npm - openxiangda-contracts - Versions diffs - 2.0.0-alpha.14 → 2.0.0-alpha.17 - Mend

openxiangda-contracts 2.0.0-alpha.14 → 2.0.0-alpha.17

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (9) hide show

package/dist/schemas.d.ts CHANGED Viewed

@@ -431,6 +431,321 @@ export declare const nativePrincipalSchema: {
         };
     };
 };
+export declare const gatewayAssertionJwksSchema: {
+    readonly $id: "openxiangda.gateway-assertion-jwks/v2";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["schemaVersion", "keys"];
+    readonly properties: {
+        readonly schemaVersion: {
+            readonly const: "openxiangda.gateway-assertion-jwks/v2";
+        };
+        readonly keys: {
+            readonly type: "array";
+            readonly minItems: 1;
+            readonly maxItems: 3;
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["kty", "crv", "x", "use", "alg", "kid"];
+                readonly properties: {
+                    readonly kty: {
+                        readonly const: "OKP";
+                    };
+                    readonly crv: {
+                        readonly const: "Ed25519";
+                    };
+                    readonly x: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly use: {
+                        readonly const: "sig";
+                    };
+                    readonly alg: {
+                        readonly const: "EdDSA";
+                    };
+                    readonly kid: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 128;
+                        readonly pattern: "^[A-Za-z0-9._-]+$";
+                    };
+                };
+            };
+        };
+    };
+};
+export declare const gatewayInvocationPrincipalSchema: {
+    readonly $id: "openxiangda.gateway-invocation-principal/v2";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["schemaVersion", "target", "principal", "roleSession", "invocationTokenId"];
+    readonly properties: {
+        readonly schemaVersion: {
+            readonly const: "openxiangda.gateway-invocation-principal/v2";
+        };
+        readonly target: {
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["tenantId", "appCode", "environmentId", "environmentKey", "appVersionId", "deploymentRunId", "headRevision", "backendRevisionId"];
+            readonly properties: {
+                readonly tenantId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly appCode: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly environmentId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly environmentKey: {
+                    readonly enum: readonly ["local", "preproduction", "production"];
+                };
+                readonly appVersionId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly deploymentRunId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly headRevision: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                };
+                readonly backendRevisionId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+            };
+        };
+        readonly principal: {
+            readonly anyOf: readonly [{
+                readonly $ref: "openxiangda.native-principal/v2";
+            }, {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["principalType", "clientRecordId", "clientId", "credentialVersion", "tenantId", "appCode", "environmentId", "environmentKey", "appVersionId", "deploymentRunId", "headRevision", "scopes", "rateLimitPerMinute", "tokenId"];
+                readonly properties: {
+                    readonly principalType: {
+                        readonly const: "application";
+                    };
+                    readonly clientRecordId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly clientId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly credentialVersion: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly runtimeContract: {
+                        readonly const: "native-2";
+                    };
+                    readonly runtimeCredentialId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly tenantId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly appCode: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly environmentId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly environmentKey: {
+                        readonly enum: readonly ["local", "preproduction", "production"];
+                    };
+                    readonly appVersionId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly deploymentRunId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly headRevision: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly scopes: {
+                        readonly type: "array";
+                        readonly maxItems: 2000;
+                        readonly uniqueItems: true;
+                        readonly items: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                    };
+                    readonly rateLimitPerMinute: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly tokenId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly issuedAt: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                    };
+                    readonly expiresAt: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                    };
+                };
+            }];
+        };
+        readonly roleSession: {
+            readonly anyOf: readonly [{
