npm - @opensoha/contracts - Versions diffs - 0.1.23 → 0.1.24 - Mend

@opensoha/contracts 0.1.23 → 0.1.24

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (360) hide show

package/connectors/connector-action.schema.json ADDED Viewed

@@ -0,0 +1,138 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://contracts.opensoha.dev/connectors/connector-action.schema.json",
+  "title": "OpenSoha credential-bearing connector action v1",
+  "description": "Only over authenticated HTTPS or loopback transport, after an action explicitly declares credentialProtocol and aliases. Core pins and authorizes references. Credentials are invocation-local; never persist them in logs, queues, events or results. Actions without credentials keep the unversioned envelope. Runtime additionally rejects a canonical UTF-8 JSON envelope exceeding 1 MiB before dispatch. Cancellation signals and response rejection are cooperative, not proof that an external side effect stopped; action implementations must honor the signal and reconcile effects. All string material including structured keys is confidential.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "action",
+    "input",
+    "credentials"
+  ],
+  "properties": {
+    "schemaVersion": {
+      "const": "opensoha.dev/connector-action/v1"
+    },
+    "action": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128
+    },
+    "input": {
+      "type": "object"
+    },
+    "requestId": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128
+    },
+    "credentials": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "expiresAt",
+        "entries"
+      ],
+      "properties": {
+        "expiresAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "Reject expired or more than two minutes in the future; signal cancellation and reject late responses when reached or caller disconnects. The connector must cooperate; this does not prove external effects stopped."
+        },
+        "entries": {
+          "type": "object",
+          "minProperties": 1,
+          "maxProperties": 16,
+          "propertyNames": {
+            "type": "string",
+            "pattern": "^[A-Z][A-Z0-9_]{0,63}$"
+          },
+          "additionalProperties": {
+            "$ref": "#/$defs/Credential"
+          }
+        }
+      }
+    }
+  },
+  "$defs": {
+    "Credential": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "reference",
+        "value"
+      ],
+      "properties": {
+        "reference": {
+          "type": "string",
+          "maxLength": 512,
+          "pattern": "^soha://secrets/[A-Za-z0-9._-]+/versions/[1-9][0-9]*$"
+        },
+        "value": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 65536,
+          "description": "Runtime additionally enforces a 64 KiB UTF-8 byte limit; structured material is bounded to depth 16 and 64 distinct nonempty strings including keys and the opaque value for redaction."
+        }
+      }
+    },
+    "ActionDefinition": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "name",
+        "description",
+        "inputSchema"
+      ],
+      "properties": {
+        "name": {
+          "type": "string",
+          "minLength": 1
+        },
+        "description": {
+          "type": "string",
+          "minLength": 1
+        },
+        "inputSchema": {
+          "type": "object"
+        },
+        "credentialProtocol": {
+          "const": "opensoha.dev/connector-action/v1",
+          "description": "Opt-in support for per-call delivery, not a requirement for every action call. Without credentials the existing envelope remains valid; actions requiring authentication must reject missing credentials themselves."
+        },
+        "credentialAliases": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 16,
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "pattern": "^[A-Z][A-Z0-9_]{0,63}$"
+          }
+        }
+      },
+      "dependentRequired": {
+        "credentialProtocol": [
+          "credentialAliases"
+        ],
+        "credentialAliases": [
+          "credentialProtocol"
+        ]
+      },
+      "if": {
+        "required": [
+          "credentialProtocol"
+        ]
+      },
+      "then": {
+        "properties": {
+          "name": {
+            "maxLength": 128
+          }
+        }
+      }
+    }
+  }
+}

package/fixtures/json-schema/connector-action/invalid/empty-values.json ADDED Viewed

@@ -0,0 +1,11 @@
+{
+  "schemaVersion": "opensoha.dev/connector-action/v1",
+  "action": "knowledge.connector.http.fetch",
+  "input": {
+    "cursor": ""
+  },
+  "credentials": {
+    "expiresAt": "2026-10-10T00:00:10Z",
+    "entries": {}
+  }
+}

package/fixtures/json-schema/connector-action/invalid/invalid-expiry.json ADDED Viewed

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": "opensoha.dev/connector-action/v1",
+  "action": "knowledge.connector.http.fetch",
+  "input": {
+    "cursor": ""
+  },
+  "credentials": {
+    "expiresAt": "tomorrow",
+    "entries": {
+      "SOURCE": {
+        "reference": "soha://secrets/source-fixture/versions/2",
+        "value": "synthetic-fixture-value"
+      }
+    }
+  }
+}

package/fixtures/json-schema/connector-action/invalid/lowercase-alias.json ADDED Viewed

