@opensoha/contracts 0.1.4

package/fixtures/json-schema/marketplace-catalog/valid/minimal.json

@@ -0,0 +1,44 @@
+{
+  "schemaVersion": "marketplace.opensoha.io/v1",
+  "generatedAt": "2026-06-28T00:00:00Z",
+  "sourceId": "opensoha-official",
+  "sourceUrl": "https://marketplace.opensoha.com/marketplace/index.json",
+  "plugins": [
+    {
+      "id": "opensoha.k8s-sre",
+      "name": "Kubernetes SRE Pack",
+      "version": "0.1.0",
+      "publisher": "opensoha",
+      "type": "skill-pack",
+      "summary": "Read-only Kubernetes troubleshooting skills.",
+      "source": "marketplace:opensoha/k8s-sre",
+      "sourceId": "opensoha-official",
+      "riskLevel": "read",
+      "latestVersion": "0.1.0",
+      "categories": ["ai", "sre"],
+      "verified": true,
+      "publisherInfo": {
+        "id": "opensoha",
+        "name": "OpenSoha",
+        "verified": true,
+        "verificationLevel": "official"
+      },
+      "versions": [
+        {
+          "version": "0.1.0",
+          "manifestUrl": "https://marketplace.opensoha.com/plugins/opensoha.k8s-sre/0.1.0/plugin.manifest.json",
+          "checksum": "sha256:placeholder",
+          "signature": "sigstore:placeholder",
+          "publishedAt": "2026-06-28T00:00:00Z"
+        }
+      ],
+      "manifest": {
+        "id": "opensoha.k8s-sre",
+        "name": "Kubernetes SRE Pack",
+        "version": "0.1.0",
+        "publisher": "opensoha",
+        "type": "skill-pack"
+      }
+    }
+  ]
+}

package/fixtures/json-schema/mcp-preset/invalid/bad-risk-level.json

@@ -0,0 +1,20 @@
+{
+  "schemaVersion": "opensoha.dev/mcp-preset/v1",
+  "id": "k8s-readonly",
+  "name": "Kubernetes Readonly Diagnosis",
+  "version": "0.1.0",
+  "description": "Read-only AI Gateway tools for scoped Kubernetes workload diagnosis.",
+  "riskLevel": "admin",
+  "skillRefs": ["k8s-sre"],
+  "platformCapabilityRefs": ["cluster.inventory"],
+  "requiredScopes": ["cluster"],
+  "tools": [
+    {
+      "name": "k8s.pods.list",
+      "description": "List pods in a scoped namespace.",
+      "riskLevel": "read",
+      "requiredScopes": ["cluster"]
+    }
+  ],
+  "guardrails": ["read_only"]
+}

package/fixtures/json-schema/mcp-preset/valid/k8s-readonly.json

@@ -0,0 +1,40 @@
+{
+  "schemaVersion": "opensoha.dev/mcp-preset/v1",
+  "id": "k8s-readonly",
+  "name": "Kubernetes Readonly Diagnosis",
+  "version": "0.1.0",
+  "description": "Read-only AI Gateway tools for scoped Kubernetes workload diagnosis.",
+  "riskLevel": "read",
+  "skillRefs": ["k8s-sre"],
+  "platformCapabilityRefs": ["cluster.inventory", "workload.read", "network.inventory", "storage.inventory", "pod.logs", "metrics"],
+  "requiredScopes": ["cluster", "namespace"],
+  "tools": [
+    {
+      "name": "k8s.pods.list",
+      "description": "List pods in a scoped namespace.",
+      "riskLevel": "read",
+      "requiredScopes": ["cluster", "namespace"]
+    },
+    {
+      "name": "k8s.pods.logs",
+      "description": "Read recent pod logs in a scoped namespace.",
+      "riskLevel": "read",
+      "requiredScopes": ["cluster", "namespace"]
+    }
+  ],
+  "resources": [
+    {
+      "name": "soha://k8s/runtime",
+      "description": "Scoped Kubernetes runtime context for the selected cluster and namespace.",
+      "requiredScopes": ["cluster", "namespace"]
+    }
+  ],
+  "prompts": [
+    {
+      "name": "soha.k8s.diagnose_workload",
+      "description": "Workload diagnosis prompt bounded to Gateway evidence.",
+      "requiredScopes": ["cluster", "namespace"]
+    }
+  ],
+  "guardrails": ["read_only", "no_kubeconfig", "no_secret_output", "scoped_cluster_namespace"]
+}