+                readonly $ref: "openxiangda.native-role-session/v2";
+            }, {
+                readonly type: "null";
+            }];
+        };
+        readonly invocationTokenId: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+    };
+};
+export declare const runtimeLeaseResultSchema: {
+    readonly $id: "openxiangda.runtime-lease-result/v2";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["schemaVersion", "granted", "released", "leaseToken", "expiresAt", "retryAfterMs", "target"];
+    readonly properties: {
+        readonly schemaVersion: {
+            readonly const: "openxiangda.runtime-lease-result/v2";
+        };
+        readonly granted: {
+            readonly type: "boolean";
+        };
+        readonly released: {
+            readonly type: "boolean";
+        };
+        readonly leaseToken: {
+            readonly anyOf: readonly [{
+                readonly type: "string";
+                readonly minLength: 1;
+            }, {
+                readonly type: "null";
+            }];
+        };
+        readonly expiresAt: {
+            readonly anyOf: readonly [{
+                readonly type: "string";
+                readonly format: "date-time";
+            }, {
+                readonly type: "null";
+            }];
+        };
+        readonly retryAfterMs: {
+            readonly type: "integer";
+            readonly minimum: 0;
+            readonly maximum: 20000;
+        };
+        readonly target: {
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["environmentId", "appVersionId", "deploymentRunId", "headRevision"];
+            readonly properties: {
+                readonly environmentId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly appVersionId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly deploymentRunId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly headRevision: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                };
+            };
+        };
+    };
+};
+export declare const runtimeSecretValuesSchema: {
+    readonly $id: "openxiangda.runtime-secret-values/v2";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["schemaVersion", "items", "target"];
+    readonly properties: {
+        readonly schemaVersion: {
+            readonly const: "openxiangda.runtime-secret-values/v2";
+        };
+        readonly items: {
+            readonly type: "array";
+            readonly maxItems: 64;
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["name", "env", "value", "version", "revision"];
+                readonly properties: {
+                    readonly name: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly env: {
+                        readonly type: "string";
+                        readonly pattern: "^[A-Z][A-Z0-9_]{0,127}$";
+                    };
+                    readonly value: {
+                        readonly type: "string";
+                    };
+                    readonly version: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly revision: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                };
+            };
+        };
+        readonly target: {
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["environmentId", "appVersionId", "deploymentRunId", "headRevision"];
+            readonly properties: {
+                readonly environmentId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly appVersionId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly deploymentRunId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly headRevision: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                };
+            };
+        };
+    };
+};
 export declare const subjectProfileSchema: {
     readonly $id: "openxiangda.subject-profile/v2";
     readonly type: "object";
@@ -4107,7 +4422,7 @@ export declare const workflowPreparationSchema: {
 export declare const workflowInstanceSchema: {
     readonly $id: "openxiangda.workflow-instance/v2";
     readonly type: "object";
-    readonly required: readonly ["engineVersion", "id", "appCode", "workflowCode", "status", "version"];
+    readonly required: readonly ["engineVersion", "id", "appCode", "environmentId", "environmentKey", "workflowCode", "status", "initiatorRoleSubjectKey", "initiatorRoleSubjectKind", "initiatorRoleCode", "initiatorRoleSubjectRevision", "version"];
     readonly properties: {
         readonly schemaVersion: {
             readonly const: "openxiangda.workflow-instance/v2";
@@ -4123,6 +4438,10 @@ export declare const workflowInstanceSchema: {
             readonly type: "string";
             readonly minLength: 1;
         };
+        readonly environmentId: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
         readonly environmentKey: {
             readonly type: "string";
             readonly minLength: 1;
@@ -4134,16 +4453,31 @@ export declare const workflowInstanceSchema: {
         readonly status: {
             readonly enum: readonly ["running", "returned", "approved", "rejected", "withdrawn", "terminated", "error"];
         };
-        readonly version: {
-            readonly type: "integer";
-            readonly minimum: 1;
+        readonly initiatorRoleSubjectKey: {
+            readonly type: "string";
+            readonly minLength: 1;
         };
-    };
+        readonly initiatorRoleSubjectKind: {
