npm - @opensoha/contracts - Versions diffs - 0.1.25 → 0.1.27 - Mend

@opensoha/contracts 0.1.25 → 0.1.27

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (200) hide show

package/fixtures/json-schema/network-runtime-protocol/invalid/mihomo-protection-zero-version.json ADDED Viewed

@@ -0,0 +1,45 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "msg-config-mihomo-protection-0001",
+  "messageType": "configuration.desired",
+  "producerId": "network-control",
+  "runtimeId": "endpoint-bob",
+  "runtimeKind": "endpoint",
+  "occurredAt": "2026-09-03T08:00:00Z",
+  "expiresAt": "2026-09-03T08:05:00Z",
+  "payload": {
+    "configurationVersion": 3,
+    "policyVersion": 7,
+    "validUntil": "2026-09-03T08:05:00Z",
+    "accessProfile": "full",
+    "protectedResourceIds": [
+      "resource-payroll"
+    ],
+    "networkLeases": [],
+    "resourceLeases": [],
+    "mihomo": {
+      "mode": "app_subscription",
+      "profileId": "profile-personal",
+      "profileRevision": 1,
+      "mixedPort": 7890,
+      "controllerPort": 9090,
+      "dnsMode": "fake_ip",
+      "fakeIpRange": "198.18.0.0/15",
+      "selectorGroup": "SOHA",
+      "bypassCidrs": [],
+      "bypassHosts": [
+        "network-control.example.com"
+      ],
+      "failClosed": false,
+      "protection": {
+        "policyVersion": 0,
+        "cidrs": [
+          "10.40.0.0/16"
+        ],
+        "hosts": [
+          "payroll.example.com"
+        ]
+      }
+    }
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/invalid/presence-raw-key.json ADDED Viewed

@@ -0,0 +1,23 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "presence-1",
+  "messageType": "endpoint.presence.request",
+  "producerId": "endpoint-lab",
+  "runtimeId": "endpoint-lab",
+  "runtimeKind": "endpoint",
+  "occurredAt": "2026-10-14T00:00:00Z",
+  "expiresAt": "2026-10-14T00:00:30Z",
+  "payload": {
+    "deviceId": "device-lab",
+    "bootId": "boot-1",
+    "sequence": 1,
+    "status": "healthy",
+    "configurationVersion": 1,
+    "policyVersion": 1,
+    "uiState": "unknown",
+    "capabilities": [
+      "endpoint-presence-v1"
+    ],
+    "privateKey": "not-a-real-secret"
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/invalid/presence-zero-sequence.json ADDED Viewed

@@ -0,0 +1,22 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "presence-1",
+  "messageType": "endpoint.presence.request",
+  "producerId": "endpoint-lab",
+  "runtimeId": "endpoint-lab",
+  "runtimeKind": "endpoint",
+  "occurredAt": "2026-10-14T00:00:00Z",
+  "expiresAt": "2026-10-14T00:00:30Z",
+  "payload": {
+    "deviceId": "device-lab",
+    "bootId": "boot-1",
+    "sequence": 0,
+    "status": "healthy",
+    "configurationVersion": 1,
+    "policyVersion": 1,
+    "uiState": "unknown",
+    "capabilities": [
+      "endpoint-presence-v1"
+    ]
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/invalid/workload-wide-vpn.json ADDED Viewed

@@ -0,0 +1,17 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "msg-direct-ztna-connect-0001",
+  "messageType": "vpn.connect.request",
+  "producerId": "endpoint-alice",
+  "runtimeId": "endpoint-alice",
+  "runtimeKind": "endpoint",
+  "occurredAt": "2026-09-02T08:00:00Z",
+  "expiresAt": "2026-09-02T08:05:00Z",
+  "payload": {
+    "requestId": "direct-ztna-request-0001",
+    "siteId": "site-a",
+    "networkSpaceId": "space-site-a",
+    "mode": "external_vpn",
+    "workloadId": "billing-worker"
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/valid/eap-certificate-activate.json ADDED Viewed

@@ -0,0 +1,14 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "presence-1",
+  "messageType": "eap.certificate.activate.request",
+  "producerId": "endpoint-lab",
+  "runtimeId": "endpoint-lab",
+  "runtimeKind": "endpoint",
+  "occurredAt": "2026-10-14T00:00:00Z",
+  "expiresAt": "2026-10-14T00:00:30Z",
+  "payload": {
+    "credentialId": "eap-credential-1",
+    "fingerprint": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/valid/eap-certificate-request.json ADDED Viewed

