@opensoha/contracts 0.1.8 → 0.1.11

package/fixtures/openapi/IdentityProvider/valid/v0.1.9.json

@@ -0,0 +1,14 @@
+{
+  "id": "provider-1",
+  "applicationId": "application-1",
+  "name": "Example OIDC",
+  "type": "oidc",
+  "enabled": true,
+  "config": {},
+  "secretRefs": {
+    "CLIENT_SECRET": "soha://secrets/oidc-client"
+  },
+  "status": "active",
+  "createdAt": "2026-08-01T00:00:00Z",
+  "updatedAt": "2026-08-01T00:00:00Z"
+}

package/fixtures/openapi/IdentitySettingsEnvelope/invalid/exposed-secret.json

@@ -0,0 +1,14 @@
+{
+  "data": {
+    "providers": [
+      {
+        "id": "github",
+        "name": "GitHub",
+        "type": "oauth2",
+        "enabled": true,
+        "clientSecret": "must-not-appear-in-a-response"
+      }
+    ],
+    "localPasswordLoginEnabled": true
+  }
+}

package/fixtures/openapi/IdentitySettingsEnvelope/valid/redacted-provider.json

@@ -0,0 +1,16 @@
+{
+  "data": {
+    "providers": [
+      {
+        "id": "github",
+        "name": "GitHub",
+        "type": "oauth2",
+        "enabled": true,
+        "clientId": "public-client-id",
+        "scopes": ["read:user", "user:email"]
+      }
+    ],
+    "defaultProviderId": "github",
+    "localPasswordLoginEnabled": true
+  }
+}

package/fixtures/openapi/KubernetesClusterListEnvelope/invalid/missing-health.json

@@ -0,0 +1,12 @@
+{
+  "items": [
+    {
+      "id": "edge-prod",
+      "name": "Edge Production",
+      "region": "cn-east",
+      "environment": "production",
+      "labels": {},
+      "connectionMode": "agent"
+    }
+  ]
+}

package/fixtures/openapi/KubernetesClusterListEnvelope/valid/agent-cluster.json

@@ -0,0 +1,18 @@
+{
+  "items": [
+    {
+      "id": "edge-prod",
+      "name": "Edge Production",
+      "region": "cn-east",
+      "environment": "production",
+      "labels": { "connection": "agent" },
+      "connectionMode": "agent",
+      "version": "v1.34.0+k3s1",
+      "capabilities": ["workload.read", "pod.logs"],
+      "health": {
+        "status": "healthy",
+        "lastChecked": "2026-08-10T08:00:00Z"
+      }
+    }
+  ]
+}

package/fixtures/openapi/KubernetesNetworkTopologyEnvelope/invalid/missing-summary.json

@@ -0,0 +1,7 @@
+{
+  "data": {
+    "clusterId": "edge-prod",
+    "source": "ingress",
+    "generatedAt": "2026-08-10T08:00:00Z"
+  }
+}

package/fixtures/openapi/KubernetesNetworkTopologyEnvelope/valid/ingress-service-pod.json

@@ -0,0 +1,29 @@
+{
+  "data": {
+    "clusterId": "edge-prod",
+    "namespace": "production",
+    "source": "ingress",
+    "generatedAt": "2026-08-10T08:00:00Z",
+    "summary": {
+      "entryCount": 1,
+      "routeCount": 1,
+      "serviceCount": 1,
+      "missingServiceCount": 0,
+      "backendPodCount": 1,
+      "pendingRouteCount": 0
+    },
+    "traces": [
+      {
+        "id": "trace-1",
+        "sourceType": "Ingress",
+        "state": "ready",
+        "entry": { "id": "entry-1", "name": "app.example.com", "kind": "Host", "state": "ready" },
+        "route": { "id": "route-1", "name": "app", "kind": "Ingress", "state": "ready" },
+        "service": { "id": "service-1", "name": "api", "kind": "Service", "state": "ready" },
+        "backendPods": [
+          { "id": "pod-1", "name": "api-7c8d9f", "kind": "Pod", "state": "ready" }
+        ]
+      }
+    ]
+  }
+}

package/fixtures/openapi/KubernetesPodListEnvelope/invalid/missing-scope.json

@@ -0,0 +1,11 @@
+{
+  "items": [
+    {
+      "name": "api-7c8d9f",
+      "phase": "Running",
+      "readyContainers": "2/2",
+      "restarts": 0,
+      "ageSeconds": 3600
+    }
+  ]
+}