+            readonly enum: readonly ["membership", "super_admin"];
+        };
+        readonly initiatorRoleCode: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly initiatorRoleSubjectRevision: {
+            readonly type: "integer";
+            readonly minimum: 1;
+        };
+        readonly version: {
+            readonly type: "integer";
+            readonly minimum: 1;
+        };
+    };
 };
 export declare const workflowTaskSchema: {
     readonly $id: "openxiangda.workflow-task/v2";
     readonly type: "object";
-    readonly required: readonly ["engineVersion", "id", "instanceId", "nodeId", "status", "taskKind", "assignedRoleAssignmentId", "activeParticipantId", "participants", "originTaskId", "returnSessionId", "version"];
+    readonly required: readonly ["engineVersion", "id", "instanceId", "nodeId", "status", "taskKind", "assignedRoleSubjectKey", "activeParticipantId", "participants", "originTaskId", "returnSessionId", "version"];
     readonly properties: {
         readonly schemaVersion: {
             readonly const: "openxiangda.workflow-task/v2";
@@ -4169,7 +4503,7 @@ export declare const workflowTaskSchema: {
         readonly taskKind: {
             readonly enum: readonly ["normal", "return_review", "resume"];
         };
-        readonly assignedRoleAssignmentId: {
+        readonly assignedRoleSubjectKey: {
             readonly type: readonly ["string", "null"];
         };
         readonly activeParticipantId: {
@@ -4177,10 +4511,10 @@ export declare const workflowTaskSchema: {
         };
         readonly participants: {
             readonly type: "array";
-            readonly minItems: 1;
+            readonly minItems: 0;
             readonly items: {
                 readonly type: "object";
-                readonly required: readonly ["id", "userId", "roleAssignmentId", "role", "kind", "status", "required", "outcome", "sourceParticipantId", "delegationId", "delegationValidFrom", "delegationValidTo", "createdByRoleAssignmentId", "completedByRoleAssignmentId", "createdAt", "completedAt"];
+                readonly required: readonly ["id", "userId", "roleSubjectKey", "roleSubjectKind", "roleSubjectRevision", "role", "kind", "status", "required", "outcome", "sourceParticipantId", "delegationId", "delegationValidFrom", "delegationValidTo", "createdByRoleSubjectKey", "completedByRoleSubjectKey", "createdAt", "completedAt"];
                 readonly properties: {
                     readonly id: {
                         readonly type: "string";
@@ -4190,23 +4524,37 @@ export declare const workflowTaskSchema: {
                         readonly type: "string";
                         readonly minLength: 1;
                     };
-                    readonly roleAssignmentId: {
-                        readonly type: "string";
-                        readonly minLength: 1;
+                    readonly roleSubjectKey: {
+                        readonly type: readonly ["string", "null"];
+                    };
+                    readonly roleSubjectKind: {
+                        readonly anyOf: readonly [{
+                            readonly enum: readonly ["membership", "super_admin"];
+                        }, {
+                            readonly type: "null";
+                        }];
+                    };
+                    readonly roleSubjectRevision: {
+                        readonly type: readonly ["integer", "null"];
+                        readonly minimum: 1;
                     };
                     readonly role: {
-                        readonly type: "object";
-                        readonly required: readonly ["code", "name"];
-                        readonly properties: {
-                            readonly code: {
-                                readonly type: "string";
-                                readonly minLength: 1;
-                            };
-                            readonly name: {
-                                readonly type: "string";
-                                readonly minLength: 1;
+                        readonly anyOf: readonly [{
+                            readonly type: "object";
+                            readonly required: readonly ["code", "name"];
+                            readonly properties: {
+                                readonly code: {
+                                    readonly type: "string";
+                                    readonly minLength: 1;
+                                };
+                                readonly name: {
+                                    readonly type: "string";
+                                    readonly minLength: 1;
+                                };
                             };
-                        };
+                        }, {
+                            readonly type: "null";
+                        }];
                     };
                     readonly kind: {
                         readonly enum: readonly ["primary", "add_sign", "transfer", "delegate"];
@@ -4242,11 +4590,11 @@ export declare const workflowTaskSchema: {
                             readonly type: "null";
                         }];
                     };
-                    readonly createdByRoleAssignmentId: {
+                    readonly createdByRoleSubjectKey: {
                         readonly type: "string";
                         readonly minLength: 1;