@@ -0,0 +1,14 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "presence-1",
+  "messageType": "eap.certificate.request",
+  "producerId": "endpoint-lab",
+  "runtimeId": "endpoint-lab",
+  "runtimeKind": "endpoint",
+  "occurredAt": "2026-10-14T00:00:00Z",
+  "expiresAt": "2026-10-14T00:00:30Z",
+  "payload": {
+    "requestId": "eap-rotation-1",
+    "csrPem": "-----BEGIN CERTIFICATE REQUEST-----\nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\n-----END CERTIFICATE REQUEST-----\n"
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/valid/eap-profile-enrollment.json ADDED Viewed

@@ -0,0 +1,24 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "msg-enroll-wireguard-0001",
+  "messageType": "runtime.enroll.request",
+  "producerId": "endpoint-alice",
+  "runtimeId": "endpoint-alice",
+  "runtimeKind": "endpoint",
+  "occurredAt": "2026-09-02T08:00:00Z",
+  "expiresAt": "2026-09-02T08:05:00Z",
+  "payload": {
+    "enrollmentId": "enrollment-alice",
+    "challengeId": "challenge-alice",
+    "deviceId": "device-alice-laptop",
+    "devicePublicKey": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEA7qY8R9gAwRQmJau0p7uB8mVJwA6m3i3zYvRrV7lIl1E=\n-----END PUBLIC KEY-----",
+    "wireguardPublicKey": "BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=",
+    "platform": "macos",
+    "clientVersion": "0.2.0",
+    "capabilities": [
+      "radius-eap-tls-v1",
+      "eap-profile-v1",
+      "endpoint-presence-v1"
+    ]
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/valid/endpoint-presence.json ADDED Viewed

@@ -0,0 +1,22 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "presence-1",
+  "messageType": "endpoint.presence.request",
+  "producerId": "endpoint-lab",
+  "runtimeId": "endpoint-lab",
+  "runtimeKind": "endpoint",
+  "occurredAt": "2026-10-14T00:00:00Z",
+  "expiresAt": "2026-10-14T00:00:30Z",
+  "payload": {
+    "deviceId": "device-lab",
+    "bootId": "boot-1",
+    "sequence": 1,
+    "status": "healthy",
+    "configurationVersion": 1,
+    "policyVersion": 1,
+    "uiState": "unknown",
+    "capabilities": [
+      "endpoint-presence-v1"
+    ]
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/valid/ipv6-configuration.json ADDED Viewed

@@ -0,0 +1,102 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "msg-config-0001",
+  "messageType": "configuration.desired",
+  "producerId": "network-control-default",
+  "runtimeId": "gateway-site-a",
+  "runtimeKind": "gateway",
+  "occurredAt": "2026-09-02T08:00:00Z",
+  "expiresAt": "2026-09-02T08:05:00Z",
+  "payload": {
+    "configurationVersion": 12,
+    "policyVersion": 7,
+    "validUntil": "2026-09-02T08:05:00Z",
+    "accessProfile": "full",
+    "protectedResourceIds": [
+      "resource-payroll"
+    ],
+    "networkLeases": [
+      {
+        "id": "network-lease-0001",
+        "sessionId": "session-0001",
+        "subjectId": "user-alice",
+        "deviceId": "device-alice-laptop",
+        "networkSpaceId": "space-site-a",
+        "cidrs": [
+          "fd20::/64"
+        ],
+        "policyVersion": 7,
+        "issuedAt": "2026-09-02T08:00:00Z",
+        "expiresAt": "2026-09-02T08:05:00Z"
+      }
+    ],
+    "resourceLeases": [
+      {
+        "id": "resource-lease-0001",
+        "sessionId": "session-0001",
+        "subjectId": "user-alice",
+        "deviceId": "device-alice-laptop",
+        "resourceIds": [
+          "resource-payroll"
+        ],
+        "policyVersion": 7,
+        "issuedAt": "2026-09-02T08:00:00Z",
+        "expiresAt": "2026-09-02T08:02:00Z"
+      }
+    ],
+    "runtimeIntervals": {
+      "heartbeatIntervalSeconds": 60,
+      "configurationPollIntervalSeconds": 60
+    },
+    "wireguard": {
+      "role": "gateway",
+      "interfaceName": "soha0",
+      "publicKey": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=",
+      "addresses": [
+        "fd96::1/128"
+      ],
+      "listenPort": 51820,
+      "mtu": 1380,
+      "routingMode": "routed",
+      "firewallDefault": "deny",
+      "peers": [
+        {
+          "runtimeId": "endpoint-alice",
+          "deviceId": "device-alice-laptop",
+          "publicKey": "BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=",
+          "allowedIPs": [
+            "fd96::2/128"
+          ],
+          "persistentKeepaliveSeconds": 25
+        }
+      ],
+      "routes": [
+        "fd20::/64"
+      ],
+      "dnsServers": [
+        "fd20::53"
+      ],
+      "firewallRules": [
+        {
+          "id": "deny-payroll",
+          "effect": "deny",
+          "sourceCidr": "fd96::2/128",
+          "destinationCidr": "fd20::10/128",
+          "protocol": "tcp",
+          "ports": [
+            443
+          ]
+        },
+        {
+          "id": "allow-network-lease-0001",
+          "effect": "allow",
+          "leaseId": "network-lease-0001",
+          "sourceCidr": "fd96::2/128",
+          "destinationCidr": "fd20::/64",
+          "protocol": "any",
+          "expiresAt": "2026-09-02T08:05:00Z"
+        }
+      ]
+    }
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/valid/mihomo-protected-policy.json ADDED Viewed

