@opensoha/contracts 0.1.26 → 0.1.27

package/fixtures/openapi/NetworkEndpointResponsePolicyInput/invalid/zero-heartbeat.json

@@ -0,0 +1,47 @@
+{
+  "expectedRevision": 0,
+  "configuration": {
+    "name": "Office service protection",
+    "enabled": true,
+    "siteIds": [
+      "site-lab"
+    ],
+    "nasBindingIds": [
+      "nas-lab"
+    ],
+    "deviceIds": [
+      "endpoint-lab"
+    ],
+    "subjects": {
+      "users": [],
+      "teams": [],
+      "tags": []
+    },
+    "signal": "service_unavailable",
+    "requireHealthyForAdmission": true,
+    "heartbeatIntervalSeconds": 0,
+    "missedHeartbeats": 3,
+    "gracePeriodSeconds": 30,
+    "accountingFreshnessSeconds": 120,
+    "restoreHeartbeats": 3,
+    "restoreObservationSeconds": 60,
+    "autoRestore": false,
+    "steps": [
+      {
+        "afterSeconds": 0,
+        "action": "notify"
+      },
+      {
+        "afterSeconds": 60,
+        "action": "restrict",
+        "targetAccessProfile": "restricted"
+      },
+      {
+        "afterSeconds": 180,
+        "action": "disconnect"
+      }
+    ],
+    "failureAction": "disconnect",
+    "notificationPolicyId": "notifications-lab"
+  }
+}

package/fixtures/openapi/NetworkEndpointResponsePolicyInput/valid/staged-protection.json

@@ -0,0 +1,47 @@
+{
+  "expectedRevision": 0,
+  "configuration": {
+    "name": "Office service protection",
+    "enabled": true,
+    "siteIds": [
+      "site-lab"
+    ],
+    "nasBindingIds": [
+      "nas-lab"
+    ],
+    "deviceIds": [
+      "endpoint-lab"
+    ],
+    "subjects": {
+      "users": [],
+      "teams": [],
+      "tags": []
+    },
+    "signal": "service_unavailable",
+    "requireHealthyForAdmission": true,
+    "heartbeatIntervalSeconds": 30,
+    "missedHeartbeats": 3,
+    "gracePeriodSeconds": 30,
+    "accountingFreshnessSeconds": 120,
+    "restoreHeartbeats": 3,
+    "restoreObservationSeconds": 60,
+    "autoRestore": false,
+    "steps": [
+      {
+        "afterSeconds": 0,
+        "action": "notify"
+      },
+      {
+        "afterSeconds": 60,
+        "action": "restrict",
+        "targetAccessProfile": "restricted"
+      },
+      {
+        "afterSeconds": 180,
+        "action": "disconnect"
+      }
+    ],
+    "failureAction": "disconnect",
+    "notificationPolicyId": "notifications-lab"
+  }
+}

package/fixtures/openapi/NetworkEndpointResponseRestoreInput/invalid/missing-reason.json

@@ -0,0 +1,3 @@
+{
+  "expectedRevision": 4
+}

package/fixtures/openapi/NetworkEndpointResponseRestoreInput/valid/expected-current.json

@@ -0,0 +1,4 @@
+{
+  "expectedRevision": 4,
+  "reason": "Service health verified in the isolated lab."
+}

package/fixtures/openapi/NetworkPolicyPreviewResult/invalid/attribute-version.json

@@ -0,0 +1 @@
+{"decision":"allow","path":"site_direct","policyVersion":2,"attributeVersion":"unversioned","protected":false,"networkLeaseRequired":false,"resourceLeaseRequired":false,"reasons":["policy_allow:office"]}

package/fixtures/openapi/NetworkPolicyPreviewResult/valid/admission-version.json

@@ -0,0 +1 @@
+{"decision":"allow","path":"site_direct","policyVersion":2,"attributeVersion":"sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","evaluatedAt":"2026-10-15T05:00:00Z","protected":false,"networkLeaseRequired":false,"resourceLeaseRequired":false,"networkProfile":"restricted","reasons":["policy_allow:office"]}

package/fixtures/openapi/NetworkPolicySubjects/invalid/duplicate-role.json

@@ -0,0 +1 @@
+{"users":[],"teams":[],"tags":[],"roles":["network-staff","network-staff"]}

package/fixtures/openapi/NetworkPolicySubjects/invalid/role-characters.json

@@ -0,0 +1,5 @@
+{
+  "roles": [
+    "invalid role"
+  ]
+}

package/fixtures/openapi/NetworkPolicySubjects/valid/role-bound.json

@@ -0,0 +1 @@
+{"users":[],"teams":[],"tags":[],"roles":["network-staff"]}

package/fixtures/openapi/NetworkProxyConfigurationInput/invalid/missing-content.json