package/fixtures/json-schema/memory-policy/invalid/missing.json

@@ -0,0 +1 @@
+{}

package/fixtures/json-schema/memory-policy/valid/explicit.json

@@ -0,0 +1 @@
+{"schemaVersion":"opensoha.dev/memory-policy/v1","id":"user-memory","version":"v1","ownerTypes":["user"],"defaultTtlSeconds":86400,"maximumTtlSeconds":604800,"minimumConfidence":0.9,"explicitWriteOnly":true,"enabled":true}

package/fixtures/json-schema/memory-record/invalid/missing.json

@@ -0,0 +1 @@
+{}

package/fixtures/json-schema/memory-record/valid/explicit.json

@@ -0,0 +1 @@
+{"schemaVersion":"opensoha.dev/memory-record/v1","id":"memory-1","ownerType":"user","ownerId":"user-1","scopeHash":"sha256:0000000000000000000000000000000000000000000000000000000000000000","fact":"prefers concise output","sourceType":"explicit_user","confidence":1,"validFrom":"2026-07-15T00:00:00Z","policyVersion":"v1","status":"active","createdAt":"2026-07-15T00:00:00Z"}

package/fixtures/json-schema/multi-agent-plan/invalid/missing.json

@@ -0,0 +1 @@
+{}

package/fixtures/json-schema/multi-agent-plan/valid/running.json

@@ -0,0 +1 @@
+{"schemaVersion":"opensoha.dev/multi-agent-plan/v1","id":"plan-1","coordinatorRef":"coordinator:v1","subtasks":[{"id":"research","agentProfileRef":"researcher:v1","input":"research","permissionKeys":["knowledge.search"],"status":"pending"}],"sharedBudget":{"maxSteps":20,"maxTokens":20000,"maxCost":2,"deadlineSeconds":600},"status":"running","createdAt":"2026-07-15T00:00:00Z"}

package/fixtures/json-schema/observability-log-query-v1/invalid/missing-query.json

@@ -0,0 +1,6 @@
+{
+  "protocolVersion": "v1",
+  "providerKey": "community-logs",
+  "sourceId": "source-1",
+  "config": {}
+}

package/fixtures/json-schema/observability-log-query-v1/valid/request.json

@@ -0,0 +1,15 @@
+{
+  "protocolVersion": "v1",
+  "providerKey": "community-logs",
+  "sourceId": "source-1",
+  "config": { "endpoint": "https://logs.example" },
+  "credentials": { "api_token": "secret" },
+  "query": {
+    "scope": { "clusterId": "cluster-a", "namespace": "apps", "containers": ["api", "sidecar"] },
+    "timeFrom": "2026-08-02T10:00:00Z",
+    "timeTo": "2026-08-02T10:15:00Z",
+    "query": "trace-123",
+    "limit": 200,
+    "direction": "backward"
+  }
+}

package/fixtures/json-schema/observability-log-query-v1/valid/response.json

@@ -0,0 +1,13 @@
+{
+  "sourceId": "source-1",
+  "records": [
+    {
+      "timestamp": "2026-08-02T10:14:00Z",
+      "severity": "info",
+      "message": "request complete",
+      "service": "checkout",
+      "attributes": { "trace_id": "trace-123" }
+    }
+  ],
+  "truncated": false
+}

package/fixtures/json-schema/plugin-manifest/invalid/bad-type.json

@@ -0,0 +1,7 @@
+{
+  "id": "opensoha.k8s-sre",
+  "name": "Kubernetes SRE Pack",
+  "version": "0.1.0",
+  "publisher": "opensoha",
+  "type": "unknown"
+}

package/fixtures/json-schema/plugin-manifest/invalid/logs-query-without-action.json