                     };
-                    readonly completedByRoleAssignmentId: {
+                    readonly completedByRoleSubjectKey: {
                         readonly type: readonly ["string", "null"];
                     };
                     readonly createdAt: {
@@ -4326,7 +4674,7 @@ export declare const workflowDelegationSchema: {
     readonly $id: "openxiangda.workflow-delegation/v2";
     readonly type: "object";
     readonly additionalProperties: false;
-    readonly required: readonly ["schemaVersion", "id", "appCode", "environmentKey", "workflowCode", "delegatorUserId", "delegateUserId", "delegatorRoleAssignmentId", "delegateRoleAssignmentId", "validFrom", "validTo", "status", "reason", "createdBy", "createdAt", "revokedAt"];
+    readonly required: readonly ["schemaVersion", "id", "appCode", "environmentKey", "workflowCode", "delegatorUserId", "delegateUserId", "delegatorRoleSubjectKey", "delegateRoleSubjectKey", "validFrom", "validTo", "status", "reason", "createdBy", "createdAt", "revokedAt"];
     readonly properties: {
         readonly schemaVersion: {
             readonly const: "openxiangda.workflow-delegation/v2";
@@ -4354,11 +4702,11 @@ export declare const workflowDelegationSchema: {
             readonly type: "string";
             readonly minLength: 1;
         };
-        readonly delegatorRoleAssignmentId: {
+        readonly delegatorRoleSubjectKey: {
             readonly type: "string";
             readonly minLength: 1;
         };
-        readonly delegateRoleAssignmentId: {
+        readonly delegateRoleSubjectKey: {
             readonly type: "string";
             readonly minLength: 1;
         };
@@ -4534,14 +4882,25 @@ export declare const workflowAssigneeResponseSchema: {
                         readonly type: "string";
                         readonly minLength: 1;
                     };
-                    readonly roleAssignmentId: {
+                    readonly roleSubjectKey: {
                         readonly type: "string";
                         readonly minLength: 1;
                     };
+                    readonly roleSubjectKind: {
+                        readonly enum: readonly ["membership", "super_admin"];
+                    };
+                    readonly roleSubjectRevision: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
                     readonly roleCode: {
                         readonly type: "string";
                         readonly minLength: 1;
                     };
+                    readonly roleName: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
                     readonly displayName: {
                         readonly type: "string";
                         readonly minLength: 1;
@@ -4591,7 +4950,7 @@ export declare const workflowKernelDescriptorSchema: {
             };
         };
         readonly authorizationMode: {
-            readonly const: "role_session_v2";
+            readonly const: "native_role_session_v2";
         };
     };
 };
@@ -4658,7 +5017,7 @@ export declare const workflowKernelWorkItemSchema: {
             readonly minLength: 1;
         };
         readonly authorizationMode: {
-            readonly const: "role_session_v2";
+            readonly const: "native_role_session_v2";
         };
     };
 };
@@ -4666,7 +5025,7 @@ export declare const workflowKernelWorkCenterSchema: {
     readonly $id: "openxiangda.workflow-kernel-work-center/v2";
     readonly type: "object";
     readonly additionalProperties: false;
-    readonly required: readonly ["schemaVersion", "category", "roleSessionId", "activeRoleAssignmentId", "items", "total", "limit", "offset", "engineCounts"];
+    readonly required: readonly ["schemaVersion", "category", "roleSessionId", "activeRoleSubjectKey", "items", "total", "limit", "offset", "engineCounts"];
     readonly properties: {
         readonly schemaVersion: {
             readonly const: "openxiangda.workflow-kernel-work-center/v2";
@@ -4678,7 +5037,7 @@ export declare const workflowKernelWorkCenterSchema: {
             readonly type: "string";
             readonly minLength: 1;
         };
-        readonly activeRoleAssignmentId: {
+        readonly activeRoleSubjectKey: {
             readonly type: "string";
             readonly minLength: 1;
         };
@@ -5780,6 +6139,321 @@ export declare const contractSchemas: {
             };
         };
     };
+    readonly gatewayAssertionJwks: {
+        readonly $id: "openxiangda.gateway-assertion-jwks/v2";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["schemaVersion", "keys"];
+        readonly properties: {
+            readonly schemaVersion: {
+                readonly const: "openxiangda.gateway-assertion-jwks/v2";
+            };
+            readonly keys: {
+                readonly type: "array";
+                readonly minItems: 1;
+                readonly maxItems: 3;
+                readonly items: {
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["kty", "crv", "x", "use", "alg", "kid"];
+                    readonly properties: {
+                        readonly kty: {
+                            readonly const: "OKP";
+                        };
+                        readonly crv: {
+                            readonly const: "Ed25519";
+                        };
+                        readonly x: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                        readonly use: {
