@opensoha/contracts 0.1.7 → 0.1.9

package/auth/catalog_generated.go

@@ -6,8 +6,8 @@ import _ "embed"
 
 const (
 	PermissionCatalogVersion = "1.3.0"
-	PermissionCatalogContentSHA256 = "182dbfb4b9962dc4a0c344c2ce7622ec4424cf5ff0892a73b0b6806eddf6f2c7"
-	PermissionCatalogSHA256 = "f9956b1ee4e3d981a4e93e7078006aa915a5eb18fb2347fa0d81bc8346b8958b"
+	PermissionCatalogContentSHA256 = "fe738c69a160e58cf919ce6de8380d6427be6f8848cabad7d807ec82fdea8a3b"
+	PermissionCatalogSHA256 = "206f12ff27279b1f345a87cd93be82789d1a79df311de9e7a86ab8cf75dde013"
 )
 
 //go:embed permission-catalog.json

package/auth/permission-catalog.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "authorization.opensoha.io/v1",
   "catalogVersion": "1.3.0",
-  "contentHash": "sha256:182dbfb4b9962dc4a0c344c2ce7622ec4424cf5ff0892a73b0b6806eddf6f2c7",
+  "contentHash": "sha256:fe738c69a160e58cf919ce6de8380d6427be6f8848cabad7d807ec82fdea8a3b",
   "permissions": [
     {
       "key": "access.directory.create",
@@ -9788,7 +9788,7 @@
       "domain": "settings",
       "resource": "identity",
       "action": "create",
-      "displayName": "创建登陆设置",
+      "displayName": "创建登录设置",
       "riskLevel": "mutate",
       "scopeKinds": [
         "tenant",
@@ -9807,7 +9807,7 @@
       "domain": "settings",
       "resource": "identity",
       "action": "delete",
-      "displayName": "删除登陆设置",
+      "displayName": "删除登录设置",
       "riskLevel": "high",
       "scopeKinds": [
         "tenant",
@@ -9826,7 +9826,7 @@
       "domain": "settings",
       "resource": "identity",
       "action": "manage",
-      "displayName": "管理登陆设置",
+      "displayName": "管理登录设置",
       "riskLevel": "mutate",
       "scopeKinds": [
         "tenant",
@@ -9848,7 +9848,7 @@
       "domain": "settings",
       "resource": "identity",
       "action": "update",
-      "displayName": "修改登陆设置",
+      "displayName": "修改登录设置",
       "riskLevel": "mutate",
       "scopeKinds": [
         "tenant",
@@ -9867,7 +9867,7 @@
       "domain": "settings",
       "resource": "identity",
       "action": "validate",
-      "displayName": "校验登陆设置",
+      "displayName": "校验登录设置",
       "riskLevel": "execute",
       "scopeKinds": [
         "tenant",
@@ -9886,7 +9886,7 @@
       "domain": "settings",
       "resource": "identity",
       "action": "view",
-      "displayName": "查看登陆设置",
+      "displayName": "查看登录设置",
       "riskLevel": "read",
       "scopeKinds": [
         "tenant",

package/compat/json-schema-ecosystem-0.1.0.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.7",
+  "version": "0.1.9",
   "schemas": {
     "plugins/plugin-manifest.schema.json": {
       "rootRequired": ["id", "name", "publisher", "type", "version"],

package/compat/openapi-loose-boundaries-0.1.0.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.7",
+  "version": "0.1.9",
   "generatedFrom": "openapi/soha-api.yaml",
   "entries": [
     {
@@ -710,6 +710,21 @@
       "path": "components/schemas/OpenAIResponseRequest/properties/input",
       "target": "#/components/schemas/AnyValue"
     },
+    {
+      "kind": "schemaRef",
+      "path": "components/schemas/PlatformAuditLog/properties/metadata",
+      "target": "#/components/schemas/GenericObject"
+    },
+    {
+      "kind": "schemaRef",
+      "path": "components/schemas/PlatformOperationLog/properties/metadata",
+      "target": "#/components/schemas/GenericObject"
+    },
+    {
+      "kind": "schemaRef",
+      "path": "components/schemas/PlatformOperationLog/properties/targetScope",
+      "target": "#/components/schemas/GenericObject"
+    },
     {
       "kind": "schemaRef",
       "path": "components/schemas/RenderedDeliverySpec/properties/executionHints",