@@ -0,0 +1,28 @@
+{
+  "id": "opensoha.invalid-logs-provider",
+  "name": "Invalid Logs Provider",
+  "version": "0.1.0",
+  "publisher": "opensoha",
+  "type": "observability-provider",
+  "runtime": {
+    "mode": "external-http",
+    "endpoint": "https://logs-provider.example.com",
+    "actionPath": "/v1/actions/{action}"
+  },
+  "extensionPoints": {
+    "observability": {
+      "providers": [
+        {
+          "providerKey": "invalid-logs",
+          "displayName": "Invalid Logs",
+          "protocolVersion": "v1",
+          "signals": ["logs"],
+          "capabilities": ["logs.query"],
+          "actionRefs": {
+            "metrics.query": "metrics-query"
+          }
+        }
+      ]
+    }
+  }
+}

package/fixtures/json-schema/plugin-manifest/invalid/manifest-only-observability-provider.json

@@ -0,0 +1,26 @@
+{
+  "id": "opensoha.invalid-observability-provider",
+  "name": "Invalid Observability Provider",
+  "version": "0.1.0",
+  "publisher": "opensoha",
+  "type": "observability-provider",
+  "runtime": {
+    "mode": "manifest-only"
+  },
+  "extensionPoints": {
+    "observability": {
+      "providers": [
+        {
+          "providerKey": "invalid",
+          "displayName": "Invalid",
+          "protocolVersion": "v1",
+          "signals": ["logs"],
+          "capabilities": ["logs.query"],
+          "actionRefs": {
+            "logs.query": "logs-query"
+          }
+        }
+      ]
+    }
+  }
+}

package/fixtures/json-schema/plugin-manifest/invalid/manifest-only-read-provider.json

@@ -0,0 +1,23 @@
+{
+  "id": "opensoha.invalid-provider",
+  "name": "Invalid Provider",
+  "version": "0.1.0",
+  "publisher": "opensoha",
+  "type": "resource-extension",
+  "runtime": {
+    "mode": "manifest-only"
+  },
+  "extensionPoints": {
+    "compute": {
+      "virtualizationProviders": [
+        {
+          "providerKey": "invalid",
+          "displayName": "Invalid",
+          "activationLevel": "read",
+          "resourceKinds": ["connection"],
+          "capabilities": ["inventory.discover"]
+        }
+      ]
+    }
+  }
+}

package/fixtures/json-schema/plugin-manifest/invalid/write-provider-without-actions.json

@@ -0,0 +1,23 @@
+{
+  "id": "opensoha.invalid-write-provider",
+  "name": "Invalid Write Provider",
+  "version": "0.1.0",
+  "publisher": "opensoha",
+  "type": "resource-extension",
+  "runtime": {
+    "mode": "external-http"
+  },
+  "extensionPoints": {
+    "compute": {
+      "containerRuntimeProviders": [
+        {
+          "providerKey": "invalid-write",
+          "displayName": "Invalid Write",
+          "activationLevel": "write",
+          "resourceKinds": ["runtime_host"],
+          "capabilities": ["runtime.delete"]
+        }
+      ]
+    }
+  }
+}

package/fixtures/json-schema/plugin-manifest/valid/compute-provider.json

@@ -0,0 +1,25 @@
+{
+  "id": "opensoha.podman",
+  "name": "Podman Provider",
+  "version": "0.1.0",
+  "publisher": "opensoha",
+  "type": "resource-extension",
+  "runtime": {
+    "mode": "managed-container"
+  },
+  "extensionPoints": {
+    "compute": {
+      "containerRuntimeProviders": [
+        {
+          "providerKey": "podman",
+          "displayName": "Podman",
+          "activationLevel": "read",
+          "resourceKinds": ["runtime_host", "container"],
+          "capabilities": ["runtime.validate", "inventory.discover"],
+          "configSchemaRef": "schemas/podman-host.json",
+          "actionRefs": {}
+        }
+      ]
+    }
+  }
+}