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": "opensoha.dev/connector-action/v1",
+  "action": "knowledge.connector.http.fetch",
+  "input": {
+    "cursor": ""
+  },
+  "credentials": {
+    "expiresAt": "2026-10-10T00:00:10Z",
+    "entries": {
+      "source": {
+        "reference": "soha://secrets/source-fixture/versions/2",
+        "value": "synthetic-fixture-value"
+      }
+    }
+  }
+}

package/fixtures/json-schema/connector-action/invalid/unknown-entry-field.json ADDED Viewed

@@ -0,0 +1,17 @@
+{
+  "schemaVersion": "opensoha.dev/connector-action/v1",
+  "action": "knowledge.connector.http.fetch",
+  "input": {
+    "cursor": ""
+  },
+  "credentials": {
+    "expiresAt": "2026-10-10T00:00:10Z",
+    "entries": {
+      "SOURCE": {
+        "reference": "soha://secrets/source-fixture/versions/2",
+        "value": "synthetic-fixture-value",
+        "role": "admin"
+      }
+    }
+  }
+}

package/fixtures/json-schema/connector-action/invalid/unknown-frame-field.json ADDED Viewed

@@ -0,0 +1,17 @@
+{
+  "schemaVersion": "opensoha.dev/connector-action/v1",
+  "action": "knowledge.connector.http.fetch",
+  "input": {
+    "cursor": ""
+  },
+  "credentials": {
+    "expiresAt": "2026-10-10T00:00:10Z",
+    "entries": {
+      "SOURCE": {
+        "reference": "soha://secrets/source-fixture/versions/2",
+        "value": "synthetic-fixture-value"
+      }
+    }
+  },
+  "owner": "untrusted"
+}

package/fixtures/json-schema/connector-action/invalid/unknown-version.json ADDED Viewed

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": "opensoha.dev/connector-action/v9",
+  "action": "knowledge.connector.http.fetch",
+  "input": {
+    "cursor": ""
+  },
+  "credentials": {
+    "expiresAt": "2026-10-10T00:00:10Z",
+    "entries": {
+      "SOURCE": {
+        "reference": "soha://secrets/source-fixture/versions/2",
+        "value": "synthetic-fixture-value"
+      }
+    }
+  }
+}

package/fixtures/json-schema/connector-action/invalid/unversioned-reference.json ADDED Viewed

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": "opensoha.dev/connector-action/v1",
+  "action": "knowledge.connector.http.fetch",
+  "input": {
+    "cursor": ""
+  },
+  "credentials": {
+    "expiresAt": "2026-10-10T00:00:10Z",
+    "entries": {
+      "SOURCE": {
+        "reference": "soha://secrets/source-fixture",
+        "value": "synthetic-fixture-value"
+      }
+    }
+  }
+}

package/fixtures/json-schema/connector-action/invalid/zero-version.json ADDED Viewed

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": "opensoha.dev/connector-action/v1",
+  "action": "knowledge.connector.http.fetch",
+  "input": {
+    "cursor": ""
+  },
+  "credentials": {
+    "expiresAt": "2026-10-10T00:00:10Z",
+    "entries": {
+      "SOURCE": {
+        "reference": "soha://secrets/source-fixture/versions/0",
+        "value": "synthetic-fixture-value"
+      }
+    }
+  }
+}

package/fixtures/json-schema/connector-action/valid/pinned.json ADDED Viewed

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": "opensoha.dev/connector-action/v1",
+  "action": "knowledge.connector.http.fetch",
+  "input": {
+    "cursor": ""
+  },
+  "credentials": {
+    "expiresAt": "2026-10-10T00:00:10Z",
+    "entries": {
+      "SOURCE": {
+        "reference": "soha://secrets/source-fixture/versions/2",
+        "value": "synthetic-fixture-value"
+      }
+    }
+  }
+}

package/fixtures/json-schema/connector-definition/invalid/credential-userinfo.json ADDED Viewed

@@ -0,0 +1,8 @@
+{
+  "schemaVersion": "opensoha.dev/knowledge-connector-definition/v1",
+  "id": "docs-http",
+  "kind": "http",
+  "version": "v1",
+  "configRef": "soha://user:password@secrets/source-id",
+  "enabled": true
+}

package/fixtures/json-schema/connector-definition/invalid/reference-traversal.json ADDED Viewed

