npm - @opensoha/contracts - Versions diffs - 0.1.23 → 0.1.25 - Mend

@opensoha/contracts 0.1.23 → 0.1.25

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (415) hide show

package/fixtures/json-schema/token-claims/invalid/authz-zero.json ADDED Viewed

@@ -0,0 +1,23 @@
+{
+  "iss": "soha",
+  "sub": "user-1",
+  "aud": [
+    "soha-api"
+  ],
+  "exp": 1781006400,
+  "iat": 1781002800,
+  "tokenId": "session-access-1",
+  "tokenKind": "session",
+  "subjectType": "user",
+  "subjectId": "user-1",
+  "tenantId": "default",
+  "workspaceId": "default",
+  "permissionKeys": [
+    "ai.gateway.view"
+  ],
+  "scopes": [
+    "ai:read"
+  ],
+  "sessionId": "session-1",
+  "authzVersion": 0
+}

package/fixtures/json-schema/token-claims/valid/versioned-session.json ADDED Viewed

@@ -0,0 +1,23 @@
+{
+  "iss": "soha",
+  "sub": "user-1",
+  "aud": [
+    "soha-api"
+  ],
+  "exp": 1781006400,
+  "iat": 1781002800,
+  "tokenId": "session-access-1",
+  "tokenKind": "session",
+  "subjectType": "user",
+  "subjectId": "user-1",
+  "tenantId": "default",
+  "workspaceId": "default",
+  "permissionKeys": [
+    "ai.gateway.view"
+  ],
+  "scopes": [
+    "ai:read"
+  ],
+  "sessionId": "session-1",
+  "authzVersion": 2
+}

package/fixtures/openapi/AgentRunEventListEnvelope/invalid/basic.json ADDED Viewed

@@ -0,0 +1,8 @@
+{
+  "data": {
+    "items": [],
+    "nextSequence": -1,
+    "hasMore": false,
+    "resyncRequired": false
+  }
+}

package/fixtures/openapi/AgentRunEventListEnvelope/valid/basic.json ADDED Viewed

@@ -0,0 +1,8 @@
+{
+  "data": {
+    "items": [],
+    "nextSequence": 0,
+    "hasMore": false,
+    "resyncRequired": false
+  }
+}

package/fixtures/openapi/AgentRunEventListEnvelope/valid/native.json ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"data":{"items":[{"id":"event-1","sessionId":"session-1","runId":"agent-1","sequence":1,"createdAt":"2026-10-08T00:00:00Z","type":"agent.status","providerId":"internal","providerKind":"native","status":"queued"}],"nextSequence":1,"hasMore":false,"resyncRequired":false}}

package/fixtures/openapi/AgentRunResumeRequest/invalid/basic.json ADDED Viewed

@@ -0,0 +1,3 @@
+{
+  "replayUnknownWrite": true
+}

package/fixtures/openapi/AgentRunResumeRequest/valid/basic.json ADDED Viewed

@@ -0,0 +1,3 @@
+{
+  "input": "Use the previously selected test target."
+}

package/fixtures/openapi/AgentSSHCommandRequest/invalid/task51.json ADDED Viewed

@@ -0,0 +1,24 @@
+{
+  "session": {
+    "sessionId": "session-one",
+    "agentId": "agent-one",
+    "executionClusterId": "cluster-one",
+    "address": "10.0.0.30",
+    "port": 22,
+    "username": "soha",
+    "trustedHostKey": "ssh-ed25519 test-fixture",
+    "credentialKind": "ssh_keypair",
+    "lease": {
+      "id": "lease-one",
+      "token": "test-lease-token-long",
+      "expiresAt": "2026-10-11T00:00:30Z"
+    },
+    "controlPlaneEndpoint": "https://control.example",
+    "expiresAt": "2026-10-11T00:30:00Z",
+    "cols": 80,
+    "rows": 24
+  },
+  "command": "printf marker",
+  "timeoutSeconds": 60,
+  "unrecognizedPrivateValue": "must reject"
+}