package/fixtures/openapi/KubernetesPodListEnvelope/valid/running-pod.json

@@ -0,0 +1,15 @@
+{
+  "items": [
+    {
+      "name": "api-7c8d9f",
+      "namespace": "production",
+      "phase": "Running",
+      "nodeName": "worker-1",
+      "podIp": "10.42.1.8",
+      "readyContainers": "2/2",
+      "restarts": 0,
+      "ageSeconds": 3600,
+      "allowedActions": ["logs", "view"]
+    }
+  ]
+}

package/fixtures/openapi/MenuEnvelope/invalid/missing-data.json

@@ -0,0 +1 @@
+{}

package/fixtures/openapi/MenuEnvelope/valid/menu.json

@@ -0,0 +1,13 @@
+{
+  "data": {
+    "id": "settings-overview",
+    "path": "/settings/overview",
+    "labelZh": "设置总览",
+    "labelEn": "Settings Overview",
+    "iconKey": "dashboard",
+    "section": "",
+    "sortOrder": 10,
+    "enabled": true,
+    "roleIds": []
+  }
+}

package/fixtures/openapi/MenuInput/invalid/missing-icon.json

@@ -0,0 +1,5 @@
+{
+  "path": "/settings/overview",
+  "labelZh": "设置总览",
+  "labelEn": "Settings Overview"
+}

package/fixtures/openapi/MenuInput/valid/top-level.json

@@ -0,0 +1,12 @@
+{
+  "id": "settings-overview",
+  "parentId": null,
+  "path": "/settings/overview",
+  "labelZh": "设置总览",
+  "labelEn": "Settings Overview",
+  "iconKey": "dashboard",
+  "section": "",
+  "sortOrder": 10,
+  "enabled": true,
+  "roleIds": []
+}

package/fixtures/openapi/MenuListEnvelope/invalid/items-object.json

@@ -0,0 +1,3 @@
+{
+  "items": {}
+}

package/fixtures/openapi/MenuListEnvelope/valid/tree.json

@@ -0,0 +1,27 @@
+{
+  "items": [
+    {
+      "id": "settings",
+      "path": "/settings",
+      "labelZh": "设置中心",
+      "labelEn": "Settings",
+      "iconKey": "setting",
+      "section": "",
+      "sortOrder": 10,
+      "enabled": true,
+      "children": [
+        {
+          "id": "settings-overview",
+          "parentId": "settings",
+          "path": "/settings/overview",
+          "labelZh": "设置总览",
+          "labelEn": "Settings Overview",
+          "iconKey": "dashboard",
+          "section": "",
+          "sortOrder": 10,
+          "enabled": true
+        }
+      ]
+    }
+  ]
+}

package/fixtures/openapi/OIDCClient/invalid/missing-grant-types.json

@@ -0,0 +1,9 @@
+{
+  "id": "client-1",
+  "providerId": "provider-1",
+  "clientId": "grafana",
+  "redirectUris": ["https://grafana.example.com/login/oauth"],
+  "status": "active",
+  "createdAt": "2026-08-01T00:00:00Z",
+  "updatedAt": "2026-08-01T00:00:00Z"
+}

package/fixtures/openapi/OIDCClient/valid/current.json

@@ -0,0 +1,19 @@
+{
+  "id": "client-2",
+  "providerId": "provider-1",
+  "clientId": "tenant-app",
+  "clientType": "public",
+  "redirectUris": [],
+  "grantTypes": ["authorization_code"],
+  "redirectUriRegexes": ["https://tenant-[a-z0-9]+\\.example\\.com/callback"],
+  "postLogoutRedirectUris": ["https://app.example.com/logout/callback"],
+  "allowedScopes": ["openid", "profile"],
+  "allowedGrantTypes": ["authorization_code"],
+  "requirePkce": true,
+  "accessTokenTtlSeconds": 900,
+  "idTokenTtlSeconds": 900,
+  "refreshTokenTtlSeconds": 0,
+  "status": "active",
+  "createdAt": "2026-08-01T00:00:00Z",
+  "updatedAt": "2026-08-01T00:00:00Z"
+}