package/fixtures/json-schema/plugin-manifest/valid/minimal.json

@@ -0,0 +1,14 @@
+{
+  "id": "opensoha.k8s-sre",
+  "name": "Kubernetes SRE Pack",
+  "version": "0.1.0",
+  "publisher": "opensoha",
+  "type": "skill-pack",
+  "compatibility": {
+    "soha": ">=0.1.0",
+    "contracts": ">=0.1.0 <1.0.0"
+  },
+  "assets": {
+    "skills": ["skills/ai-gateway/k8s-sre/SKILL.md"]
+  }
+}

package/fixtures/json-schema/plugin-manifest/valid/observability-provider.json

@@ -0,0 +1,29 @@
+{
+  "id": "opensoha.tempo",
+  "name": "Tempo Observability Provider",
+  "version": "0.1.0",
+  "publisher": "opensoha",
+  "type": "observability-provider",
+  "runtime": {
+    "mode": "external-http",
+    "endpoint": "https://tempo-provider.example.com",
+    "actionPath": "/v1/actions/{action}"
+  },
+  "extensionPoints": {
+    "observability": {
+      "providers": [
+        {
+          "providerKey": "tempo",
+          "displayName": "Grafana Tempo",
+          "protocolVersion": "v1",
+          "signals": ["traces"],
+          "capabilities": ["traces.query"],
+          "configSchemaRef": "schemas/tempo-data-source.json",
+          "actionRefs": {
+            "traces.query": "traces-query"
+          }
+        }
+      ]
+    }
+  }
+}

package/fixtures/json-schema/project-manifest/invalid/inline-secret.json

@@ -0,0 +1,14 @@
+{
+  "apiVersion": "opensoha.io/v1alpha1",
+  "kind": "Project",
+  "metadata": { "name": "demo" },
+  "spec": {
+    "steps": [
+      {
+        "id": "create-vm",
+        "tool": "virtualization.vms.create.trigger",
+        "input": { "connectionId": "pve-main", "password": "not-allowed" }
+      }
+    ]
+  }
+}

package/fixtures/json-schema/project-manifest/valid/demo.json

@@ -0,0 +1,21 @@
+{
+  "apiVersion": "opensoha.io/v1alpha1",
+  "kind": "Project",
+  "metadata": { "name": "demo" },
+  "spec": {
+    "steps": [
+      {
+        "id": "create-vm",
+        "tool": "virtualization.vms.create.trigger",
+        "input": { "connectionId": "pve-main", "name": "demo-vm" }
+      },
+      {
+        "id": "deploy-compose",
+        "tool": "docker.projects.deploy.trigger",
+        "input": { "projectId": "demo", "action": "deploy" },
+        "dependsOn": ["create-vm"],
+        "wait": true
+      }
+    ]
+  }
+}

package/fixtures/json-schema/provider-rollout/invalid/missing.json

@@ -0,0 +1 @@
+{}

package/fixtures/json-schema/provider-rollout/valid/canary.json

@@ -0,0 +1 @@
+{"schemaVersion":"opensoha.dev/agent-provider-rollout/v1","id":"rollout-1","desiredRevision":2,"previousRevision":1,"target":{"platforms":["linux"]},"status":"canary","createdAt":"2026-07-15T00:00:00Z"}

package/fixtures/json-schema/replay-plan/invalid/missing.json

@@ -0,0 +1 @@
+{}

package/fixtures/json-schema/replay-plan/valid/readonly.json

@@ -0,0 +1 @@
+{"schemaVersion":"opensoha.dev/evaluation-replay-plan/v1","id":"replay-1","sourceTraceRefs":["trace-1"],"candidateRefs":{"prompt":"v2"},"executorProfileId":"readonly","readOnly":true,"createdAt":"2026-07-15T00:00:00Z"}

package/fixtures/json-schema/retrieval-trace/invalid/missing.json

@@ -0,0 +1 @@
+{}

package/fixtures/json-schema/retrieval-trace/valid/grounded.json

@@ -0,0 +1 @@
+{"schemaVersion":"opensoha.dev/knowledge-retrieval-trace/v1","traceId":"trace-1","queryHash":"sha256:0000000000000000000000000000000000000000000000000000000000000000","indexRevision":"revision-2","routeRef":"embedding-default","candidateCount":10,"hitCount":3,"noAnswer":false,"timingMs":25}