@@ -0,0 +1,8 @@
+{
+  "schemaVersion": "opensoha.dev/knowledge-connector-definition/v1",
+  "id": "docs-http",
+  "kind": "http",
+  "version": "v1",
+  "configRef": "soha://secrets/source-id/../foreign",
+  "enabled": true
+}

package/fixtures/json-schema/connector-definition/invalid/zero-version.json ADDED Viewed

@@ -0,0 +1,8 @@
+{
+  "schemaVersion": "opensoha.dev/knowledge-connector-definition/v1",
+  "id": "docs-http",
+  "kind": "http",
+  "version": "v1",
+  "configRef": "soha://secrets/source-id/versions/0",
+  "enabled": true
+}

package/fixtures/json-schema/connector-definition/valid/canonical.json ADDED Viewed

@@ -0,0 +1,8 @@
+{
+  "schemaVersion": "opensoha.dev/knowledge-connector-definition/v1",
+  "id": "docs-http",
+  "kind": "http",
+  "version": "v1",
+  "configRef": "soha://secrets/source-id",
+  "enabled": true
+}

package/fixtures/json-schema/connector-definition/valid/pinned.json ADDED Viewed

@@ -0,0 +1,8 @@
+{
+  "schemaVersion": "opensoha.dev/knowledge-connector-definition/v1",
+  "id": "docs-http",
+  "kind": "http",
+  "version": "v1",
+  "configRef": "soha://secrets/source-id/versions/2",
+  "enabled": true
+}

package/fixtures/json-schema/personal-browser-network-request/invalid/bounded.json ADDED Viewed

@@ -0,0 +1,4 @@
+{
+  "url": "file:///etc/shadow",
+  "method": "CONNECT"
+}

package/fixtures/json-schema/personal-browser-network-request/valid/bounded.json ADDED Viewed

@@ -0,0 +1,4 @@
+{
+  "url": "https://example.com/",
+  "method": "GET"
+}

package/fixtures/json-schema/personal-browser-network-response/invalid/bounded.json ADDED Viewed

@@ -0,0 +1,5 @@
+{
+  "status": 700,
+  "headers": [],
+  "bodyBase64": ""
+}

package/fixtures/json-schema/personal-browser-network-response/valid/bounded.json ADDED Viewed

@@ -0,0 +1,5 @@
+{
+  "status": 200,
+  "headers": [],
+  "bodyBase64": "b2s="
+}

package/fixtures/json-schema/personal-environment-export/invalid/extra.json ADDED Viewed

@@ -0,0 +1,11 @@
+{
+  "schemaVersion": "opensoha.dev/personal-environment-export/v1",
+  "leaseId": "lease-fixture",
+  "runId": "run-fixture",
+  "ownerId": "owner-fixture",
+  "scopeHash": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+  "sizeBytes": 10240,
+  "sha256": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+  "observedAt": "2026-10-08T00:00:00Z",
+  "hostPath": "/data"
+}

package/fixtures/json-schema/personal-environment-export/invalid/ownerId.json ADDED Viewed

@@ -0,0 +1,10 @@
+{
+  "schemaVersion": "opensoha.dev/personal-environment-export/v1",
+  "leaseId": "lease-fixture",
+  "runId": "run-fixture",
+  "ownerId": "",
+  "scopeHash": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+  "sizeBytes": 10240,
+  "sha256": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+  "observedAt": "2026-10-08T00:00:00Z"
+}

package/fixtures/json-schema/personal-environment-export/invalid/sha256.json ADDED Viewed

@@ -0,0 +1,10 @@
+{
+  "schemaVersion": "opensoha.dev/personal-environment-export/v1",
+  "leaseId": "lease-fixture",
+  "runId": "run-fixture",
+  "ownerId": "owner-fixture",
+  "scopeHash": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+  "sizeBytes": 10240,
+  "sha256": "invalid",
+  "observedAt": "2026-10-08T00:00:00Z"
+}

package/fixtures/json-schema/personal-environment-export/invalid/sizeBytes.json ADDED Viewed

@@ -0,0 +1,10 @@
+{
+  "schemaVersion": "opensoha.dev/personal-environment-export/v1",
+  "leaseId": "lease-fixture",
+  "runId": "run-fixture",
+  "ownerId": "owner-fixture",
+  "scopeHash": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+  "sizeBytes": 268435457,
+  "sha256": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+  "observedAt": "2026-10-08T00:00:00Z"
+}

package/fixtures/json-schema/personal-environment-export/valid/complete.json ADDED Viewed

