohaapi/types_test.go

@@ -5,6 +5,36 @@ import (
 	"testing"
 )
 
+func TestNetworkProxyInputsRemainInGoSDK(t *testing.T) {
+	for _, input := range []struct {
+		raw   string
+		value any
+	}{
+		{`{"id":"proxy-a","name":"Proxy A","engine":"mihomo","host":"host-a"}`, &NetworkProxyInstanceInput{}},
+		{`{"expectedRevision":3,"enabled":false,"content":"mode: rule"}`, &NetworkProxyConfigurationInput{}},
+	} {
+		if err := json.Unmarshal([]byte(input.raw), input.value); err != nil {
+			t.Fatal(err)
+		}
+		encoded, err := json.Marshal(input.value)
+		if err != nil {
+			t.Fatal(err)
+		}
+		var before, after map[string]any
+		if err := json.Unmarshal([]byte(input.raw), &before); err != nil {
+			t.Fatal(err)
+		}
+		if err := json.Unmarshal(encoded, &after); err != nil {
+			t.Fatal(err)
+		}
+		for name, value := range before {
+			if after[name] != value {
+				t.Fatalf("%s changed during round trip: %s", name, encoded)
+			}
+		}
+	}
+}
+
 func TestToolInvocationResultPreservesAbsentVersion(t *testing.T) {
 	for _, input := range []string{
 		`{"toolName":"legacy","riskLevel":"read","requiresApproval":false,"result":"success"}`,