package/fixtures/json-schema/companion-pack/invalid/traversal.json

@@ -0,0 +1,19 @@
+{
+  "renderer": "live2d-cubism",
+  "entryAsset": "../model/model3.json",
+  "assets": [
+    {
+      "path": "../model/model3.json",
+      "kind": "entry",
+      "contentType": "application/json",
+      "sizeBytes": 1024,
+      "sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+    }
+  ],
+  "license": {
+    "name": "Unknown",
+    "url": "https://example.invalid/license",
+    "redistributionAllowed": true,
+    "commercialUseAllowed": false
+  }
+}

package/fixtures/json-schema/companion-pack/valid/svg.json

@@ -0,0 +1,47 @@
+{
+  "renderer": "svg",
+  "entryAsset": "model/soha.svg",
+  "thumbnailAsset": "thumbnail.png",
+  "assets": [
+    {
+      "path": "model/soha.svg",
+      "kind": "entry",
+      "contentType": "image/svg+xml",
+      "sizeBytes": 2048,
+      "sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+    },
+    {
+      "path": "thumbnail.png",
+      "kind": "thumbnail",
+      "contentType": "image/png",
+      "sizeBytes": 1024,
+      "sha256": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+    }
+  ],
+  "animations": {
+    "idle": "breathe",
+    "thinking": "ponder",
+    "speaking": "talk"
+  },
+  "interactions": [
+    {
+      "id": "pet",
+      "label": "Pet",
+      "action": "pet",
+      "animation": "happy",
+      "cooldownSeconds": 5,
+      "rewardXp": 2,
+      "rewardAffinity": 1
+    }
+  ],
+  "unlocks": [
+    { "id": "happy", "kind": "animation", "level": 2, "ref": "happy" }
+  ],
+  "license": {
+    "name": "Apache License 2.0",
+    "spdxId": "Apache-2.0",
+    "url": "https://www.apache.org/licenses/LICENSE-2.0",
+    "redistributionAllowed": true,
+    "commercialUseAllowed": true
+  }
+}

package/fixtures/json-schema/companion-provenance/invalid/missing-source.json

@@ -0,0 +1,8 @@
+{
+  "subjectSha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "builderId": "local",
+  "builtAt": "2026-08-08T00:00:00Z",
+  "signingKeyId": "opensoha.release",
+  "signatureAlgorithm": "ed25519",
+  "signature": "c2lnbmF0dXJl"
+}

package/fixtures/json-schema/companion-provenance/valid/minimal.json

@@ -0,0 +1,10 @@
+{
+  "subjectSha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+  "builderId": "https://github.com/opensoha/soha-cloud/actions/runs/1",
+  "sourceUri": "https://github.com/opensoha/companion-packs",
+  "sourceCommit": "0123456789abcdef0123456789abcdef01234567",
+  "builtAt": "2026-08-08T00:00:00Z",
+  "signingKeyId": "opensoha.release",
+  "signatureAlgorithm": "ed25519",
+  "signature": "c2lnbmF0dXJl"
+}

package/fixtures/json-schema/marketplace-catalog/valid/companion-pack.json

@@ -0,0 +1,39 @@
+{
+  "schemaVersion": "marketplace.opensoha.io/v1",
+  "generatedAt": "2026-08-08T00:00:00Z",
+  "sourceId": "opensoha-official",
+  "plugins": [
+    {
+      "id": "opensoha.soha-companion",
+      "name": "Soha Companion",
+      "version": "0.1.0",
+      "publisher": "opensoha",
+      "type": "companion-pack",
+      "source": "marketplace:opensoha/soha-companion",
+      "versions": [
+        {
+          "version": "0.1.0",
+          "manifestUrl": "https://marketplace.opensoha.dev/plugins/opensoha.soha-companion/0.1.0/plugin.manifest.json",
+          "package": {
+            "url": "https://marketplace.opensoha.dev/plugins/opensoha.soha-companion/0.1.0/companion.zip",
+            "contentType": "application/zip",
+            "sizeBytes": 4096,
+            "sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+            "signature": "c2lnbmF0dXJl",
+            "signatureAlgorithm": "ed25519",
+            "signingKeyId": "opensoha.release",
+            "provenanceUrl": "https://marketplace.opensoha.dev/plugins/opensoha.soha-companion/0.1.0/provenance.json",
+            "sbomUrl": "https://marketplace.opensoha.dev/plugins/opensoha.soha-companion/0.1.0/sbom.json"
+          }
+        }
+      ],
+      "manifest": {
+        "id": "opensoha.soha-companion",
+        "name": "Soha Companion",
+        "version": "0.1.0",
+        "publisher": "opensoha",
+        "type": "companion-pack"
+      }
+    }
+  ]
+}

package/fixtures/json-schema/plugin-manifest/invalid/companion-pack-without-assets.json