package/fixtures/json-schema/runner-operation-lifecycle/invalid/bad-state.json

@@ -0,0 +1,7 @@
+{
+  "operationId": "op-delivery-123",
+  "operationKind": "delivery",
+  "runnerId": "runner-us-west-1",
+  "state": "done",
+  "occurredAt": "2026-06-12T00:00:00.000Z"
+}

package/fixtures/json-schema/runner-operation-lifecycle/invalid/missing-runner-id.json

@@ -0,0 +1,6 @@
+{
+  "operationId": "op-delivery-123",
+  "operationKind": "delivery",
+  "state": "heartbeat",
+  "occurredAt": "2026-06-12T00:00:00.000Z"
+}

package/fixtures/json-schema/runner-operation-lifecycle/valid/final-failed.json

@@ -0,0 +1,27 @@
+{
+  "operationId": "op-docker-456",
+  "operationKind": "docker",
+  "runnerId": "runner-docker-1",
+  "state": "failed",
+  "sequence": 9,
+  "occurredAt": "2026-06-12T00:03:00.000Z",
+  "finalState": {
+    "status": "failed",
+    "reason": "provider_error",
+    "message": "Docker operation failed.",
+    "completedAt": "2026-06-12T00:03:00.000Z"
+  },
+  "callback": {
+    "callbackId": "callback-456",
+    "accepted": true,
+    "late": false,
+    "dedupeKey": "op-docker-456:9"
+  },
+  "evidence": [
+    {
+      "kind": "log",
+      "message": "Container exited with code 1.",
+      "redacted": true
+    }
+  ]
+}

package/fixtures/json-schema/runner-operation-lifecycle/valid/heartbeat.json

@@ -0,0 +1,19 @@
+{
+  "operationId": "op-delivery-123",
+  "operationKind": "delivery",
+  "runnerId": "runner-us-west-1",
+  "agentId": "agent-prod-1",
+  "tenantId": "tenant-acme",
+  "workspaceId": "workspace-prod",
+  "state": "heartbeat",
+  "sequence": 3,
+  "occurredAt": "2026-06-12T00:00:00.000Z",
+  "deadlineAt": "2026-06-12T00:05:00.000Z",
+  "heartbeat": {
+    "intervalSeconds": 30,
+    "nextDueAt": "2026-06-12T00:00:30.000Z"
+  },
+  "metadata": {
+    "providerKind": "github-actions"
+  }
+}

package/fixtures/json-schema/sample-attempt/invalid/missing.json

@@ -0,0 +1 @@
+{}

package/fixtures/json-schema/sample-attempt/valid/completed.json

@@ -0,0 +1 @@
+{"schemaVersion":"opensoha.dev/evaluation-sample-attempt/v1","runId":"run-1","sampleId":"sample-1","attempt":1,"candidateRefs":{"prompt":"v2"},"status":"completed","latencyMillis":50,"completedAt":"2026-07-15T00:00:00Z"}

package/fixtures/json-schema/skill-manifest/invalid/bad-id.json

@@ -0,0 +1,5 @@
+{
+  "id": "K8S SRE",
+  "name": "Kubernetes SRE",
+  "category": "ai-gateway"
+}

package/fixtures/json-schema/skill-manifest/valid/minimal.json

@@ -0,0 +1,8 @@
+{
+  "id": "k8s-sre",
+  "name": "Kubernetes SRE",
+  "version": "0.1.0",
+  "category": "ai-gateway",
+  "capabilityRefs": ["k8s.list_pods"],
+  "permissionKeys": ["k8s.pods.read"]
+}

package/fixtures/json-schema/token-claims/invalid/bad-token-kind.json

@@ -0,0 +1,9 @@
+{
+  "sub": "service-account:sa-1",
+  "exp": 1781006400,
+  "iat": 1781002800,
+  "tokenId": "tok-1",
+  "tokenKind": "api_key",
+  "subjectType": "service_account",
+  "subjectId": "sa-1"
+}

