@scoutflo/topology-contracts 0.10.7-hyperdx.2 → 0.11.0-flat.2

package/dist/src/investigation/flat.js

@@ -0,0 +1,371 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.flatTopologyResponseSchema = exports.flatEvidenceRouteSchema = exports.flatRouteTargetSchema = exports.flatAccessRefSchema = exports.flatRelationshipSchema = exports.flatEntitySchema = exports.flatSafeAttributesSchema = exports.flatEntityKey = exports.flatEntityRefSchema = exports.FLAT_TOPOLOGY_LIMITS = void 0;
+exports.flatJsonMetrics = flatJsonMetrics;
+const zod_1 = require("zod");
+exports.FLAT_TOPOLOGY_LIMITS = Object.freeze({
+    dependency_hops: 3,
+    dependency_entities: 50,
+    dependency_edges: 75,
+    fanout: 25,
+    callers: 10,
+    attachment_steps: 4,
+    attachment_entities: 40,
+    attachment_edges: 65,
+    entities: 100,
+    relationships: 150,
+    route_subjects: 60,
+    route_targets: 4,
+    queries: 40,
+    timeout_ms: 5000,
+    metadata_depth: 6,
+    metadata_entries: 50,
+    metadata_bytes: 8192,
+    response_bytes: 1048576,
+    containers: 4000,
+});
+const text = zod_1.z.string().trim().min(1).max(1024);
+exports.flatEntityRefSchema = zod_1.z
+    .object({ entity_type: zod_1.z.enum(["service", "resource"]), id: text })
+    .strict();
+const flatEntityKey = (ref) => JSON.stringify([ref.entity_type, ref.id]);
+exports.flatEntityKey = flatEntityKey;
+// Iterative preflight prevents cyclic/oversized inputs from reaching Zod's recursive traversal.
+function flatJsonMetrics(value) {
+    const stack = [
+        { value, depth: 0 },
+    ], seen = new WeakSet();
+    let containers = 0, depth = 0, stringBytes = 0;
+    while (stack.length) {
+        const item = stack.pop();
+        if (item.exit) {
+            seen.delete(item.value);
+            continue;
+        }
+        depth = Math.max(depth, item.depth);
+        if (depth > 32)
+            throw new Error("json_depth");
+        if (typeof item.value === "string")
+            stringBytes += Buffer.byteLength(item.value);
+        if (stringBytes > 1048576)
+            throw new Error("json_bytes");
+        if (item.value !== null && typeof item.value === "object") {
+            if (seen.has(item.value))
+                throw new Error("repeated_object");
+            seen.add(item.value);
+            stack.push({ ...item, exit: true });
+            containers++;
+            if (containers > 4000)
+                throw new Error("json_containers");
+            const entries = Object.entries(item.value);
+            if (entries.length > 4000)
+                throw new Error("json_entries");
+            for (const [key, child] of entries) {
+                stringBytes += Buffer.byteLength(key);
+                stack.push({ value: child, depth: item.depth + 1 });
+            }
+        }
+        else if (item.value !== null &&
+            !["string", "boolean", "number"].includes(typeof item.value))
+            throw new Error("non_json");
+        else if (typeof item.value === "number" && !Number.isFinite(item.value))
+            throw new Error("non_json");
+    }
+    return { bytes: Buffer.byteLength(JSON.stringify(value)), containers, depth };
+}
+const unsafeKey = /password|secret|token|credential|authorization|private.?key|kubeconfig|^__proto__$|^constructor$|^prototype$/i;
+exports.flatSafeAttributesSchema = zod_1.z
+    .record(zod_1.z.unknown())
+    .superRefine((value, ctx) => {
+    const fail = () => ctx.addIssue({
+        code: "custom",
+        message: "unsafe or oversized attributes",
+    });
+    try {
+        const m = flatJsonMetrics(value);
+        if (m.depth > 6 || m.bytes > 8192)
+            fail();
+        const queue = [value];
+        while (queue.length) {
+            const item = queue.pop();
+            if (item && typeof item === "object") {
+                if (Object.keys(item).length > 50)
+                    fail();
+                for (const [key, child] of Object.entries(item)) {
+                    if (unsafeKey.test(key))
+                        fail();
+                    queue.push(child);
+                }
+            }
+        }
+    }
+    catch {
+        fail();
+    }
+});
+const reason = zod_1.z.enum([
+    "hop_limit",
+    "entity_limit",
+    "edge_limit",
+    "fanout_limit",