package/fixtures/openapi/OIDCClient/valid/v0.1.9.json

@@ -0,0 +1,10 @@
+{
+  "id": "client-1",
+  "providerId": "provider-1",
+  "clientId": "grafana",
+  "redirectUris": ["https://grafana.example.com/login/oauth"],
+  "grantTypes": ["authorization_code", "refresh_token"],
+  "status": "active",
+  "createdAt": "2026-08-01T00:00:00Z",
+  "updatedAt": "2026-08-01T00:00:00Z"
+}

package/fixtures/openapi/OIDCClientInput/invalid/empty-rules.json

@@ -0,0 +1,5 @@
+{
+  "clientId": "broken-client",
+  "redirectUris": [],
+  "redirectUriRegexes": []
+}

package/fixtures/openapi/OIDCClientInput/valid/regex.json

@@ -0,0 +1,4 @@
+{
+  "clientId": "tenant-app",
+  "redirectUriRegexes": ["https://tenant-[a-z0-9]+\\.example\\.com/callback"]
+}

package/fixtures/openapi/OIDCClientInput/valid/strict.json

@@ -0,0 +1,4 @@
+{
+  "clientId": "grafana",
+  "redirectUris": ["http://grafana.internal/login/oauth"]
+}

package/fixtures/openapi/OIDCClientInput/valid/v0.1.9.json

@@ -0,0 +1,7 @@
+{
+  "providerId": "provider-1",
+  "clientId": "grafana",
+  "redirectUris": ["https://grafana.example.com/login/oauth"],
+  "grantTypes": ["authorization_code", "refresh_token"],
+  "status": "active"
+}

package/fixtures/openapi/ObservabilityContext/invalid/missing-time-range.json

@@ -0,0 +1,6 @@
+{
+  "version": "v1",
+  "scope": {
+    "clusterId": "cluster-1"
+  }
+}

package/fixtures/openapi/ObservabilityContext/valid/scoped.json

@@ -0,0 +1,27 @@
+{
+  "version": "v1",
+  "scope": {
+    "workspaceId": "default",
+    "clusterId": "cluster-1",
+    "environment": "production",
+    "namespace": "payments",
+    "service": "checkout-api"
+  },
+  "resource": {
+    "kind": "service",
+    "name": "checkout-api"
+  },
+  "timeRange": {
+    "from": "2026-08-13T00:00:00Z",
+    "to": "2026-08-13T01:00:00Z",
+    "timezone": "Asia/Shanghai"
+  },
+  "filter": {
+    "text": "error",
+    "labels": {
+      "deployment.environment.name": "production"
+    },
+    "traceId": "trace-1"
+  },
+  "scopeRestricted": true
+}

package/fixtures/openapi/ObservabilityDashboardImportResultEnvelope/valid/imported.json

@@ -4,8 +4,32 @@
       "id": "dashboard:8b9f35ba-6870-4f34-b45f-6f601d8b8c35",
       "name": "Kubernetes Overview",
       "source": "grafana",
+      "sourceFormat": "classic",
       "sourceSchemaVersion": 39,
+      "rawJson": "{\"title\":\"Kubernetes Overview\"}",
       "tags": ["kubernetes"],
+      "variables": [
+        {
+          "name": "namespace",
+          "label": "Namespace",
+          "type": "custom",
+          "current": "default",
+          "options": ["default", "production"]
+        }
+      ],
+      "dataSourceBindings": [
+        {
+          "type": "prometheus",
+          "uid": "prom",
+          "dataSourceId": "prometheus-main"
+        }
+      ],
+      "importWarnings": [
+        {
+          "code": "datasource_rebound",
+          "message": "Grafana data-source prom is mapped to prometheus-main."
+        }
+      ],
       "panels": [
         {
           "id": "1",
@@ -15,7 +39,10 @@
           "targets": [
             {
               "refId": "A",
-              "expression": "sum(rate(container_cpu_usage_seconds_total[5m]))"
+              "expression": "sum(rate(container_cpu_usage_seconds_total{namespace=\"$namespace\"}[5m]))",
+              "dataSourceType": "prometheus",
+              "dataSourceUid": "prom",
+              "dataSourceId": "prometheus-main"
             }
           ],
           "queryable": true

package/fixtures/openapi/ObservabilityDashboardPanelQueryInput/invalid/missing-time-to.json