+                            readonly const: "sig";
+                        };
+                        readonly alg: {
+                            readonly const: "EdDSA";
+                        };
+                        readonly kid: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                            readonly maxLength: 128;
+                            readonly pattern: "^[A-Za-z0-9._-]+$";
+                        };
+                    };
+                };
+            };
+        };
+    };
+    readonly gatewayInvocationPrincipal: {
+        readonly $id: "openxiangda.gateway-invocation-principal/v2";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["schemaVersion", "target", "principal", "roleSession", "invocationTokenId"];
+        readonly properties: {
+            readonly schemaVersion: {
+                readonly const: "openxiangda.gateway-invocation-principal/v2";
+            };
+            readonly target: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["tenantId", "appCode", "environmentId", "environmentKey", "appVersionId", "deploymentRunId", "headRevision", "backendRevisionId"];
+                readonly properties: {
+                    readonly tenantId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly appCode: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly environmentId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly environmentKey: {
+                        readonly enum: readonly ["local", "preproduction", "production"];
+                    };
+                    readonly appVersionId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly deploymentRunId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly headRevision: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly backendRevisionId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                };
+            };
+            readonly principal: {
+                readonly anyOf: readonly [{
+                    readonly $ref: "openxiangda.native-principal/v2";
+                }, {
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["principalType", "clientRecordId", "clientId", "credentialVersion", "tenantId", "appCode", "environmentId", "environmentKey", "appVersionId", "deploymentRunId", "headRevision", "scopes", "rateLimitPerMinute", "tokenId"];
+                    readonly properties: {
+                        readonly principalType: {
+                            readonly const: "application";
+                        };
+                        readonly clientRecordId: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                        readonly clientId: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                        readonly credentialVersion: {
+                            readonly type: "integer";
+                            readonly minimum: 1;
+                        };
+                        readonly runtimeContract: {
+                            readonly const: "native-2";
+                        };
+                        readonly runtimeCredentialId: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                        readonly tenantId: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                        readonly appCode: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                        readonly environmentId: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                        readonly environmentKey: {
+                            readonly enum: readonly ["local", "preproduction", "production"];
+                        };
+                        readonly appVersionId: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                        readonly deploymentRunId: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                        readonly headRevision: {
+                            readonly type: "integer";
+                            readonly minimum: 1;
+                        };
+                        readonly scopes: {
+                            readonly type: "array";
+                            readonly maxItems: 2000;
+                            readonly uniqueItems: true;
+                            readonly items: {
+                                readonly type: "string";
+                                readonly minLength: 1;
+                            };
+                        };
+                        readonly rateLimitPerMinute: {
+                            readonly type: "integer";
+                            readonly minimum: 1;
+                        };
+                        readonly tokenId: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                        readonly issuedAt: {
+                            readonly type: "integer";
+                            readonly minimum: 0;
+                        };
+                        readonly expiresAt: {
+                            readonly type: "integer";
+                            readonly minimum: 0;
+                        };
+                    };
+                }];
+            };
+            readonly roleSession: {
+                readonly anyOf: readonly [{
+                    readonly $ref: "openxiangda.native-role-session/v2";
+                }, {
+                    readonly type: "null";
+                }];
+            };