package/fixtures/openapi/AgentSSHCommandRequest/valid/task51.json ADDED Viewed

@@ -0,0 +1,23 @@
+{
+  "session": {
+    "sessionId": "session-one",
+    "agentId": "agent-one",
+    "executionClusterId": "cluster-one",
+    "address": "10.0.0.30",
+    "port": 22,
+    "username": "soha",
+    "trustedHostKey": "ssh-ed25519 test-fixture",
+    "credentialKind": "ssh_keypair",
+    "lease": {
+      "id": "lease-one",
+      "token": "test-lease-token-long",
+      "expiresAt": "2026-10-11T00:00:30Z"
+    },
+    "controlPlaneEndpoint": "https://control.example",
+    "expiresAt": "2026-10-11T00:30:00Z",
+    "cols": 80,
+    "rows": 24
+  },
+  "command": "printf marker",
+  "timeoutSeconds": 60
+}

package/fixtures/openapi/AgentSSHCommandResult/invalid/task51.json ADDED Viewed

@@ -0,0 +1,8 @@
+{
+  "sessionId": "session-one",
+  "agentId": "agent-one",
+  "commandDigest": "sha256:frozen",
+  "effect": "unknown",
+  "stopped": true,
+  "unrecognizedPrivateValue": "must reject"
+}

package/fixtures/openapi/AgentSSHCommandResult/valid/task51.json ADDED Viewed

@@ -0,0 +1,7 @@
+{
+  "sessionId": "session-one",
+  "agentId": "agent-one",
+  "commandDigest": "sha256:frozen",
+  "effect": "unknown",
+  "stopped": true
+}

package/fixtures/openapi/AgentSSHSessionRequest/invalid/task51.json ADDED Viewed

@@ -0,0 +1,20 @@
+{
+  "sessionId": "session-one",
+  "agentId": "agent-one",
+  "executionClusterId": "cluster-one",
+  "address": "10.0.0.30",
+  "port": 22,
+  "username": "soha",
+  "trustedHostKey": "ssh-ed25519 test-fixture",
+  "credentialKind": "ssh_keypair",
+  "lease": {
+    "id": "lease-one",
+    "token": "test-lease-token-long",
+    "expiresAt": "2026-10-11T00:00:30Z"
+  },
+  "controlPlaneEndpoint": "https://control.example",
+  "expiresAt": "2026-10-11T00:30:00Z",
+  "cols": 80,
+  "rows": 24,
+  "unrecognizedPrivateValue": "must reject"
+}

package/fixtures/openapi/AgentSSHSessionRequest/valid/task51.json ADDED Viewed

@@ -0,0 +1,19 @@
+{
+  "sessionId": "session-one",
+  "agentId": "agent-one",
+  "executionClusterId": "cluster-one",
+  "address": "10.0.0.30",
+  "port": 22,
+  "username": "soha",
+  "trustedHostKey": "ssh-ed25519 test-fixture",
+  "credentialKind": "ssh_keypair",
+  "lease": {
+    "id": "lease-one",
+    "token": "test-lease-token-long",
+    "expiresAt": "2026-10-11T00:00:30Z"
+  },
+  "controlPlaneEndpoint": "https://control.example",
+  "expiresAt": "2026-10-11T00:30:00Z",
+  "cols": 80,
+  "rows": 24
+}

package/fixtures/openapi/CapabilityTaskInput/invalid/duplicate-scope.json ADDED Viewed

@@ -0,0 +1,36 @@
+{
+  "idempotencyKey": "request-1",
+  "plan": {
+    "goal": "Inspect the existing operation",
+    "steps": [
+      {
+        "id": "read",
+        "call": {
+          "toolName": "docker.operations.get",
+          "capabilityVersion": "1",
+          "input": {
+            "operationId": "operation-1"
+          }
+        }
+      }
+    ],
+    "verificationSteps": [
+      "read"
+    ],
+    "timeoutSeconds": 300
+  },
+  "scopeConstraints": [
+    {
+      "dimension": "clusterId",
+      "value": "cluster-one"
+    },
+    {
+      "dimension": "namespace",
+      "value": "apps"
+    },
+    {
+      "dimension": "clusterId",
+      "value": "cluster-one"
+    }
+  ]
+}

package/fixtures/openapi/CapabilityTaskInput/valid/scoped.json ADDED Viewed

@@ -0,0 +1,32 @@
+{
+  "idempotencyKey": "request-1",
+  "plan": {
+    "goal": "Inspect the existing operation",
+    "steps": [
+      {
+        "id": "read",
+        "call": {
+          "toolName": "docker.operations.get",
+          "capabilityVersion": "1",
+          "input": {
+            "operationId": "operation-1"
+          }
+        }
+      }
+    ],
+    "verificationSteps": [
+      "read"
+    ],
+    "timeoutSeconds": 300
+  },
+  "scopeConstraints": [
+    {
+      "dimension": "clusterId",
+      "value": "cluster-one"
+    },
+    {
+      "dimension": "namespace",
+      "value": "apps"
+    }
+  ]
+}

package/fixtures/openapi/DockerQuickCreateHostInput/invalid/guest-access.json ADDED Viewed

