npm - @opensoha/contracts - Versions diffs - 0.1.26 → 0.1.29 - Mend

@opensoha/contracts 0.1.26 → 0.1.29

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (213) hide show

package/fixtures/openapi/DockerVolumeDLPContent/invalid/archive-unsupported-channel.json ADDED Viewed

@@ -0,0 +1,9 @@
+{
+  "enabled": true,
+  "mode": "block",
+  "detectors": [
+    "private_key"
+  ],
+  "rules": [],
+  "detectorVersion": "content-dlp-archive-v2"
+}

package/fixtures/openapi/DockerVolumeDLPContent/invalid/p4.json ADDED Viewed

@@ -0,0 +1,6 @@
+{
+  "enabled": true,
+  "mode": "allow",
+  "detectors": [],
+  "rules": []
+}

package/fixtures/openapi/DockerVolumeDLPContent/invalid/step-up-audit.json ADDED Viewed

@@ -0,0 +1,9 @@
+{
+  "mode": "audit",
+  "detectors": [
+    "private_key"
+  ],
+  "rules": [],
+  "requireStepUp": true,
+  "enabled": true
+}

package/fixtures/openapi/DockerVolumeDLPContent/invalid/unavailable-engine.json ADDED Viewed

@@ -0,0 +1,9 @@
+{
+  "enabled": true,
+  "mode": "block",
+  "detectors": [
+    "private_key"
+  ],
+  "rules": [],
+  "detectorVersion": "content-dlp-unavailable"
+}

package/fixtures/openapi/DockerVolumeDLPContent/invalid/unknown-data-level.json ADDED Viewed

@@ -0,0 +1,12 @@
+{
+  "enabled": true,
+  "mode": "block",
+  "detectors": [],
+  "rules": [
+    {
+      "id": "bad",
+      "expression": "x",
+      "dataLevel": "unknown"
+    }
+  ]
+}

package/fixtures/openapi/DockerVolumeDLPContent/valid/classified-rule.json ADDED Viewed

@@ -0,0 +1,16 @@
+{
+  "enabled": true,
+  "mode": "block",
+  "detectors": [
+    "private_key"
+  ],
+  "rules": [
+    {
+      "id": "internal",
+      "expression": "INTERNAL",
+      "dataLevel": "internal"
+    }
+  ],
+  "minimumDataLevel": "confidential",
+  "detectorVersion": "content-dlp-text-v1"
+}

package/fixtures/openapi/DockerVolumeDLPContent/valid/p4.json ADDED Viewed

@@ -0,0 +1,8 @@
+{
+  "enabled": true,
+  "mode": "block",
+  "detectors": [
+    "private_key"
+  ],
+  "rules": []
+}

package/fixtures/openapi/DockerVolumeDLPContent/valid/step-up.json ADDED Viewed

@@ -0,0 +1,9 @@
+{
+  "mode": "warn",
+  "detectors": [
+    "private_key"
+  ],
+  "rules": [],
+  "requireStepUp": true,
+  "enabled": true
+}

package/fixtures/openapi/DockerVolumeDLPDecision/invalid/p4.json ADDED Viewed

@@ -0,0 +1,9 @@
+{
+  "eventId": "e1",
+  "mode": "block",
+  "status": "safe",
+  "allowed": true,
+  "policyVersion": 1,
+  "detectorVersion": "content-dlp-text-v1",
+  "matchedRuleIds": []
+}

package/fixtures/openapi/DockerVolumeDLPDecision/invalid/step-up-type.json ADDED Viewed

@@ -0,0 +1,12 @@
+{
+  "eventId": "e1",
+  "mode": "block",
+  "status": "matched",
+  "allowed": false,
+  "policyVersion": 1,
+  "detectorVersion": "content-dlp-text-v1",
+  "matchedRuleIds": [
+    "private_key"
+  ],
+  "stepUpRequired": "true"
+}

package/fixtures/openapi/DockerVolumeDLPDecision/valid/archive-v2.json ADDED Viewed