@@ -0,0 +1,6 @@
+{
+  "timeFrom": "2026-08-08T07:00:00Z",
+  "variables": {
+    "namespace": "production"
+  }
+}

package/fixtures/openapi/ObservabilityDashboardPanelQueryInput/valid/variables.json

@@ -0,0 +1,8 @@
+{
+  "timeFrom": "2026-08-08T07:00:00Z",
+  "timeTo": "2026-08-08T08:00:00Z",
+  "stepSeconds": 60,
+  "variables": {
+    "namespace": "production"
+  }
+}

package/fixtures/openapi/ObservabilityMetricCatalogEnvelope/invalid/missing-availability.json

@@ -0,0 +1,10 @@
+{
+  "items": [
+    {
+      "key": "http.server.request.duration",
+      "label": "HTTP server request duration",
+      "unit": "s",
+      "signal": "metrics"
+    }
+  ]
+}

package/fixtures/openapi/ObservabilityMetricCatalogEnvelope/valid/catalog.json

@@ -0,0 +1,13 @@
+{
+  "items": [
+    {
+      "key": "http.server.request.duration",
+      "label": "HTTP server request duration",
+      "description": "Server request duration from OpenTelemetry HTTP semantic conventions.",
+      "unit": "s",
+      "semanticConvention": "http.server.request.duration",
+      "signal": "metrics",
+      "available": true
+    }
+  ]
+}

package/fixtures/openapi/ObservabilityQueryResultMeta/invalid/missing-state.json

@@ -0,0 +1,3 @@
+{
+  "durationMs": 42
+}

package/fixtures/openapi/ObservabilityQueryResultMeta/valid/partial.json

@@ -0,0 +1,15 @@
+{
+  "state": "partial",
+  "scopeRestricted": true,
+  "observedAt": "2026-08-13T01:00:02Z",
+  "durationMs": 42,
+  "warnings": ["One data source timed out."],
+  "errors": [
+    {
+      "code": "query_timeout",
+      "message": "The secondary source did not respond before the deadline.",
+      "retryable": true,
+      "sourceId": "secondary"
+    }
+  ]
+}

package/fixtures/openapi/ObservabilityQuerySnapshot/invalid/missing-context.json

@@ -0,0 +1,5 @@
+{
+  "version": "v1",
+  "signal": "traces",
+  "queryLanguage": "trace_filter"
+}

package/fixtures/openapi/ObservabilityQuerySnapshot/valid/prometheus.json

@@ -0,0 +1,22 @@
+{
+  "version": "v1",
+  "signal": "metrics",
+  "dataSourceId": "prometheus-main",
+  "backendType": "prometheus",
+  "context": {
+    "version": "v1",
+    "scope": {
+      "workspaceId": "default",
+      "clusterId": "cluster-1",
+      "namespace": "payments",
+      "service": "checkout-api"
+    },
+    "timeRange": {
+      "from": "2026-08-13T00:00:00Z",
+      "to": "2026-08-13T01:00:00Z"
+    }
+  },
+  "queryLanguage": "promql",
+  "query": "rate(http_server_request_duration_seconds_count[5m])",
+  "createdAt": "2026-08-13T01:00:01Z"
+}

package/fixtures/openapi/ObservabilityServiceEnvelope/invalid/missing-status.json

@@ -0,0 +1,12 @@
+{
+  "data": {
+    "id": "checkout-api",
+    "name": "checkout-api",
+    "clusterIds": [],
+    "instances": [],
+    "endpoints": []
+  },
+  "meta": {
+    "state": "success"
+  }
+}

package/fixtures/openapi/ObservabilityServiceEnvelope/valid/service.json

@@ -0,0 +1,29 @@
+{
+  "data": {
+    "id": "checkout-api",
+    "name": "checkout-api",
+    "environment": "production",
+    "namespace": "payments",
+    "clusterIds": ["cluster-1"],
+    "status": "unknown",
+    "instances": [
+      {
+        "id": "checkout-api-7b8f",
+        "name": "checkout-api-7b8f",
+        "status": "unknown"
+      }
+    ],
+    "endpoints": [
+      {
+        "id": "POST /checkout",
+        "name": "/checkout",
+        "method": "POST",
+        "status": "unknown"
+      }
+    ]
+  },
+  "meta": {
+    "state": "success",
+    "observedAt": "2026-08-13T01:00:00Z"
+  }
+}

package/fixtures/openapi/ObservabilityServiceListEnvelope/invalid/missing-meta.json