@@ -0,0 +1,10 @@
+{
+  "schemaVersion": "opensoha.dev/personal-environment-export/v1",
+  "leaseId": "lease-fixture",
+  "runId": "run-fixture",
+  "ownerId": "owner-fixture",
+  "scopeHash": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
+  "sizeBytes": 10240,
+  "sha256": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
+  "observedAt": "2026-10-08T00:00:00Z"
+}

package/fixtures/json-schema/personal-environment-preflight-request/invalid/disk.json ADDED Viewed

@@ -0,0 +1,11 @@
+{
+  "schemaVersion": "opensoha.dev/personal-environment-preflight-request/v1",
+  "id": "00000000-0000-4000-8000-000000000048",
+  "quota": {
+    "diskBytes": 1,
+    "memoryBytes": 67108864,
+    "cpuUnits": 250,
+    "maxProcesses": 16,
+    "networkEgress": false
+  }
+}

package/fixtures/json-schema/personal-environment-preflight-request/invalid/network.json ADDED Viewed

@@ -0,0 +1,11 @@
+{
+  "schemaVersion": "opensoha.dev/personal-environment-preflight-request/v1",
+  "id": "00000000-0000-4000-8000-000000000048",
+  "quota": {
+    "diskBytes": 33554432,
+    "memoryBytes": 67108864,
+    "cpuUnits": 250,
+    "maxProcesses": 16,
+    "networkEgress": true
+  }
+}

package/fixtures/json-schema/personal-environment-preflight-request/invalid/node.json ADDED Viewed

@@ -0,0 +1,12 @@
+{
+  "schemaVersion": "opensoha.dev/personal-environment-preflight-request/v1",
+  "id": "00000000-0000-4000-8000-000000000048",
+  "quota": {
+    "diskBytes": 33554432,
+    "memoryBytes": 67108864,
+    "cpuUnits": 250,
+    "maxProcesses": 16,
+    "networkEgress": false
+  },
+  "nodeUrl": "https://example.invalid"
+}

package/fixtures/json-schema/personal-environment-preflight-request/invalid/owner.json ADDED Viewed

@@ -0,0 +1,12 @@
+{
+  "schemaVersion": "opensoha.dev/personal-environment-preflight-request/v1",
+  "id": "00000000-0000-4000-8000-000000000048",
+  "quota": {
+    "diskBytes": 33554432,
+    "memoryBytes": 67108864,
+    "cpuUnits": 250,
+    "maxProcesses": 16,
+    "networkEgress": false
+  },
+  "ownerId": "selected-owner"
+}

package/fixtures/json-schema/personal-environment-preflight-request/valid/bounded.json ADDED Viewed

@@ -0,0 +1,11 @@
+{
+  "schemaVersion": "opensoha.dev/personal-environment-preflight-request/v1",
+  "id": "00000000-0000-4000-8000-000000000048",
+  "quota": {
+    "diskBytes": 33554432,
+    "memoryBytes": 67108864,
+    "cpuUnits": 250,
+    "maxProcesses": 16,
+    "networkEgress": false
+  }
+}

package/fixtures/json-schema/personal-environment-preflight-result/invalid/disk.json ADDED Viewed

@@ -0,0 +1,15 @@
+{
+  "schemaVersion": "opensoha.dev/personal-environment-preflight-result/v1",
+  "id": "00000000-0000-4000-8000-000000000048",
+  "quota": {
+    "diskBytes": 1,
+    "memoryBytes": 67108864,
+    "cpuUnits": 250,
+    "maxProcesses": 16,
+    "networkEgress": false
+  },
+  "ready": true,
+  "cgroupVersion": "2",
+  "diskMechanism": "btrfs-qgroup",
+  "observedAt": "2026-10-08T00:00:00Z"
+}

package/fixtures/json-schema/personal-environment-preflight-result/invalid/network.json ADDED Viewed

@@ -0,0 +1,15 @@
+{
+  "schemaVersion": "opensoha.dev/personal-environment-preflight-result/v1",
+  "id": "00000000-0000-4000-8000-000000000048",
+  "quota": {
+    "diskBytes": 33554432,
+    "memoryBytes": 67108864,
+    "cpuUnits": 250,
+    "maxProcesses": 16,
+    "networkEgress": true
+  },
+  "ready": true,
+  "cgroupVersion": "2",
+  "diskMechanism": "btrfs-qgroup",
+  "observedAt": "2026-10-08T00:00:00Z"
+}

package/fixtures/json-schema/personal-environment-preflight-result/invalid/no-hard-quota.json ADDED Viewed