+    "attachment_limit",
+    "target_limit",
+    "payload_limit",
+    "metadata_limit",
+    "query_limit",
+    "timeout",
+    "source_incomplete",
+    "selector_conflict",
+    "selector_missing",
+    "unsupported_provider",
+    "invalid_access_ref",
+    "ambiguous_access",
+    "snapshot_expired",
+    "not_requested",
+]);
+const reasons = zod_1.z.array(reason).max(20);
+exports.flatEntitySchema = zod_1.z
+    .object({
+    ref: exports.flatEntityRefSchema,
+    name: text,
+    resource_type: text.optional(),
+    provider: text.optional(),
+    detail: zod_1.z.enum(["full", "reference"]),
+    attributes: exports.flatSafeAttributesSchema,
+    metadata_truncated: zod_1.z.boolean(),
+})
+    .strict();
+exports.flatRelationshipSchema = zod_1.z
+    .object({
+    id: text,
+    from: exports.flatEntityRefSchema,
+    to: exports.flatEntityRefSchema,
+    relation: text,
+    relation_class: zod_1.z.enum(["structural", "associative"]),
+    diagnostic_criticality: zod_1.z
+        .enum(["blocking", "degrading", "optional"])
+        .optional(),
+    attribute_schema_key: text.optional(),
+    attributes: exports.flatSafeAttributesSchema,
+    metadata_truncated: zod_1.z.boolean(),
+})
+    .strict();
+exports.flatAccessRefSchema = zod_1.z
+    .object({ provider: text, external_id: text, source_collection: text })
+    .strict();
+exports.flatRouteTargetSchema = zod_1.z
+    .object({
+    target: exports.flatEntityRefSchema,
+    access_ref: exports.flatAccessRefSchema,
+    via_relationship_ids: zod_1.z.array(text).max(4),
+    mapping_source: zod_1.z.enum(["relationship_path", "root_ref", "access_ref"]),
+    query_context: exports.flatSafeAttributesSchema,
+    query_context_status: zod_1.z.enum(["complete", "incomplete", "not_required"]),
+    reasons,
+})
+    .strict()
+    .superRefine((target, ctx) => {
+    if (target.query_context_status === "complete" && target.reasons.length)
+        ctx.addIssue({
+            code: "custom",
+            message: "complete context cannot carry rejection reasons",
+        });
+});
+const lookup = zod_1.z
+    .object({
+    status: zod_1.z.enum([
+        "mapped",
+        "unmapped",
+        "ambiguous",
+        "lookup_incomplete",
+        "not_applicable",
+    ]),
+    targets: zod_1.z.array(exports.flatRouteTargetSchema).max(4),
+    reasons,
+})
+    .strict()
+    .superRefine((lane, ctx) => {
+    if ((lane.status === "mapped" && !lane.targets.length) ||
+        (["unmapped", "ambiguous", "not_applicable"].includes(lane.status) &&
+            lane.targets.length))
+        ctx.addIssue({
+            code: "custom",
+            message: "lookup status disagrees with targets",
+        });
+    if (lane.status === "lookup_incomplete" && !lane.reasons.length)
+        ctx.addIssue({
+            code: "custom",
+            message: "incomplete lookup requires a reason",
+        });
+});
+exports.flatEvidenceRouteSchema = zod_1.z
+    .object({
+    subject: exports.flatEntityRefSchema,
+    monitoring: lookup,
+    runtime: lookup,
+    deployment: lookup,
+})
+    .strict();
+const coverage = zod_1.z
+    .object({
+    complete: zod_1.z.boolean(),
+    reasons,
+    frontier: zod_1.z
+        .array(zod_1.z
+        .object({
+        at: exports.flatEntityRefSchema,
+        lane: zod_1.z.enum([
+            "dependency",
+            "caller",
+            "monitoring",
+            "runtime",
+            "deployment",
+        ]),
+        reason,
+        continuation: zod_1.z.string().min(1).max(4096).optional(),
+        continuation_anchor: exports.flatEntityRefSchema.optional(),
+    })
+        .strict())
+        .max(100),
+})
+    .strict()
+    .superRefine((value, ctx) => {
+    if (value.complete && (value.reasons.length || value.frontier.length))
+        ctx.addIssue({
+            code: "custom",
+            message: "complete coverage contains omissions",
+        });
+    if (!value.complete && !value.reasons.length)
+        ctx.addIssue({
+            code: "custom",
+            message: "incomplete coverage requires a reason",
+        });
+});
+const appliedLimits = zod_1.z
+    .object(Object.fromEntries(Object.entries(exports.FLAT_TOPOLOGY_LIMITS).map(([key, max]) => [
+    key,
+    zod_1.z
+        .number()
+        .int()
+        .nonnegative()