@@ -0,0 +1,45 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "msg-config-mihomo-protection-0001",
+  "messageType": "configuration.desired",
+  "producerId": "network-control",
+  "runtimeId": "endpoint-bob",
+  "runtimeKind": "endpoint",
+  "occurredAt": "2026-09-03T08:00:00Z",
+  "expiresAt": "2026-09-03T08:05:00Z",
+  "payload": {
+    "configurationVersion": 3,
+    "policyVersion": 7,
+    "validUntil": "2026-09-03T08:05:00Z",
+    "accessProfile": "full",
+    "protectedResourceIds": [
+      "resource-payroll"
+    ],
+    "networkLeases": [],
+    "resourceLeases": [],
+    "mihomo": {
+      "mode": "app_subscription",
+      "profileId": "profile-personal",
+      "profileRevision": 1,
+      "mixedPort": 7890,
+      "controllerPort": 9090,
+      "dnsMode": "fake_ip",
+      "fakeIpRange": "198.18.0.0/15",
+      "selectorGroup": "SOHA",
+      "bypassCidrs": [],
+      "bypassHosts": [
+        "network-control.example.com"
+      ],
+      "failClosed": false,
+      "protection": {
+        "policyVersion": 7,
+        "cidrs": [
+          "10.40.0.0/16"
+        ],
+        "hosts": [
+          "payroll.example.com"
+        ]
+      }
+    }
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/valid/site-dns-ipv6.json ADDED Viewed

@@ -0,0 +1,25 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "msg-dns-1",
+  "messageType": "dns.observations",
+  "producerId": "gateway-site-a",
+  "runtimeId": "gateway-site-a",
+  "runtimeKind": "gateway",
+  "occurredAt": "2026-09-02T08:00:00Z",
+  "expiresAt": "2026-09-02T08:05:00Z",
+  "payload": {
+    "configurationVersion": 12,
+    "policyVersion": 7,
+    "observations": [
+      {
+        "resourceId": "resource-payroll",
+        "hostname": "payroll.example.internal",
+        "addresses": [
+          "fd20::10"
+        ],
+        "observedAt": "2026-09-02T08:00:00Z",
+        "ttlSeconds": 60
+      }
+    ]
+  }
+}

package/fixtures/json-schema/network-runtime-protocol/valid/workload-direct-ztna.json ADDED Viewed

@@ -0,0 +1,20 @@
+{
+  "schemaVersion": "network-runtime/v1alpha1",
+  "messageId": "msg-direct-ztna-connect-0001",
+  "messageType": "vpn.connect.request",
+  "producerId": "endpoint-alice",
+  "runtimeId": "endpoint-alice",
+  "runtimeKind": "endpoint",
+  "occurredAt": "2026-09-02T08:00:00Z",
+  "expiresAt": "2026-09-02T08:05:00Z",
+  "payload": {
+    "requestId": "direct-ztna-request-0001",
+    "siteId": "site-a",
+    "networkSpaceId": "space-site-a",
+    "mode": "external_direct_ztna",
+    "resourceIds": [
+      "resource-payroll"
+    ],
+    "workloadId": "billing-worker"
+  }
+}

package/fixtures/openapi/DLPShadowDecision/invalid/step-up-type.json ADDED Viewed