@@ -0,0 +1,3 @@
+{
+  "items": []
+}

package/fixtures/openapi/ObservabilityServiceListEnvelope/valid/services.json

@@ -0,0 +1,39 @@
+{
+  "items": [
+    {
+      "id": "checkout-api",
+      "name": "checkout-api",
+      "environment": "production",
+      "namespace": "payments",
+      "clusterIds": ["cluster-1"],
+      "status": "degraded",
+      "requestRate": 125.5,
+      "errorRate": 0.023,
+      "latencyP95Ms": 412,
+      "lastSeenAt": "2026-08-13T01:00:00Z",
+      "instances": [
+        {
+          "id": "checkout-api-7b8f",
+          "name": "checkout-api-7b8f",
+          "status": "healthy",
+          "lastSeenAt": "2026-08-13T01:00:00Z"
+        }
+      ],
+      "endpoints": [
+        {
+          "id": "POST /checkout",
+          "name": "/checkout",
+          "method": "POST",
+          "status": "degraded",
+          "requestRate": 125.5,
+          "errorRate": 0.023,
+          "latencyP95Ms": 412
+        }
+      ]
+    }
+  ],
+  "meta": {
+    "state": "success",
+    "observedAt": "2026-08-13T01:00:00Z"
+  }
+}

package/fixtures/openapi/ObservabilityTopologyEnvelope/invalid/missing-edge-status.json

@@ -0,0 +1,10 @@
+{
+  "data": {
+    "nodes": [],
+    "edges": [
+      {"sourceServiceId": "a", "targetServiceId": "b"}
+    ],
+    "beta": true,
+    "meta": {"state": "success"}
+  }
+}

package/fixtures/openapi/ObservabilityTopologyEnvelope/valid/topology.json

@@ -0,0 +1,22 @@
+{
+  "data": {
+    "nodes": [
+      {"serviceId": "checkout-api", "name": "checkout-api", "status": "degraded"},
+      {"serviceId": "payment-api", "name": "payment-api", "status": "healthy"}
+    ],
+    "edges": [
+      {
+        "sourceServiceId": "checkout-api",
+        "targetServiceId": "payment-api",
+        "status": "degraded",
+        "requestRate": 88,
+        "errorRate": 0.031,
+        "latencyP95Ms": 510
+      }
+    ],
+    "beta": true,
+    "meta": {
+      "state": "success"
+    }
+  }
+}

package/fixtures/openapi/PlatformAuditLogListEnvelope/invalid/missing-action.json

@@ -0,0 +1,14 @@
+{
+  "items": [
+    {
+      "id": "audit-01",
+      "actorId": "user-01",
+      "actorName": "Platform Operator",
+      "roles": [],
+      "teams": [],
+      "result": "success",
+      "summary": "deleted pod for rebuild",
+      "createdAt": "2026-08-10T08:00:00Z"
+    }
+  ]
+}

package/fixtures/openapi/PlatformAuditLogListEnvelope/valid/kubernetes-mutation.json

@@ -0,0 +1,24 @@
+{
+  "items": [
+    {
+      "id": "audit-01",
+      "actorId": "user-01",
+      "actorName": "Platform Operator",
+      "roles": ["platform-operator"],
+      "teams": ["sre"],
+      "clusterId": "cluster-01",
+      "namespace": "production",
+      "resourceKind": "Pod",
+      "resourceName": "api-0",
+      "action": "delete",
+      "result": "success",
+      "summary": "deleted pod for rebuild",
+      "requestPath": "/api/v1/clusters/cluster-01/workloads/pods/api-0",
+      "requestMethod": "DELETE",
+      "requestId": "request-01",
+      "sourceIp": "192.0.2.10",
+      "metadata": { "source": "web" },
+      "createdAt": "2026-08-10T08:00:00Z"
+    }
+  ]
+}

package/fixtures/openapi/PlatformOperationLogListEnvelope/invalid/missing-target-scope.json

@@ -0,0 +1,13 @@
+{
+  "items": [
+    {
+      "id": "operation-01",
+      "actorId": "user-01",
+      "operationType": "platform.pod.delete",
+      "result": "success",
+      "summary": "deleted pod for rebuild",
+      "metadata": {},
+      "createdAt": "2026-08-10T08:00:00Z"
+    }
+  ]
+}