+        .max(key === "dependency_hops" ? 8 : max),
+])))
+    .strict();
+const base = zod_1.z
+    .object({
+    schema_version: zod_1.z.literal("topology.flat.v1"),
+    profile: zod_1.z.literal("troubleshoot.v1"),
+    topology_version_id: text,
+    scope: zod_1.z.object({ account_id: text, workspace_id: text }).strict(),
+    snapshot: zod_1.z.string().min(1).max(4096).optional(),
+    read_window: zod_1.z
+        .object({
+        started_at: zod_1.z.string().datetime(),
+        completed_at: zod_1.z.string().datetime(),
+    })
+        .strict(),
+    observation_coverage: zod_1.z.enum(["complete", "partial", "unknown"]),
+    anchor: exports.flatEntityRefSchema,
+    entities: zod_1.z.array(exports.flatEntitySchema).max(100),
+    relationships: zod_1.z.array(exports.flatRelationshipSchema).max(150),
+    evidence_routes: zod_1.z.array(exports.flatEvidenceRouteSchema).max(60),
+    coverage: zod_1.z
+        .object({
+        dependencies: coverage,
+        callers: coverage,
+        attachments: coverage,
+    })
+        .strict(),
+    applied_limits: appliedLimits,
+})
+    .strict()
+    .superRefine((slice, ctx) => {
+    const issue = (message) => ctx.addIssue({ code: "custom", message });
+    const entities = new Set(slice.entities.map((e) => (0, exports.flatEntityKey)(e.ref))), edges = new Map(slice.relationships.map((e) => [e.id, e]));
+    if (entities.size !== slice.entities.length ||
+        edges.size !== slice.relationships.length ||
+        new Set(slice.evidence_routes.map((r) => (0, exports.flatEntityKey)(r.subject)))
+            .size !== slice.evidence_routes.length)
+        issue("duplicate identity");
+    const check = (ref) => {
+        if (!entities.has((0, exports.flatEntityKey)(ref)))
+            issue("unresolved entity");
+    };
+    check(slice.anchor);
+    for (const e of slice.relationships) {
+        check(e.from);
+        check(e.to);
+    }
+    for (const r of slice.evidence_routes) {
+        check(r.subject);
+        for (const lane of ["monitoring", "runtime", "deployment"]) {
+            const identities = new Set();
+            for (const t of r[lane].targets) {
+                check(t.target);
+                const identity = JSON.stringify([
+                    t.access_ref.provider,
+                    t.access_ref.source_collection,
+                    t.access_ref.external_id,
+                ]);
+                if (identities.has(identity))
+                    issue("duplicate route identity");
+                identities.add(identity);
+                let at = r.subject;
+                for (const id of t.via_relationship_ids) {
+                    const edge = edges.get(id);
+                    if (!edge) {
+                        issue("unresolved path edge");
+                        continue;
+                    }
+                    if ((0, exports.flatEntityKey)(edge.from) === (0, exports.flatEntityKey)(at))
+                        at = edge.to;
+                    else if (lane === "deployment" &&
+                        edge.relation === "DEPLOYS" &&
+                        (0, exports.flatEntityKey)(edge.to) === (0, exports.flatEntityKey)(at))
+                        at = edge.from;
+                    else
+                        issue("disconnected path");
+                }
+                if (t.mapping_source === "relationship_path" &&
+                    (0, exports.flatEntityKey)(at) !== (0, exports.flatEntityKey)(t.target))
+                    issue("path does not reach target");
+                if (t.mapping_source !== "relationship_path" &&
+                    t.via_relationship_ids.length)
+                    issue("unexpected path for direct mapping");
+            }
+            if (r[lane].targets.length > slice.applied_limits.route_targets)
+                issue("target limit exceeded");
+        }
+    }
+    for (const c of Object.values(slice.coverage))
+        for (const f of c.frontier) {
+            check(f.at);
+            if (f.continuation_anchor)
+                check(f.continuation_anchor);
+            if (Boolean(f.continuation) !== Boolean(f.continuation_anchor))
+                issue("continuation anchor required");
+        }
+    const m = flatJsonMetrics(slice);