@@ -0,0 +1,14 @@
+{
+  "enabled": true,
+  "mode": "warn",
+  "status": "matched",
+  "allowed": false,
+  "detectorVersion": "content-dlp-text-v1",
+  "matchedRuleIds": [
+    "private_key"
+  ],
+  "dataLevel": "restricted",
+  "minimumDataLevel": "public",
+  "ruleSetVersion": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "stepUpRequired": "true"
+}

package/fixtures/openapi/DLPShadowDecision/valid/archive-v2.json ADDED Viewed

@@ -0,0 +1,14 @@
+{
+  "enabled": true,
+  "mode": "warn",
+  "status": "matched",
+  "allowed": false,
+  "detectorVersion": "content-dlp-archive-v2",
+  "matchedRuleIds": [
+    "private_key"
+  ],
+  "dataLevel": "restricted",
+  "minimumDataLevel": "public",
+  "ruleSetVersion": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "stepUpRequired": true
+}

package/fixtures/openapi/DLPShadowDecision/valid/step-up.json ADDED Viewed

@@ -0,0 +1,14 @@
+{
+  "enabled": true,
+  "mode": "warn",
+  "status": "matched",
+  "allowed": false,
+  "detectorVersion": "content-dlp-text-v1",
+  "matchedRuleIds": [
+    "private_key"
+  ],
+  "dataLevel": "restricted",
+  "minimumDataLevel": "public",
+  "ruleSetVersion": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "stepUpRequired": true
+}

package/fixtures/openapi/DLPShadowInput/invalid/self-reported-result.json ADDED Viewed

@@ -0,0 +1,7 @@
+{
+  "expectedRevision": 3,
+  "samples": [
+    "b2s="
+  ],
+  "allowed": true
+}

package/fixtures/openapi/DLPShadowInput/invalid/too-many-samples.json ADDED Viewed

@@ -0,0 +1,14 @@
+{
+  "expectedRevision": 3,
+  "samples": [
+    "",
+    "",
+    "",
+    "",
+    "",
+    "",
+    "",
+    "",
+    ""
+  ]
+}

package/fixtures/openapi/DLPShadowInput/valid/bounded.json ADDED Viewed

@@ -0,0 +1,7 @@
+{
+  "expectedRevision": 3,
+  "samples": [
+    "b3JkaW5hcnkgdGV4dA==",
+    ""
+  ]
+}

package/fixtures/openapi/DeliveryDocument/invalid/migration-missing-guide-build-template.json ADDED Viewed

@@ -0,0 +1,30 @@
+{
+  "apiVersion": "delivery.soha.io/v1alpha1",
+  "kind": "BuildTemplate",
+  "metadata": {
+    "name": "node-image"
+  },
+  "spec": {
+    "buildCommands": [
+      "npm ci",
+      "npm run build"
+    ],
+    "variableSchema": {
+      "MODE": {
+        "type": "string",
+        "required": true,
+        "enum": [
+          "production",
+          "development"
+        ]
+      }
+    },
+    "defaultVariables": {
+      "MODE": "production"
+    },
+    "migrationPolicy": {
+      "sequential": true,
+      "irreversible": false
+    }
+  }
+}

package/fixtures/openapi/DeliveryDocument/invalid/migration-missing-guide-deployment-template.json ADDED Viewed

@@ -0,0 +1,30 @@
+{
+  "apiVersion": "delivery.soha.io/v1alpha1",
+  "kind": "DeploymentTemplate",
+  "metadata": {
+    "name": "http-service"
+  },
+  "spec": {
+    "source": {
+      "renderer": "raw_yaml",
+      "files": [
+        {
+          "path": "config.yaml",
+          "content": "apiVersion: v1\nkind: ConfigMap\nmetadata:\n  name: example\ndata:\n  mode: prod\n"
+        }
+      ]
+    },
+    "parameterSchema": {
+      "type": "object"
+    },
+    "defaults": {},
+    "health": {
+      "mode": "configuration_only",
+      "timeoutSeconds": 60
+    },
+    "migrationPolicy": {
+      "sequential": true,
+      "irreversible": false
+    }
+  }
+}

package/fixtures/openapi/DeliveryDocument/invalid/migration-missing-guide-workflow-template.json ADDED Viewed