@@ -0,0 +1,12 @@
+{
+  "eventId": "e1",
+  "mode": "block",
+  "status": "matched",
+  "allowed": false,
+  "policyVersion": 1,
+  "detectorVersion": "content-dlp-archive-v2",
+  "matchedRuleIds": [
+    "private_key"
+  ],
+  "stepUpRequired": true
+}

package/fixtures/openapi/DockerVolumeDLPDecision/valid/p4.json ADDED Viewed

@@ -0,0 +1,11 @@
+{
+  "eventId": "e1",
+  "mode": "block",
+  "status": "matched",
+  "allowed": false,
+  "policyVersion": 1,
+  "detectorVersion": "content-dlp-text-v1",
+  "matchedRuleIds": [
+    "private_key"
+  ]
+}

package/fixtures/openapi/DockerVolumeDLPDecision/valid/step-up.json ADDED Viewed

@@ -0,0 +1,12 @@
+{
+  "eventId": "e1",
+  "mode": "block",
+  "status": "matched",
+  "allowed": false,
+  "policyVersion": 1,
+  "detectorVersion": "content-dlp-text-v1",
+  "matchedRuleIds": [
+    "private_key"
+  ],
+  "stepUpRequired": true
+}

package/fixtures/openapi/DockerVolumeDLPSaveInput/invalid/p4.json ADDED Viewed

@@ -0,0 +1,11 @@
+{
+  "expectedRevision": -1,
+  "draft": {
+    "enabled": true,
+    "mode": "block",
+    "detectors": [
+      "unknown"
+    ],
+    "rules": []
+  }
+}

package/fixtures/openapi/DockerVolumeDLPSaveInput/valid/p4.json ADDED Viewed

@@ -0,0 +1,11 @@
+{
+  "expectedRevision": 0,
+  "draft": {
+    "enabled": true,
+    "mode": "audit",
+    "detectors": [
+      "private_key"
+    ],
+    "rules": []
+  }
+}

package/fixtures/openapi/DockerVolumeFileReadInput/invalid/p4-response.json ADDED Viewed

@@ -0,0 +1,5 @@
+{
+  "target": "/data",
+  "path": "/file.txt",
+  "authorization": "short"
+}

package/fixtures/openapi/DockerVolumeFileReadInput/valid/p4-response.json ADDED Viewed

@@ -0,0 +1,4 @@
+{
+  "target": "/data",
+  "path": "/file.txt"
+}

package/fixtures/openapi/EndpointDeviceInput/invalid/reported-management.json ADDED Viewed

@@ -0,0 +1,5 @@
+{
+  "name": "Laptop",
+  "status": "active",
+  "managementState": "self_attested"
+}

package/fixtures/openapi/EndpointDeviceInput/valid/management-state.json ADDED Viewed

@@ -0,0 +1,5 @@
+{
+  "name": "Pilot laptop",
+  "status": "active",
+  "managementState": "managed"
+}

package/fixtures/openapi/EndpointDeviceRegistrationInput/invalid/self-promote-management.json ADDED Viewed

@@ -0,0 +1,5 @@
+{
+  "name": "Laptop",
+  "platform": "windows",
+  "managementState": "managed"
+}

package/fixtures/openapi/KubernetesClusterRegistrationRequest/invalid/metric-cluster-value-length.json ADDED Viewed

@@ -0,0 +1,3 @@
+{
+  "prometheusClusterLabelValue": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
+}

package/fixtures/openapi/KubernetesClusterRegistrationRequest/invalid/metric-cluster-value-type.json ADDED Viewed

@@ -0,0 +1,3 @@
+{
+  "prometheusClusterLabelValue": 7
+}

package/fixtures/openapi/KubernetesClusterRegistrationRequest/valid/metric-cluster-alias.json ADDED Viewed

@@ -0,0 +1,5 @@
+{
+  "name": "example",
+  "prometheusClusterLabel": "cluster",
+  "prometheusClusterLabelValue": "middleware-prod"
+}

package/fixtures/openapi/KubernetesClusterRegistrationRequest/valid/metric-cluster-reset.json ADDED Viewed

@@ -0,0 +1,3 @@
+{
+  "prometheusClusterLabelValue": ""
+}

package/fixtures/openapi/KubernetesHelmReleaseValuesUpdateInput/invalid/revision-overflow.json ADDED Viewed

@@ -0,0 +1,4 @@
+{
+  "content": "{}\n",
+  "expectedRevision": 2147483647
+}

package/fixtures/openapi/KubernetesHelmReleaseValuesUpdateInput/valid/legacy.json ADDED Viewed

@@ -0,0 +1,3 @@
+{
+  "content": "{}\n"
+}

package/fixtures/openapi/KubernetesHelmReleaseValuesUpdateInput/valid/observed-revision.json ADDED Viewed