package/fixtures/json-schema/token-claims/valid/service-account.json

@@ -0,0 +1,15 @@
+{
+  "iss": "soha",
+  "sub": "service-account:sa-1",
+  "aud": ["soha-api"],
+  "exp": 1781006400,
+  "iat": 1781002800,
+  "tokenId": "tok-1",
+  "tokenKind": "service_account",
+  "subjectType": "service_account",
+  "subjectId": "sa-1",
+  "tenantId": "default",
+  "workspaceId": "default",
+  "permissionKeys": ["ai.gateway.tools.read"],
+  "scopes": ["ai:read"]
+}

package/fixtures/openapi/AIGatewayManifestEnvelope/invalid/bad-date.json

@@ -0,0 +1,28 @@
+{
+  "data": {
+    "name": "soha-ai-gateway",
+    "version": "0.1.0",
+    "generatedAt": "not-a-date",
+    "principal": {
+      "userId": "u-1",
+      "userName": "admin",
+      "email": "admin@example.com",
+      "roles": [],
+      "teams": [],
+      "projects": [],
+      "tags": []
+    },
+    "caller": {
+      "identityMode": "user"
+    },
+    "permissionKeys": [],
+    "tools": [],
+    "summary": {
+      "toolCount": 0,
+      "resourceCount": 0,
+      "promptCount": 0,
+      "skillCount": 0,
+      "deniedCount": 0
+    }
+  }
+}

package/fixtures/openapi/AIGatewayManifestEnvelope/valid/minimal.json

@@ -0,0 +1,31 @@
+{
+  "data": {
+    "name": "soha-ai-gateway",
+    "version": "0.1.0",
+    "generatedAt": "2026-06-09T12:00:00Z",
+    "principal": {
+      "userId": "u-1",
+      "userName": "admin",
+      "email": "admin@example.com",
+      "roles": [],
+      "teams": [],
+      "projects": [],
+      "tags": []
+    },
+    "caller": {
+      "identityMode": "user"
+    },
+    "permissionKeys": ["ai.gateway.tools.read"],
+    "tools": [],
+    "resources": [],
+    "prompts": [],
+    "skills": [],
+    "summary": {
+      "toolCount": 0,
+      "resourceCount": 0,
+      "promptCount": 0,
+      "skillCount": 0,
+      "deniedCount": 0
+    }
+  }
+}

package/fixtures/openapi/AgentProviderRegistryAcknowledgement/invalid/missing-targeted.json

@@ -0,0 +1,7 @@
+{
+  "runnerId": "runner-prod-1",
+  "revision": 12,
+  "activeRevision": 12,
+  "accepted": true,
+  "observedAt": "2026-07-15T00:00:00Z"
+}

package/fixtures/openapi/AgentProviderRegistryAcknowledgement/valid/rollout.json

@@ -0,0 +1,17 @@
+{
+  "runnerId": "runner-prod-1",
+  "revision": 12,
+  "desiredRevision": 12,
+  "activeRevision": 12,
+  "lkgRevision": 11,
+  "previousRevision": 11,
+  "accepted": true,
+  "targeted": true,
+  "rolloutState": "converged",
+  "rolledBack": false,
+  "observedAt": "2026-07-15T00:00:00Z",
+  "providerStatuses": [],
+  "conformanceChecks": [
+    { "providerId": "codex", "status": "passed" }
+  ]
+}

package/fixtures/openapi/AgentRunCallbackRequest/invalid/missing-agent-id.json

@@ -0,0 +1,6 @@
+{
+  "runId": "run-1",
+  "callbackToken": "agent-run-token",
+  "status": "succeeded",
+  "payload": {}
+}

package/fixtures/openapi/AgentRunCallbackRequest/valid/succeeded.json

@@ -0,0 +1,10 @@
+{
+  "runId": "run-1",
+  "callbackToken": "agent-run-token",
+  "agentId": "agent-1",
+  "status": "succeeded",
+  "payload": {
+    "summary": "Completed"
+  },
+  "toolExecutions": []
+}