@@ -0,0 +1,7 @@
+{
+  "name": "credential-runtime",
+  "guestAccess": {
+    "username": "root",
+    "publicKeyRefs": []
+  }
+}

package/fixtures/openapi/DockerQuickCreateHostInput/valid/guest-access.json ADDED Viewed

@@ -0,0 +1,9 @@
+{
+  "name": "credential-runtime",
+  "guestAccess": {
+    "username": "soha",
+    "publicKeyRefs": [
+      "soha://secrets/lab/versions/1"
+    ]
+  }
+}

package/fixtures/openapi/KnowledgeSourceDocument/invalid/tombstone-with-content.json ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"externalId":"runbook","title":"Runbook","content":"Retained content","deleted":true,"acl":{"visibility":"private","users":["owner"]}}

package/fixtures/openapi/KnowledgeSourceDocument/valid/tombstone.json ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"externalId":"runbook","title":"Runbook","content":"","deleted":true,"acl":{"visibility":"private","users":["owner"]}}

package/fixtures/openapi/KubernetesAgentActionCheck/invalid/unproven-state.json ADDED Viewed

@@ -0,0 +1,6 @@
+{
+  "action": "platform.nodes.drain",
+  "implementation": "supported",
+  "configured": "maybe",
+  "kubernetesRBAC": "allowed"
+}

package/fixtures/openapi/KubernetesAgentActionCheck/valid/configured-denied.json ADDED Viewed

@@ -0,0 +1,9 @@
+{
+  "action": "platform.nodes.drain",
+  "implementation": "supported",
+  "configured": "denied",
+  "kubernetesRBAC": "unknown",
+  "scope": "cluster",
+  "checkedAt": "2026-10-19T01:30:00Z",
+  "reasonCode": "self_subject_access_review"
+}

package/fixtures/openapi/KubernetesAgentActionProfile/invalid/wildcard.json ADDED Viewed

	@@ -0,0 +1 @@
1	+ "*"

package/fixtures/openapi/KubernetesAgentActionProfile/valid/workbench.json ADDED Viewed

	@@ -0,0 +1 @@
1	+ "workbench"

package/fixtures/openapi/KubernetesClusterRegistrationRequest/invalid/action-profile.json ADDED Viewed

@@ -0,0 +1,3 @@
+{
+  "agentActionProfile": "all"
+}

package/fixtures/openapi/KubernetesClusterRegistrationRequest/valid/action-profile.json ADDED Viewed

@@ -0,0 +1,5 @@
+{
+  "name": "agent",
+  "connectionMode": "agent",
+  "agentActionProfile": "read-only"
+}

package/fixtures/openapi/KubernetesNodeListEnvelope/invalid/condition-status-boolean.json ADDED Viewed

@@ -0,0 +1,17 @@
+{
+  "items": [
+    {
+      "name": "worker-a",
+      "status": "ready",
+      "unschedulable": true,
+      "podCount": 2,
+      "ageSeconds": 3600,
+      "conditions": [
+        {
+          "type": "Ready",
+          "status": true
+        }
+      ]
+    }
+  ]
+}

package/fixtures/openapi/KubernetesNodeListEnvelope/invalid/taint-effect-missing.json ADDED Viewed

@@ -0,0 +1,16 @@
+{
+  "items": [
+    {
+      "name": "worker-a",
+      "status": "ready",
+      "unschedulable": true,
+      "podCount": 2,
+      "ageSeconds": 3600,
+      "taints": [
+        {
+          "key": "maintenance"
+        }
+      ]
+    }
+  ]
+}

package/fixtures/openapi/KubernetesNodeListEnvelope/valid/legacy-fields-absent.json ADDED Viewed

@@ -0,0 +1,11 @@
+{
+  "items": [
+    {
+      "name": "worker-a",
+      "status": "ready",
+      "unschedulable": true,
+      "podCount": 2,
+      "ageSeconds": 3600
+    }
+  ]
+}

package/fixtures/openapi/KubernetesNodeListEnvelope/valid/no-taints.json ADDED Viewed