@@ -0,0 +1,27 @@
+{
+  "apiVersion": "delivery.soha.io/v1alpha1",
+  "kind": "WorkflowTemplate",
+  "metadata": {
+    "name": "build-release",
+    "displayName": "\u8054\u5408\u6784\u5efa\u53d1\u5e03"
+  },
+  "spec": {
+    "definition": {
+      "mode": "delivery_batch",
+      "schemaVersion": 1,
+      "stages": [
+        "build",
+        "plan",
+        "deploy",
+        "health"
+      ],
+      "executionMode": "build_all_then_deploy",
+      "stopOnFailure": true,
+      "maxConcurrency": 4
+    },
+    "migrationPolicy": {
+      "sequential": true,
+      "irreversible": false
+    }
+  }
+}

package/fixtures/openapi/DeliveryDocument/valid/migration-build-template.json ADDED Viewed

@@ -0,0 +1,31 @@
+{
+  "apiVersion": "delivery.soha.io/v1alpha1",
+  "kind": "BuildTemplate",
+  "metadata": {
+    "name": "node-image"
+  },
+  "spec": {
+    "buildCommands": [
+      "npm ci",
+      "npm run build"
+    ],
+    "variableSchema": {
+      "MODE": {
+        "type": "string",
+        "required": true,
+        "enum": [
+          "production",
+          "development"
+        ]
+      }
+    },
+    "defaultVariables": {
+      "MODE": "production"
+    },
+    "migrationPolicy": {
+      "sequential": true,
+      "irreversible": true,
+      "guide": "Backup, migrate in order, verify; forward repair only."
+    }
+  }
+}

package/fixtures/openapi/DeliveryDocument/valid/migration-deployment-template.json ADDED Viewed

@@ -0,0 +1,31 @@
+{
+  "apiVersion": "delivery.soha.io/v1alpha1",
+  "kind": "DeploymentTemplate",
+  "metadata": {
+    "name": "http-service"
+  },
+  "spec": {
+    "source": {
+      "renderer": "raw_yaml",
+      "files": [
+        {
+          "path": "config.yaml",
+          "content": "apiVersion: v1\nkind: ConfigMap\nmetadata:\n  name: example\ndata:\n  mode: prod\n"
+        }
+      ]
+    },
+    "parameterSchema": {
+      "type": "object"
+    },
+    "defaults": {},
+    "health": {
+      "mode": "configuration_only",
+      "timeoutSeconds": 60
+    },
+    "migrationPolicy": {
+      "sequential": true,
+      "irreversible": true,
+      "guide": "Backup, migrate in order, verify; forward repair only."
+    }
+  }
+}

package/fixtures/openapi/DeliveryDocument/valid/migration-workflow-template.json ADDED Viewed

@@ -0,0 +1,28 @@
+{
+  "apiVersion": "delivery.soha.io/v1alpha1",
+  "kind": "WorkflowTemplate",
+  "metadata": {
+    "name": "build-release",
+    "displayName": "\u8054\u5408\u6784\u5efa\u53d1\u5e03"
+  },
+  "spec": {
+    "definition": {
+      "mode": "delivery_batch",
+      "schemaVersion": 1,
+      "stages": [
+        "build",
+        "plan",
+        "deploy",
+        "health"
+      ],
+      "executionMode": "build_all_then_deploy",
+      "stopOnFailure": true,
+      "maxConcurrency": 4
+    },
+    "migrationPolicy": {
+      "sequential": true,
+      "irreversible": true,
+      "guide": "Backup, migrate in order, verify; forward repair only."
+    }
+  }
+}

package/fixtures/openapi/DeliveryPlanInput/invalid/manual-plan.json ADDED Viewed

@@ -0,0 +1,7 @@
+{
+  "applicationId": "app",
+  "applicationEnvironmentId": "test",
+  "action": "rollback",
+  "source": "manual",
+  "templateCandidateId": "worker-only"
+}

package/fixtures/openapi/DeliveryPlanInput/valid/manual-plan.json ADDED Viewed

@@ -0,0 +1,6 @@
+{
+  "applicationId": "app",
+  "applicationEnvironmentId": "test",
+  "action": "deploy",
+  "source": "manual"
+}