@@ -0,0 +1,15 @@
+{
+  "schemaVersion": "opensoha.dev/personal-environment-preflight-result/v1",
+  "id": "00000000-0000-4000-8000-000000000048",
+  "quota": {
+    "diskBytes": 33554432,
+    "memoryBytes": 67108864,
+    "cpuUnits": 250,
+    "maxProcesses": 16,
+    "networkEgress": false
+  },
+  "ready": true,
+  "cgroupVersion": "2",
+  "diskMechanism": "best-effort",
+  "observedAt": "2026-10-08T00:00:00Z"
+}

package/fixtures/json-schema/personal-environment-preflight-result/invalid/node.json ADDED Viewed

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": "opensoha.dev/personal-environment-preflight-result/v1",
+  "id": "00000000-0000-4000-8000-000000000048",
+  "quota": {
+    "diskBytes": 33554432,
+    "memoryBytes": 67108864,
+    "cpuUnits": 250,
+    "maxProcesses": 16,
+    "networkEgress": false
+  },
+  "ready": true,
+  "cgroupVersion": "2",
+  "diskMechanism": "btrfs-qgroup",
+  "observedAt": "2026-10-08T00:00:00Z",
+  "nodeUrl": "https://example.invalid"
+}

package/fixtures/json-schema/personal-environment-preflight-result/invalid/not-ready.json ADDED Viewed

@@ -0,0 +1,15 @@
+{
+  "schemaVersion": "opensoha.dev/personal-environment-preflight-result/v1",
+  "id": "00000000-0000-4000-8000-000000000048",
+  "quota": {
+    "diskBytes": 33554432,
+    "memoryBytes": 67108864,
+    "cpuUnits": 250,
+    "maxProcesses": 16,
+    "networkEgress": false
+  },
+  "ready": false,
+  "cgroupVersion": "2",
+  "diskMechanism": "btrfs-qgroup",
+  "observedAt": "2026-10-08T00:00:00Z"
+}

package/fixtures/json-schema/personal-environment-preflight-result/invalid/owner.json ADDED Viewed

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": "opensoha.dev/personal-environment-preflight-result/v1",
+  "id": "00000000-0000-4000-8000-000000000048",
+  "quota": {
+    "diskBytes": 33554432,
+    "memoryBytes": 67108864,
+    "cpuUnits": 250,
+    "maxProcesses": 16,
+    "networkEgress": false
+  },
+  "ready": true,
+  "cgroupVersion": "2",
+  "diskMechanism": "btrfs-qgroup",
+  "observedAt": "2026-10-08T00:00:00Z",
+  "ownerId": "selected-owner"
+}

package/fixtures/json-schema/personal-environment-preflight-result/valid/bounded.json ADDED Viewed

@@ -0,0 +1,15 @@
+{
+  "schemaVersion": "opensoha.dev/personal-environment-preflight-result/v1",
+  "id": "00000000-0000-4000-8000-000000000048",
+  "quota": {
+    "diskBytes": 33554432,
+    "memoryBytes": 67108864,
+    "cpuUnits": 250,
+    "maxProcesses": 16,
+    "networkEgress": false
+  },
+  "ready": true,
+  "cgroupVersion": "2",
+  "diskMechanism": "btrfs-qgroup",
+  "observedAt": "2026-10-08T00:00:00Z"
+}

package/fixtures/json-schema/personal-environment-request/invalid/delete-data-argv.json ADDED Viewed

@@ -0,0 +1,24 @@
+{
+  "schemaVersion": "opensoha.dev/personal-environment-request/v1",
+  "action": "delete_data",
+  "lease": {
+    "schemaVersion": "opensoha.dev/environment-lease/v1",
+    "id": "lease-personal-1",
+    "runId": "run-personal-1",
+    "ownerId": "owner-fixture",
+    "scopeHash": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+    "mode": "observe-only",
+    "quota": {
+      "diskBytes": 33554432,
+      "memoryBytes": 67108864,
+      "cpuUnits": 250,
+      "maxProcesses": 16,
+      "networkEgress": false
+    },
+    "issuedAt": "2026-10-08T01:00:00Z",
+    "expiresAt": "2026-10-08T01:05:00Z"
+  },
+  "argv": [
+    "/bin/true"
+  ]
+}