@@ -0,0 +1,4 @@
+{
+  "content": "replicaCount: 2\n",
+  "expectedRevision": 4
+}

package/fixtures/openapi/KubernetesJobDetail/invalid/execution-observation.json ADDED Viewed

@@ -0,0 +1,23 @@
+{
+  "name": "task117-demo-failed",
+  "namespace": "task117-jobs-demo",
+  "completions": 1,
+  "completionTarget": 1,
+  "parallelism": 1,
+  "succeeded": 0,
+  "failed": 1,
+  "active": 0,
+  "suspend": false,
+  "backoffLimit": -1,
+  "activeDeadlineSeconds": 3600,
+  "ttlSecondsAfterFinished": 604800,
+  "startTime": "2026-11-01T02:00:00Z",
+  "conditions": [
+    {
+      "type": "Failed",
+      "status": "True",
+      "reason": "BackoffLimitExceeded",
+      "lastTransitionTime": "2026-11-01T02:00:20Z"
+    }
+  ]
+}

package/fixtures/openapi/KubernetesJobDetail/valid/execution-observation.json ADDED Viewed

@@ -0,0 +1,23 @@
+{
+  "name": "task117-demo-failed",
+  "namespace": "task117-jobs-demo",
+  "completions": 1,
+  "completionTarget": 1,
+  "parallelism": 1,
+  "succeeded": 0,
+  "failed": 1,
+  "active": 0,
+  "suspend": false,
+  "backoffLimit": 0,
+  "activeDeadlineSeconds": 3600,
+  "ttlSecondsAfterFinished": 604800,
+  "startTime": "2026-11-01T02:00:00Z",
+  "conditions": [
+    {
+      "type": "Failed",
+      "status": "True",
+      "reason": "BackoffLimitExceeded",
+      "lastTransitionTime": "2026-11-01T02:00:20Z"
+    }
+  ]
+}

package/fixtures/openapi/KubernetesNode/invalid/labels.json ADDED Viewed

@@ -0,0 +1,10 @@
+{
+  "name": "worker-a",
+  "status": "Ready",
+  "unschedulable": false,
+  "podCount": 0,
+  "ageSeconds": 0,
+  "labels": {
+    "pool": 1
+  }
+}

package/fixtures/openapi/KubernetesNode/valid/labels.json ADDED Viewed

@@ -0,0 +1,11 @@
+{
+  "name": "worker-a",
+  "status": "Ready",
+  "unschedulable": false,
+  "podCount": 0,
+  "ageSeconds": 0,
+  "labels": {
+    "node-role.kubernetes.io/worker": "",
+    "pool": "gpu"
+  }
+}

package/fixtures/openapi/KubernetesPodListEnvelope/invalid/empty-uid.json ADDED Viewed

@@ -0,0 +1,13 @@
+{
+  "items": [
+    {
+      "name": "api",
+      "namespace": "apps",
+      "uid": "",
+      "phase": "Running",
+      "readyContainers": "1/1",
+      "restarts": 0,
+      "ageSeconds": 60
+    }
+  ]
+}

package/fixtures/openapi/KubernetesPodListEnvelope/invalid/invalid-container-state.json ADDED Viewed

@@ -0,0 +1,20 @@
+{
+  "items": [
+    {
+      "name": "api",
+      "namespace": "apps",
+      "phase": "Running",
+      "readyContainers": "1/1",
+      "restarts": 0,
+      "ageSeconds": 60,
+      "containerStatuses": [
+        {
+          "name": "api",
+          "ready": true,
+          "state": "healthy",
+          "kind": "container"
+        }
+      ]
+    }
+  ]
+}

package/fixtures/openapi/KubernetesPodListEnvelope/invalid/missing-container-ready.json ADDED Viewed

@@ -0,0 +1,19 @@
+{
+  "items": [
+    {
+      "name": "api",
+      "namespace": "apps",
+      "phase": "Pending",
+      "readyContainers": "0/1",
+      "restarts": 0,
+      "ageSeconds": 60,
+      "containerStatuses": [
+        {
+          "name": "api",
+          "state": "unknown",
+          "kind": "container"
+        }
+      ]
+    }
+  ]
+}

package/fixtures/openapi/KubernetesPodListEnvelope/valid/container-statuses.json ADDED Viewed