@@ -0,0 +1,17 @@
+{
+  "id": "opensoha.empty-companion",
+  "name": "Empty Companion",
+  "version": "0.1.0",
+  "publisher": "opensoha",
+  "type": "companion-pack",
+  "companionPack": {
+    "renderer": "svg",
+    "entryAsset": "model.svg",
+    "license": {
+      "name": "Apache License 2.0",
+      "url": "https://www.apache.org/licenses/LICENSE-2.0",
+      "redistributionAllowed": true,
+      "commercialUseAllowed": true
+    }
+  }
+}

package/fixtures/json-schema/plugin-manifest/valid/companion-pack.json

@@ -0,0 +1,28 @@
+{
+  "id": "opensoha.soha-companion",
+  "name": "Soha Companion",
+  "version": "0.1.0",
+  "publisher": "opensoha",
+  "type": "companion-pack",
+  "runtime": { "mode": "manifest-only" },
+  "companionPack": {
+    "renderer": "svg",
+    "entryAsset": "model/soha.svg",
+    "assets": [
+      {
+        "path": "model/soha.svg",
+        "kind": "entry",
+        "contentType": "image/svg+xml",
+        "sizeBytes": 2048,
+        "sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+      }
+    ],
+    "license": {
+      "name": "Apache License 2.0",
+      "spdxId": "Apache-2.0",
+      "url": "https://www.apache.org/licenses/LICENSE-2.0",
+      "redistributionAllowed": true,
+      "commercialUseAllowed": true
+    }
+  }
+}

package/fixtures/openapi/BrandingAssetUploadEnvelope/invalid/remote-url.json

@@ -0,0 +1,5 @@
+{
+  "data": {
+    "url": "https://example.com/logo.png"
+  }
+}

package/fixtures/openapi/BrandingAssetUploadEnvelope/valid/png-data-url.json

@@ -0,0 +1,5 @@
+{
+  "data": {
+    "url": "data:image/png;base64,iVBORw0KGgo="
+  }
+}

package/fixtures/openapi/BrandingSettingsEnvelope/invalid/missing-favicon.json

@@ -0,0 +1,9 @@
+{
+  "data": {
+    "appTitle": "Soha",
+    "sidebarTitle": "Soha",
+    "loginLogoUrl": "/logo.svg",
+    "expandedLogoUrl": "/logo.svg",
+    "collapsedLogoUrl": "/logo.svg"
+  }
+}

package/fixtures/openapi/BrandingSettingsEnvelope/valid/default.json

@@ -0,0 +1,10 @@
+{
+  "data": {
+    "appTitle": "Soha",
+    "sidebarTitle": "Soha",
+    "loginLogoUrl": "/logo.svg",
+    "expandedLogoUrl": "/logo.svg",
+    "collapsedLogoUrl": "/logo.svg",
+    "faviconUrl": "/favicon.ico"
+  }
+}

package/fixtures/openapi/CompanionInteractionReceiptEnvelope/invalid/missing-profile.json

@@ -0,0 +1,9 @@
+{
+  "data": {
+    "idempotencyKey": "interaction-0001",
+    "applied": true,
+    "xpAwarded": 2,
+    "affinityAwarded": 1,
+    "unlockedIds": []
+  }
+}

package/fixtures/openapi/CompanionInteractionReceiptEnvelope/valid/applied.json

@@ -0,0 +1,22 @@
+{
+  "data": {
+    "idempotencyKey": "interaction-0001",
+    "applied": true,
+    "xpAwarded": 2,
+    "affinityAwarded": 1,
+    "unlockedIds": [],
+    "profile": {
+      "id": "companion:user-1",
+      "ownerId": "user-1",
+      "activePluginId": "opensoha.soha-companion",
+      "activeVersion": "0.1.0",
+      "level": 1,
+      "xp": 2,
+      "affinity": 1,
+      "unlockedIds": [],
+      "revision": 2,
+      "createdAt": "2026-08-08T00:00:00Z",
+      "updatedAt": "2026-08-08T00:00:01Z"
+    }
+  }
+}

package/fixtures/openapi/CompanionInteractionRequest/invalid/client-reward.json

@@ -0,0 +1,5 @@
+{
+  "pluginId": "opensoha.soha-companion",
+  "interactionId": "pet",
+  "rewardXp": 100000
+}