+            readonly invocationTokenId: {
+                readonly type: "string";
+                readonly minLength: 1;
+            };
+        };
+    };
+    readonly runtimeLeaseResult: {
+        readonly $id: "openxiangda.runtime-lease-result/v2";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["schemaVersion", "granted", "released", "leaseToken", "expiresAt", "retryAfterMs", "target"];
+        readonly properties: {
+            readonly schemaVersion: {
+                readonly const: "openxiangda.runtime-lease-result/v2";
+            };
+            readonly granted: {
+                readonly type: "boolean";
+            };
+            readonly released: {
+                readonly type: "boolean";
+            };
+            readonly leaseToken: {
+                readonly anyOf: readonly [{
+                    readonly type: "string";
+                    readonly minLength: 1;
+                }, {
+                    readonly type: "null";
+                }];
+            };
+            readonly expiresAt: {
+                readonly anyOf: readonly [{
+                    readonly type: "string";
+                    readonly format: "date-time";
+                }, {
+                    readonly type: "null";
+                }];
+            };
+            readonly retryAfterMs: {
+                readonly type: "integer";
+                readonly minimum: 0;
+                readonly maximum: 20000;
+            };
+            readonly target: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["environmentId", "appVersionId", "deploymentRunId", "headRevision"];
+                readonly properties: {
+                    readonly environmentId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly appVersionId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly deploymentRunId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly headRevision: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                };
+            };
+        };
+    };
+    readonly runtimeSecretValues: {
+        readonly $id: "openxiangda.runtime-secret-values/v2";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["schemaVersion", "items", "target"];
+        readonly properties: {
+            readonly schemaVersion: {
+                readonly const: "openxiangda.runtime-secret-values/v2";
+            };
+            readonly items: {
+                readonly type: "array";
+                readonly maxItems: 64;
+                readonly items: {
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["name", "env", "value", "version", "revision"];
+                    readonly properties: {
+                        readonly name: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                        readonly env: {
+                            readonly type: "string";
+                            readonly pattern: "^[A-Z][A-Z0-9_]{0,127}$";
+                        };
+                        readonly value: {
+                            readonly type: "string";
+                        };
+                        readonly version: {
+                            readonly type: "integer";
+                            readonly minimum: 1;
+                        };
+                        readonly revision: {
+                            readonly type: "integer";
+                            readonly minimum: 1;
+                        };
+                    };
+                };
+            };
+            readonly target: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["environmentId", "appVersionId", "deploymentRunId", "headRevision"];
+                readonly properties: {
+                    readonly environmentId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly appVersionId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly deploymentRunId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly headRevision: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                };
+            };
+        };
+    };
     readonly subjectProfile: {
         readonly $id: "openxiangda.subject-profile/v2";
         readonly type: "object";
@@ -8831,7 +9505,7 @@ export declare const contractSchemas: {
     readonly workflowInstance: {
         readonly $id: "openxiangda.workflow-instance/v2";
         readonly type: "object";
-        readonly required: readonly ["engineVersion", "id", "appCode", "workflowCode", "status", "version"];
+        readonly required: readonly ["engineVersion", "id", "appCode", "environmentId", "environmentKey", "workflowCode", "status", "initiatorRoleSubjectKey", "initiatorRoleSubjectKind", "initiatorRoleCode", "initiatorRoleSubjectRevision", "version"];
         readonly properties: {
             readonly schemaVersion: {
                 readonly const: "openxiangda.workflow-instance/v2";
@@ -8847,6 +9521,10 @@ export declare const contractSchemas: {
                 readonly type: "string";
                 readonly minLength: 1;
             };
+            readonly environmentId: {
+                readonly type: "string";
+                readonly minLength: 1;
+            };
             readonly environmentKey: {
                 readonly type: "string";
                 readonly minLength: 1;
@@ -8858,6 +9536,21 @@ export declare const contractSchemas: {
             readonly status: {