@@ -0,0 +1,13 @@
+{
+  "items": [
+    {
+      "name": "worker-a",
+      "status": "ready",
+      "unschedulable": false,
+      "podCount": 2,
+      "ageSeconds": 3600,
+      "taints": [],
+      "conditions": []
+    }
+  ]
+}

package/fixtures/openapi/KubernetesNodeListEnvelope/valid/ready-cordoned-tainted.json ADDED Viewed

@@ -0,0 +1,28 @@
+{
+  "items": [
+    {
+      "name": "worker-a",
+      "status": "ready",
+      "unschedulable": true,
+      "podCount": 2,
+      "ageSeconds": 3600,
+      "taints": [
+        {
+          "key": "maintenance",
+          "value": "task113",
+          "effect": "NoSchedule"
+        }
+      ],
+      "conditions": [
+        {
+          "type": "Ready",
+          "status": "True"
+        },
+        {
+          "type": "DiskPressure",
+          "status": "True"
+        }
+      ]
+    }
+  ]
+}

package/fixtures/openapi/KubernetesNodeListEnvelope/valid/unknown-fields-null.json ADDED Viewed

@@ -0,0 +1,13 @@
+{
+  "items": [
+    {
+      "name": "worker-a",
+      "status": "ready",
+      "unschedulable": true,
+      "podCount": 2,
+      "ageSeconds": 3600,
+      "taints": null,
+      "conditions": null
+    }
+  ]
+}

package/fixtures/openapi/KubernetesResourceUpdatePlanRequest/invalid/missing-required.json ADDED Viewed

	@@ -0,0 +1 @@
1	+ {}

package/fixtures/openapi/KubernetesResourceYaml/invalid/missing-required.json ADDED Viewed

	@@ -0,0 +1 @@
1	+ {}

package/fixtures/openapi/KubernetesTopologyCoverage/invalid/empty-as-success.json ADDED Viewed

@@ -0,0 +1,5 @@
+{
+  "provider": "apisix",
+  "sourceId": "apisix.apisixroutes",
+  "state": "empty"
+}

package/fixtures/openapi/KubernetesTopologyCoverage/valid/not-installed.json ADDED Viewed

@@ -0,0 +1,6 @@
+{
+  "provider": "apisix",
+  "sourceId": "apisix.apisixroutes",
+  "state": "not_installed",
+  "reasonCode": "api_not_served"
+}

package/fixtures/openapi/KubernetesTopologyGraphEdge/invalid/negative-weight.json ADDED Viewed

@@ -0,0 +1,8 @@
+{
+  "id": "edge-1",
+  "source": "a",
+  "target": "b",
+  "relation": "weights",
+  "resolutionState": "resolved",
+  "weight": -1
+}

package/fixtures/openapi/KubernetesTopologyGraphEdge/valid/zero-weight.json ADDED Viewed

@@ -0,0 +1,20 @@
+{
+  "id": "edge-1",
+  "source": "rule:route-uid:0",
+  "target": "service-1",
+  "relation": "weights",
+  "resolutionState": "resolved",
+  "port": "http",
+  "weight": 0,
+  "totalWeight": 100,
+  "sourceRef": {
+    "clusterId": "cluster-a",
+    "apiVersion": "traefik.io/v1alpha1",
+    "kind": "IngressRoute",
+    "name": "api",
+    "namespace": "team-a",
+    "scopeMode": "namespace",
+    "uid": "route-uid",
+    "resourceVersion": "7"
+  }
+}

package/fixtures/openapi/KubernetesTopologyGraphNode/invalid/fake-flow-kind.json ADDED Viewed

@@ -0,0 +1,42 @@
+{
+  "id": "rule:route-uid:0",
+  "type": "live-traffic",
+  "label": "api /",
+  "provider": "traefik",
+  "protocol": "HTTP",
+  "resolutionState": "resolved",
+  "resource": {
+    "clusterId": "cluster-a",
+    "apiVersion": "traefik.io/v1alpha1",
+    "kind": "IngressRoute",
+    "name": "api",
+    "namespace": "team-a",
+    "scopeMode": "namespace",
+    "uid": "route-uid",
+    "resourceVersion": "7"
+  },
+  "rule": {
+    "index": 0,
+    "matchGroups": [
+      [
+        {
+          "type": "host",
+          "operator": "exact",
+          "value": "api.example.test"
+        },
+        {
+          "type": "path",
+          "operator": "prefix",
+          "value": "/"
+        }
+      ]
+    ],
+    "tlsMode": "terminate"
+  },
+  "properties": [
+    {
+      "name": "source",
+      "value": "configuration"
+    }
+  ]
+}

package/fixtures/openapi/KubernetesTopologyGraphNode/valid/rule.json ADDED Viewed