@@ -0,0 +1 @@
+{"expectedRevision":0,"enabled":true}

package/fixtures/openapi/NetworkProxyConfigurationPatchInput/invalid/bad-binding-id.json

@@ -0,0 +1,9 @@
+{
+  "expectedRevision": 4,
+  "enabled": true,
+  "binding": {
+    "siteId": "invalid id",
+    "deviceId": "device-host",
+    "resourceIds": []
+  }
+}

package/fixtures/openapi/NetworkProxyConfigurationPatchInput/invalid/empty-content.json

@@ -0,0 +1 @@
+{"expectedRevision":0,"enabled":true,"content":""}

package/fixtures/openapi/NetworkProxyConfigurationPatchInput/valid/binding-only.json

@@ -0,0 +1,11 @@
+{
+  "expectedRevision": 4,
+  "enabled": true,
+  "binding": {
+    "siteId": "site-a",
+    "deviceId": "device-host",
+    "resourceIds": [
+      "resource-payroll"
+    ]
+  }
+}

package/fixtures/openapi/NetworkProxyConfigurationPatchInput/valid/clear-binding-disabled.json

@@ -0,0 +1,5 @@
+{
+  "expectedRevision": 4,
+  "enabled": false,
+  "clearBinding": true
+}

package/fixtures/openapi/NetworkProxyConfigurationPatchInput/valid/enabled.json

@@ -0,0 +1 @@
+{"expectedRevision":0,"enabled":true,"content":"mixed-port: 7890\nsecret: example-test-secret\n"}

package/fixtures/openapi/NetworkSiteInput/invalid/unknown-governance.json

@@ -0,0 +1,6 @@
+{
+  "name": "Shanghai Office",
+  "status": "active",
+  "location": "Shanghai",
+  "deviceGovernance": "trust_everyone"
+}

package/fixtures/openapi/NetworkSiteInput/valid/restricted-unmanaged.json

@@ -0,0 +1,6 @@
+{
+  "name": "Shanghai Office",
+  "status": "active",
+  "location": "Shanghai",
+  "deviceGovernance": "restricted_unmanaged"
+}

package/gen/go/sohaapi/client.go

@@ -16,7 +16,7 @@ import (
 	"time"
 )
 
-const defaultUserAgent = "opensoha-contracts/0.1.26"
+const defaultUserAgent = "opensoha-contracts/0.1.27"
 
 type Client struct {
 	BaseURL    string

package/gen/go/sohaapi/proxy_configuration_test.go

@@ -0,0 +1,38 @@
+package sohaapi
+
+import (
+	"encoding/json"
+	"strings"
+	"testing"
+)
+
+// These assignments protect source compatibility for existing SDK consumers.
+var (
+	_ string = NetworkProxyConfigurationInput{}.Content
+	_ string = UpdateNetworkProxyConfigurationJSONRequestBody{}.Content
+)
+
+func TestProxyPartialInputKeepsOmissionSeparateFromEmptyContent(t *testing.T) {
+	var input NetworkProxyConfigurationPatchInput
+	if err := json.Unmarshal([]byte(`{"expectedRevision":4,"enabled":false,"clearBinding":true}`), &input); err != nil {
+		t.Fatal(err)
+	}
+	if input.Content != nil || !input.ClearBinding {
+		t.Fatalf("partial input = %#v", input)
+	}
+	payload, err := json.Marshal(input)
+	if err != nil || strings.Contains(string(payload), `"content"`) {
+		t.Fatalf("omitted content encoded as %s, %v", payload, err)
+	}
+	if err := json.Unmarshal([]byte(`{"expectedRevision":4,"enabled":true,"content":""}`), &input); err != nil {
+		t.Fatal(err)
+	}
+	if input.Content == nil || *input.Content != "" {
+		t.Fatal("explicit empty content lost its presence for server-side rejection")
+	}
+	legacy := UpdateNetworkProxyConfigurationJSONRequestBody{ExpectedRevision: 4, Enabled: true, Content: "mode: rule"}
+	payload, err = json.Marshal(legacy)
+	if err != nil || !strings.Contains(string(payload), `"content":"mode: rule"`) {
+		t.Fatalf("legacy full input = %s, %v", payload, err)
+	}
+}