                 readonly enum: readonly ["running", "returned", "approved", "rejected", "withdrawn", "terminated", "error"];
             };
+            readonly initiatorRoleSubjectKey: {
+                readonly type: "string";
+                readonly minLength: 1;
+            };
+            readonly initiatorRoleSubjectKind: {
+                readonly enum: readonly ["membership", "super_admin"];
+            };
+            readonly initiatorRoleCode: {
+                readonly type: "string";
+                readonly minLength: 1;
+            };
+            readonly initiatorRoleSubjectRevision: {
+                readonly type: "integer";
+                readonly minimum: 1;
+            };
             readonly version: {
                 readonly type: "integer";
                 readonly minimum: 1;
@@ -8867,7 +9560,7 @@ export declare const contractSchemas: {
     readonly workflowTask: {
         readonly $id: "openxiangda.workflow-task/v2";
         readonly type: "object";
-        readonly required: readonly ["engineVersion", "id", "instanceId", "nodeId", "status", "taskKind", "assignedRoleAssignmentId", "activeParticipantId", "participants", "originTaskId", "returnSessionId", "version"];
+        readonly required: readonly ["engineVersion", "id", "instanceId", "nodeId", "status", "taskKind", "assignedRoleSubjectKey", "activeParticipantId", "participants", "originTaskId", "returnSessionId", "version"];
         readonly properties: {
             readonly schemaVersion: {
                 readonly const: "openxiangda.workflow-task/v2";
@@ -8893,7 +9586,7 @@ export declare const contractSchemas: {
             readonly taskKind: {
                 readonly enum: readonly ["normal", "return_review", "resume"];
             };
-            readonly assignedRoleAssignmentId: {
+            readonly assignedRoleSubjectKey: {
                 readonly type: readonly ["string", "null"];
             };
             readonly activeParticipantId: {
@@ -8901,10 +9594,10 @@ export declare const contractSchemas: {
             };
             readonly participants: {
                 readonly type: "array";
-                readonly minItems: 1;
+                readonly minItems: 0;
                 readonly items: {
                     readonly type: "object";
-                    readonly required: readonly ["id", "userId", "roleAssignmentId", "role", "kind", "status", "required", "outcome", "sourceParticipantId", "delegationId", "delegationValidFrom", "delegationValidTo", "createdByRoleAssignmentId", "completedByRoleAssignmentId", "createdAt", "completedAt"];
+                    readonly required: readonly ["id", "userId", "roleSubjectKey", "roleSubjectKind", "roleSubjectRevision", "role", "kind", "status", "required", "outcome", "sourceParticipantId", "delegationId", "delegationValidFrom", "delegationValidTo", "createdByRoleSubjectKey", "completedByRoleSubjectKey", "createdAt", "completedAt"];
                     readonly properties: {
                         readonly id: {
                             readonly type: "string";
@@ -8914,23 +9607,37 @@ export declare const contractSchemas: {
                             readonly type: "string";
                             readonly minLength: 1;
                         };
-                        readonly roleAssignmentId: {
-                            readonly type: "string";
-                            readonly minLength: 1;
+                        readonly roleSubjectKey: {
+                            readonly type: readonly ["string", "null"];
+                        };
+                        readonly roleSubjectKind: {
+                            readonly anyOf: readonly [{
+                                readonly enum: readonly ["membership", "super_admin"];
+                            }, {
+                                readonly type: "null";
+                            }];
+                        };
+                        readonly roleSubjectRevision: {
+                            readonly type: readonly ["integer", "null"];
+                            readonly minimum: 1;
                         };
                         readonly role: {
-                            readonly type: "object";
-                            readonly required: readonly ["code", "name"];
-                            readonly properties: {
-                                readonly code: {
-                                    readonly type: "string";
-                                    readonly minLength: 1;
-                                };
-                                readonly name: {
-                                    readonly type: "string";
-                                    readonly minLength: 1;
+                            readonly anyOf: readonly [{
+                                readonly type: "object";
+                                readonly required: readonly ["code", "name"];
+                                readonly properties: {
+                                    readonly code: {
+                                        readonly type: "string";
+                                        readonly minLength: 1;
+                                    };
+                                    readonly name: {
+                                        readonly type: "string";
+                                        readonly minLength: 1;
+                                    };