@@ -0,0 +1,67 @@
+{
+  "items": [
+    {
+      "name": "api",
+      "namespace": "apps",
+      "phase": "Running",
+      "readyContainers": "1/3",
+      "restarts": 2,
+      "ageSeconds": 60,
+      "qosClass": "Burstable",
+      "containerStatuses": [
+        {
+          "name": "migrate",
+          "kind": "init",
+          "ready": false,
+          "state": "terminated",
+          "reason": "Completed",
+          "exitCode": 0
+        },
+        {
+          "name": "proxy-init",
+          "kind": "sidecar",
+          "ready": true,
+          "state": "running"
+        },
+        {
+          "name": "api",
+          "ready": true,
+          "state": "running",
+          "kind": "container"
+        },
+        {
+          "name": "proxy",
+          "ready": false,
+          "state": "waiting",
+          "reason": "CrashLoopBackOff",
+          "kind": "container"
+        },
+        {
+          "name": "worker",
+          "ready": false,
+          "state": "unknown",
+          "kind": "container"
+        }
+      ]
+    },
+    {
+      "name": "job",
+      "namespace": "apps",
+      "phase": "Succeeded",
+      "readyContainers": "0/1",
+      "restarts": 0,
+      "ageSeconds": 30,
+      "qosClass": "BestEffort",
+      "containerStatuses": [
+        {
+          "name": "job",
+          "ready": false,
+          "state": "terminated",
+          "reason": "Completed",
+          "exitCode": 0,
+          "kind": "container"
+        }
+      ]
+    }
+  ]
+}

package/fixtures/openapi/KubernetesPodListEnvelope/valid/running-pod.json CHANGED Viewed

@@ -3,6 +3,7 @@
     {
       "name": "api-7c8d9f",
       "namespace": "production",
+      "uid": "97cb3639-ff9d-4633-a70b-70c8149d6f4a",
       "phase": "Running",
       "nodeName": "worker-1",
       "podIp": "10.42.1.8",

package/fixtures/openapi/KubernetesPrometheusDetail/invalid/metric-cluster-value-type.json ADDED Viewed

@@ -0,0 +1,4 @@
+{
+  "hasBearerToken": false,
+  "clusterLabelValue": 7
+}

package/fixtures/openapi/KubernetesPrometheusDetail/valid/metric-cluster-alias.json ADDED Viewed

@@ -0,0 +1,5 @@
+{
+  "hasBearerToken": false,
+  "clusterLabel": "cluster",
+  "clusterLabelValue": "middleware-prod"
+}

package/fixtures/openapi/KubernetesResourceGraphEnvelope/invalid/network-edge-source-payload.json ADDED Viewed

@@ -0,0 +1,73 @@
+{
+  "data": {
+    "clusterId": "cluster-a",
+    "namespace": "team-a",
+    "generatedAt": "2026-08-23T08:00:00Z",
+    "rootId": "apps/v1:Deployment:team-a/api",
+    "nodes": [
+      {
+        "id": "apps/v1:Deployment:team-a/api",
+        "resource": {
+          "clusterId": "cluster-a",
+          "apiVersion": "apps/v1",
+          "kind": "Deployment",
+          "name": "api",
+          "namespace": "team-a",
+          "scopeMode": "namespace",
+          "data": {
+            "privateKey": "forbidden"
+          }
+        },
+        "status": "healthy"
+      },
+      {
+        "id": "v1:Pod:team-a/api-1",
+        "resource": {
+          "clusterId": "cluster-a",
+          "apiVersion": "v1",
+          "kind": "Pod",
+          "name": "api-1",
+          "namespace": "team-a",
+          "scopeMode": "namespace"
+        },
+        "status": "Running"
+      }
+    ],
+    "edges": [
+      {
+        "id": "owns:deployment-api:pod-api-1",
+        "sourceId": "apps/v1:Deployment:team-a/api",
+        "targetId": "v1:Pod:team-a/api-1",
+        "relation": "owns",
+        "resolutionState": "resolved",
+        "protocol": "HTTPS",
+        "port": "443",
+        "sectionName": "https",
+        "fieldPath": "spec.parentRefs[0]",
+        "note": "Declared listener attachment; controller execution unverified",
+        "sourceRef": {
+          "clusterId": "cluster-a",
+          "apiVersion": "apps/v1",
+          "kind": "Deployment",
+          "name": "api",
+          "namespace": "team-a",
+          "scopeMode": "namespace",
+          "data": {
+            "privateKey": "forbidden"
+          }
+        }
+      }
+    ],
+    "evidence": [
+      {
+        "id": "event/team-a/api-1-scheduled",
+        "type": "kubernetes-event",
+        "severity": "info",
+        "summary": "Pod scheduled",
+        "observedAt": "2026-08-23T07:59:58Z",
+        "resourceId": "v1:Pod:team-a/api-1"
+      }
+    ],
+    "warnings": []
+  }
+}

package/fixtures/openapi/KubernetesResourceGraphEnvelope/valid/network-edge-facts.json ADDED Viewed