package/fixtures/openapi/CompanionInteractionRequest/valid/pet.json

@@ -0,0 +1,5 @@
+{
+  "pluginId": "opensoha.soha-companion",
+  "interactionId": "pet",
+  "clientRevision": 3
+}

package/fixtures/openapi/CompanionPackManifest/invalid/external-entry.json

@@ -0,0 +1,11 @@
+{
+  "renderer": "live2d-cubism",
+  "entryAsset": "https://cdn.example.com/model.json",
+  "assets": [],
+  "license": {
+    "name": "Unknown",
+    "url": "https://example.com/license",
+    "redistributionAllowed": true,
+    "commercialUseAllowed": false
+  }
+}

package/fixtures/openapi/CompanionPackManifest/valid/svg.json

@@ -0,0 +1,20 @@
+{
+  "renderer": "svg",
+  "entryAsset": "model/soha.svg",
+  "assets": [
+    {
+      "path": "model/soha.svg",
+      "kind": "entry",
+      "contentType": "image/svg+xml",
+      "sizeBytes": 2048,
+      "sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+    }
+  ],
+  "license": {
+    "name": "Apache License 2.0",
+    "spdxId": "Apache-2.0",
+    "url": "https://www.apache.org/licenses/LICENSE-2.0",
+    "redistributionAllowed": true,
+    "commercialUseAllowed": true
+  }
+}

package/fixtures/openapi/CompanionProfileEnvelope/invalid/level-zero.json

@@ -0,0 +1,15 @@
+{
+  "data": {
+    "id": "companion:user-1",
+    "ownerId": "user-1",
+    "activePluginId": "builtin.soha-companion",
+    "activeVersion": "builtin",
+    "level": 0,
+    "xp": 0,
+    "affinity": 0,
+    "unlockedIds": [],
+    "revision": 1,
+    "createdAt": "2026-08-08T00:00:00Z",
+    "updatedAt": "2026-08-08T00:00:00Z"
+  }
+}

package/fixtures/openapi/CompanionProfileEnvelope/valid/default.json

@@ -0,0 +1,15 @@
+{
+  "data": {
+    "id": "companion:user-1",
+    "ownerId": "user-1",
+    "activePluginId": "builtin.soha-companion",
+    "activeVersion": "builtin",
+    "level": 1,
+    "xp": 0,
+    "affinity": 0,
+    "unlockedIds": [],
+    "revision": 1,
+    "createdAt": "2026-08-08T00:00:00Z",
+    "updatedAt": "2026-08-08T00:00:00Z"
+  }
+}

package/fixtures/openapi/IdentitySettingsEnvelope/invalid/exposed-secret.json

@@ -0,0 +1,14 @@
+{
+  "data": {
+    "providers": [
+      {
+        "id": "github",
+        "name": "GitHub",
+        "type": "oauth2",
+        "enabled": true,
+        "clientSecret": "must-not-appear-in-a-response"
+      }
+    ],
+    "localPasswordLoginEnabled": true
+  }
+}

package/fixtures/openapi/IdentitySettingsEnvelope/valid/redacted-provider.json

@@ -0,0 +1,16 @@
+{
+  "data": {
+    "providers": [
+      {
+        "id": "github",
+        "name": "GitHub",
+        "type": "oauth2",
+        "enabled": true,
+        "clientId": "public-client-id",
+        "scopes": ["read:user", "user:email"]
+      }
+    ],
+    "defaultProviderId": "github",
+    "localPasswordLoginEnabled": true
+  }
+}

package/fixtures/openapi/KubernetesClusterListEnvelope/invalid/missing-health.json

@@ -0,0 +1,12 @@
+{
+  "items": [
+    {
+      "id": "edge-prod",
+      "name": "Edge Production",
+      "region": "cn-east",
+      "environment": "production",
+      "labels": {},
+      "connectionMode": "agent"
+    }
+  ]
+}

package/fixtures/openapi/KubernetesClusterListEnvelope/valid/agent-cluster.json

@@ -0,0 +1,18 @@
+{
+  "items": [
+    {
+      "id": "edge-prod",
+      "name": "Edge Production",
+      "region": "cn-east",
+      "environment": "production",
+      "labels": { "connection": "agent" },
+      "connectionMode": "agent",
+      "version": "v1.34.0+k3s1",
+      "capabilities": ["workload.read", "pod.logs"],
+      "health": {
+        "status": "healthy",
+        "lastChecked": "2026-08-10T08:00:00Z"
+      }
+    }
+  ]
+}

package/fixtures/openapi/KubernetesNetworkTopologyEnvelope/invalid/missing-summary.json