                                 };
-                            };
+                            }, {
+                                readonly type: "null";
+                            }];
                         };
                         readonly kind: {
                             readonly enum: readonly ["primary", "add_sign", "transfer", "delegate"];
@@ -8966,11 +9673,11 @@ export declare const contractSchemas: {
                                 readonly type: "null";
                             }];
                         };
-                        readonly createdByRoleAssignmentId: {
+                        readonly createdByRoleSubjectKey: {
                             readonly type: "string";
                             readonly minLength: 1;
                         };
-                        readonly completedByRoleAssignmentId: {
+                        readonly completedByRoleSubjectKey: {
                             readonly type: readonly ["string", "null"];
                         };
                         readonly createdAt: {
@@ -9050,7 +9757,7 @@ export declare const contractSchemas: {
         readonly $id: "openxiangda.workflow-delegation/v2";
         readonly type: "object";
         readonly additionalProperties: false;
-        readonly required: readonly ["schemaVersion", "id", "appCode", "environmentKey", "workflowCode", "delegatorUserId", "delegateUserId", "delegatorRoleAssignmentId", "delegateRoleAssignmentId", "validFrom", "validTo", "status", "reason", "createdBy", "createdAt", "revokedAt"];
+        readonly required: readonly ["schemaVersion", "id", "appCode", "environmentKey", "workflowCode", "delegatorUserId", "delegateUserId", "delegatorRoleSubjectKey", "delegateRoleSubjectKey", "validFrom", "validTo", "status", "reason", "createdBy", "createdAt", "revokedAt"];
         readonly properties: {
             readonly schemaVersion: {
                 readonly const: "openxiangda.workflow-delegation/v2";
@@ -9078,11 +9785,11 @@ export declare const contractSchemas: {
                 readonly type: "string";
                 readonly minLength: 1;
             };
-            readonly delegatorRoleAssignmentId: {
+            readonly delegatorRoleSubjectKey: {
                 readonly type: "string";
                 readonly minLength: 1;
             };
-            readonly delegateRoleAssignmentId: {
+            readonly delegateRoleSubjectKey: {
                 readonly type: "string";
                 readonly minLength: 1;
             };
@@ -9258,14 +9965,25 @@ export declare const contractSchemas: {
                             readonly type: "string";
                             readonly minLength: 1;
                         };
-                        readonly roleAssignmentId: {
+                        readonly roleSubjectKey: {
                             readonly type: "string";
                             readonly minLength: 1;
                         };
+                        readonly roleSubjectKind: {
+                            readonly enum: readonly ["membership", "super_admin"];
+                        };
+                        readonly roleSubjectRevision: {
+                            readonly type: "integer";
+                            readonly minimum: 1;
+                        };
                         readonly roleCode: {
                             readonly type: "string";
                             readonly minLength: 1;
                         };
+                        readonly roleName: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
                         readonly displayName: {
                             readonly type: "string";
                             readonly minLength: 1;
@@ -9315,7 +10033,7 @@ export declare const contractSchemas: {
                 };
             };
             readonly authorizationMode: {
-                readonly const: "role_session_v2";
+                readonly const: "native_role_session_v2";
             };
         };
     };
@@ -9382,7 +10100,7 @@ export declare const contractSchemas: {
                 readonly minLength: 1;
             };
             readonly authorizationMode: {
-                readonly const: "role_session_v2";
+                readonly const: "native_role_session_v2";
             };
         };
     };
@@ -9390,7 +10108,7 @@ export declare const contractSchemas: {
         readonly $id: "openxiangda.workflow-kernel-work-center/v2";
         readonly type: "object";
         readonly additionalProperties: false;
-        readonly required: readonly ["schemaVersion", "category", "roleSessionId", "activeRoleAssignmentId", "items", "total", "limit", "offset", "engineCounts"];
+        readonly required: readonly ["schemaVersion", "category", "roleSessionId", "activeRoleSubjectKey", "items", "total", "limit", "offset", "engineCounts"];
         readonly properties: {
             readonly schemaVersion: {
                 readonly const: "openxiangda.workflow-kernel-work-center/v2";
@@ -9402,7 +10120,7 @@ export declare const contractSchemas: {
                 readonly type: "string";
                 readonly minLength: 1;
             };
-            readonly activeRoleAssignmentId: {
+            readonly activeRoleSubjectKey: {
                 readonly type: "string";
                 readonly minLength: 1;
             };