@@ -0,0 +1,42 @@
+{
+  "id": "rule:route-uid:0",
+  "type": "rule",
+  "label": "api /",
+  "provider": "traefik",
+  "protocol": "HTTP",
+  "resolutionState": "resolved",
+  "resource": {
+    "clusterId": "cluster-a",
+    "apiVersion": "traefik.io/v1alpha1",
+    "kind": "IngressRoute",
+    "name": "api",
+    "namespace": "team-a",
+    "scopeMode": "namespace",
+    "uid": "route-uid",
+    "resourceVersion": "7"
+  },
+  "rule": {
+    "index": 0,
+    "matchGroups": [
+      [
+        {
+          "type": "host",
+          "operator": "exact",
+          "value": "api.example.test"
+        },
+        {
+          "type": "path",
+          "operator": "prefix",
+          "value": "/"
+        }
+      ]
+    ],
+    "tlsMode": "terminate"
+  },
+  "properties": [
+    {
+      "name": "source",
+      "value": "configuration"
+    }
+  ]
+}

package/fixtures/openapi/KubernetesTopologySnapshot/invalid/raw-source-field.json ADDED Viewed

@@ -0,0 +1,33 @@
+{
+  "version": "v1",
+  "sources": [
+    {
+      "coverage": {
+        "provider": "traefik",
+        "sourceId": "traefik.ingressroutes",
+        "state": "available",
+        "namespace": "team-a",
+        "supportedKinds": [
+          "IngressRoute"
+        ],
+        "observedAt": "2026-10-19T02:00:00Z"
+      },
+      "objects": [
+        {
+          "resource": {
+            "clusterId": "cluster-a",
+            "apiVersion": "traefik.io/v1alpha1",
+            "kind": "IngressRoute",
+            "name": "api",
+            "namespace": "team-a",
+            "scopeMode": "namespace",
+            "uid": "route-uid",
+            "resourceVersion": "7"
+          },
+          "content": "{}",
+          "originalManifest": "secret configuration must not cross the snapshot contract"
+        }
+      ]
+    }
+  ]
+}

package/fixtures/openapi/KubernetesTopologySnapshot/valid/projected-source.json ADDED Viewed

@@ -0,0 +1,32 @@
+{
+  "version": "v1",
+  "sources": [
+    {
+      "coverage": {
+        "provider": "traefik",
+        "sourceId": "traefik.ingressroutes",
+        "state": "available",
+        "namespace": "team-a",
+        "supportedKinds": [
+          "IngressRoute"
+        ],
+        "observedAt": "2026-10-19T02:00:00Z"
+      },
+      "objects": [
+        {
+          "resource": {
+            "clusterId": "cluster-a",
+            "apiVersion": "traefik.io/v1alpha1",
+            "kind": "IngressRoute",
+            "name": "api",
+            "namespace": "team-a",
+            "scopeMode": "namespace",
+            "uid": "route-uid",
+            "resourceVersion": "7"
+          },
+          "content": "{\"spec\": {\"routes\": [{\"match\": \"Host(`api.example.test`)\", \"services\": [{\"name\": \"api\", \"port\": 80}]}]}}"
+        }
+      ]
+    }
+  ]
+}

package/fixtures/openapi/KubernetesTopologySnapshotRequest/invalid/arbitrary-gvr.json ADDED Viewed

@@ -0,0 +1,8 @@
+{
+  "queries": [
+    {
+      "sourceId": "kubernetes.secrets",
+      "resource": "secrets"
+    }
+  ]
+}

package/fixtures/openapi/KubernetesTopologySnapshotRequest/valid/bounded-sources.json ADDED Viewed

@@ -0,0 +1,11 @@
+{
+  "queries": [
+    {
+      "sourceId": "traefik.ingressroutes",
+      "namespace": "team-a"
+    },
+    {
+      "sourceId": "kubernetes.ingressclasses"
+    }
+  ]
+}