@@ -0,0 +1,67 @@
+{
+  "data": {
+    "clusterId": "cluster-a",
+    "namespace": "team-a",
+    "generatedAt": "2026-08-23T08:00:00Z",
+    "rootId": "apps/v1:Deployment:team-a/api",
+    "nodes": [
+      {
+        "id": "apps/v1:Deployment:team-a/api",
+        "resource": {
+          "clusterId": "cluster-a",
+          "apiVersion": "apps/v1",
+          "kind": "Deployment",
+          "name": "api",
+          "namespace": "team-a",
+          "scopeMode": "namespace"
+        },
+        "status": "healthy"
+      },
+      {
+        "id": "v1:Pod:team-a/api-1",
+        "resource": {
+          "clusterId": "cluster-a",
+          "apiVersion": "v1",
+          "kind": "Pod",
+          "name": "api-1",
+          "namespace": "team-a",
+          "scopeMode": "namespace"
+        },
+        "status": "Running"
+      }
+    ],
+    "edges": [
+      {
+        "id": "owns:deployment-api:pod-api-1",
+        "sourceId": "apps/v1:Deployment:team-a/api",
+        "targetId": "v1:Pod:team-a/api-1",
+        "relation": "owns",
+        "resolutionState": "resolved",
+        "protocol": "HTTPS",
+        "port": "443",
+        "sectionName": "https",
+        "fieldPath": "spec.parentRefs[0]",
+        "note": "Declared listener attachment; controller execution unverified",
+        "sourceRef": {
+          "clusterId": "cluster-a",
+          "apiVersion": "apps/v1",
+          "kind": "Deployment",
+          "name": "api",
+          "namespace": "team-a",
+          "scopeMode": "namespace"
+        }
+      }
+    ],
+    "evidence": [
+      {
+        "id": "event/team-a/api-1-scheduled",
+        "type": "kubernetes-event",
+        "severity": "info",
+        "summary": "Pod scheduled",
+        "observedAt": "2026-08-23T07:59:58Z",
+        "resourceId": "v1:Pod:team-a/api-1"
+      }
+    ],
+    "warnings": []
+  }
+}

package/fixtures/openapi/KubernetesSecretCertificate/invalid/secret-data.json ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"name":"demo-tls","namespace":"demo","status":"available","data":{"tls.key":"forbidden"}}

package/fixtures/openapi/KubernetesSecretCertificate/invalid/status.json ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"name":"demo-tls","namespace":"demo","status":"healthy"}

package/fixtures/openapi/KubernetesSecretCertificate/valid/available.json ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"name":"demo-tls","namespace":"demo","status":"available","notBefore":"2026-11-02T08:00:00Z","notAfter":"2026-12-02T08:00:00Z","selfSigned":true}

package/fixtures/openapi/KubernetesSecretCertificate/valid/missing.json ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"name":"demo-tls","namespace":"demo","status":"missing"}

package/fixtures/openapi/ManagedContentPasteInput/invalid/boundary.json ADDED Viewed

@@ -0,0 +1,5 @@
+{
+  "requestId": "11111111-1111-4111-8111-111111111111",
+  "destinationId": "22222222-2222-4222-8222-222222222222",
+  "fileName": "paste.txt"
+}

package/fixtures/openapi/ManagedContentPasteInput/valid/boundary.json ADDED Viewed

@@ -0,0 +1,6 @@
+{
+  "requestId": "11111111-1111-4111-8111-111111111111",
+  "destinationId": "22222222-2222-4222-8222-222222222222",
+  "fileName": "paste.txt",
+  "text": "example"
+}

package/fixtures/openapi/ManagedContentPolicy/invalid/self-reported-allow.json ADDED Viewed

@@ -0,0 +1,8 @@
+{
+  "mode": "block",
+  "detectors": [
+    "private_key"
+  ],
+  "rules": [],
+  "allowed": true
+}