@@ -0,0 +1,7 @@
+{
+  "data": {
+    "clusterId": "edge-prod",
+    "source": "ingress",
+    "generatedAt": "2026-08-10T08:00:00Z"
+  }
+}

package/fixtures/openapi/KubernetesNetworkTopologyEnvelope/valid/ingress-service-pod.json

@@ -0,0 +1,29 @@
+{
+  "data": {
+    "clusterId": "edge-prod",
+    "namespace": "production",
+    "source": "ingress",
+    "generatedAt": "2026-08-10T08:00:00Z",
+    "summary": {
+      "entryCount": 1,
+      "routeCount": 1,
+      "serviceCount": 1,
+      "missingServiceCount": 0,
+      "backendPodCount": 1,
+      "pendingRouteCount": 0
+    },
+    "traces": [
+      {
+        "id": "trace-1",
+        "sourceType": "Ingress",
+        "state": "ready",
+        "entry": { "id": "entry-1", "name": "app.example.com", "kind": "Host", "state": "ready" },
+        "route": { "id": "route-1", "name": "app", "kind": "Ingress", "state": "ready" },
+        "service": { "id": "service-1", "name": "api", "kind": "Service", "state": "ready" },
+        "backendPods": [
+          { "id": "pod-1", "name": "api-7c8d9f", "kind": "Pod", "state": "ready" }
+        ]
+      }
+    ]
+  }
+}

package/fixtures/openapi/KubernetesPodListEnvelope/invalid/missing-scope.json

@@ -0,0 +1,11 @@
+{
+  "items": [
+    {
+      "name": "api-7c8d9f",
+      "phase": "Running",
+      "readyContainers": "2/2",
+      "restarts": 0,
+      "ageSeconds": 3600
+    }
+  ]
+}

package/fixtures/openapi/KubernetesPodListEnvelope/valid/running-pod.json

@@ -0,0 +1,15 @@
+{
+  "items": [
+    {
+      "name": "api-7c8d9f",
+      "namespace": "production",
+      "phase": "Running",
+      "nodeName": "worker-1",
+      "podIp": "10.42.1.8",
+      "readyContainers": "2/2",
+      "restarts": 0,
+      "ageSeconds": 3600,
+      "allowedActions": ["logs", "view"]
+    }
+  ]
+}

package/fixtures/openapi/PlatformAuditLogListEnvelope/invalid/missing-action.json

@@ -0,0 +1,14 @@
+{
+  "items": [
+    {
+      "id": "audit-01",
+      "actorId": "user-01",
+      "actorName": "Platform Operator",
+      "roles": [],
+      "teams": [],
+      "result": "success",
+      "summary": "deleted pod for rebuild",
+      "createdAt": "2026-08-10T08:00:00Z"
+    }
+  ]
+}

package/fixtures/openapi/PlatformAuditLogListEnvelope/valid/kubernetes-mutation.json

@@ -0,0 +1,24 @@
+{
+  "items": [
+    {
+      "id": "audit-01",
+      "actorId": "user-01",
+      "actorName": "Platform Operator",
+      "roles": ["platform-operator"],
+      "teams": ["sre"],
+      "clusterId": "cluster-01",
+      "namespace": "production",
+      "resourceKind": "Pod",
+      "resourceName": "api-0",
+      "action": "delete",
+      "result": "success",
+      "summary": "deleted pod for rebuild",
+      "requestPath": "/api/v1/clusters/cluster-01/workloads/pods/api-0",
+      "requestMethod": "DELETE",
+      "requestId": "request-01",
+      "sourceIp": "192.0.2.10",
+      "metadata": { "source": "web" },
+      "createdAt": "2026-08-10T08:00:00Z"
+    }
+  ]
+}

package/fixtures/openapi/PlatformOperationLogListEnvelope/invalid/missing-target-scope.json

@@ -0,0 +1,13 @@
+{
+  "items": [
+    {
+      "id": "operation-01",
+      "actorId": "user-01",
+      "operationType": "platform.pod.delete",
+      "result": "success",
+      "summary": "deleted pod for rebuild",
+      "metadata": {},
+      "createdAt": "2026-08-10T08:00:00Z"
+    }
+  ]
+}