+    if (m.bytes > slice.applied_limits.response_bytes ||
+        m.containers > slice.applied_limits.containers ||
+        slice.entities.length > slice.applied_limits.entities ||
+        slice.relationships.length > slice.applied_limits.relationships ||
+        slice.evidence_routes.length > slice.applied_limits.route_subjects)
+        issue("slice budget exceeded");
+});
+exports.flatTopologyResponseSchema = zod_1.z.preprocess((value, ctx) => {
+    try {
+        const m = flatJsonMetrics(value);
+        if (m.bytes > 1048576)
+            throw new Error("json_bytes");
+    }
+    catch {
+        ctx.addIssue({
+            code: "custom",
+            message: "flat response preflight rejected",
+        });
+        return zod_1.z.NEVER;
+    }
+    return value;
+}, base);
+//# sourceMappingURL=flat.js.map

package/dist/src/investigation/flat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flat.js","sourceRoot":"","sources":["../../../src/investigation/flat.ts"],"names":[],"mappings":";;;AAgCA,0CA4CC;AA5ED,6BAAwB;AAEX,QAAA,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IAChD,eAAe,EAAE,CAAC;IAClB,mBAAmB,EAAE,EAAE;IACvB,gBAAgB,EAAE,EAAE;IACpB,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,EAAE;IACX,gBAAgB,EAAE,CAAC;IACnB,mBAAmB,EAAE,EAAE;IACvB,gBAAgB,EAAE,EAAE;IACpB,QAAQ,EAAE,GAAG;IACb,aAAa,EAAE,GAAG;IAClB,cAAc,EAAE,EAAE;IAClB,aAAa,EAAE,CAAC;IAChB,OAAO,EAAE,EAAE;IACX,UAAU,EAAE,IAAI;IAChB,cAAc,EAAE,CAAC;IACjB,gBAAgB,EAAE,EAAE;IACpB,cAAc,EAAE,IAAI;IACpB,cAAc,EAAE,OAAO;IACvB,UAAU,EAAE,IAAI;CACjB,CAAC,CAAC;AACH,MAAM,IAAI,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACnC,QAAA,mBAAmB,GAAG,OAAC;KACjC,MAAM,CAAC,EAAE,WAAW,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;KAClE,MAAM,EAAE,CAAC;AAEL,MAAM,aAAa,GAAG,CAAC,GAAkB,EAAU,EAAE,CAC1D,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AAD/B,QAAA,aAAa,iBACkB;AAE5C,gGAAgG;AAChG,SAAgB,eAAe,CAAC,KAAc;IAK5C,MAAM,KAAK,GAA6D;QACpE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE;KACpB,EACD,IAAI,GAAG,IAAI,OAAO,EAAU,CAAC;IAC/B,IAAI,UAAU,GAAG,CAAC,EAChB,KAAK,GAAG,CAAC,EACT,WAAW,GAAG,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QAC1B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,KAAK,GAAG,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAChC,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,WAAW,GAAG,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC1D,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAC7D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,UAAU,EAAE,CAAC;YACb,IAAI,UAAU,GAAG,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;YAC3D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;gBACnC,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBACtC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;aAAM,IACL,IAAI,CAAC,KAAK,KAAK,IAAI;YACnB,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC;YAE5D,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;aACzB,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AAChF,CAAC;AACD,MAAM,SAAS,GACb,+GAA+G,CAAC;AACrG,QAAA,wBAAwB,GAAG,OAAC;KACtC,MAAM,CAAC,OAAC,CAAC,OAAO,EAAE,CAAC;KACnB,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,IAAI,GAAG,GAAG,EAAE,CAChB,GAAG,CAAC,QAAQ,CAAC;QACX,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,gCAAgC;KAC1C,CAAC,CAAC;IACL,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI;YAAE,IAAI,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAc,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;YACzB,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE;oBAAE,IAAI,EAAE,CAAC;gBAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChD,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;wBAAE,IAAI,EAAE,CAAC;oBAChC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC;IACT,CAAC;AACH,CAAC,CAAC,CAAC;AACL,MAAM,MAAM,GAAG,OAAC,CAAC,IAAI,CAAC;IACpB,WAAW;IACX,cAAc;IACd,YAAY;IACZ,cAAc;IACd,kBAAkB;IAClB,cAAc;IACd,eAAe;IACf,gBAAgB;IAChB,aAAa;IACb,SAAS;IACT,mBAAmB;IACnB,mBAAmB;IACnB,kBAAkB;IAClB,sBAAsB;IACtB,oBAAoB;IACpB,kBAAkB;IAClB,kBAAkB;IAClB,eAAe;CAChB,CAAC,CAAC;AACH,MAAM,OAAO,GAAG,OAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC3B,QAAA,gBAAgB,GAAG,OAAC;KAC9B,MAAM,CAAC;IACN,GAAG,EAAE,2BAAmB;IACxB,IAAI,EAAE,IAAI;IACV,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;IACzB,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrC,UAAU,EAAE,gCAAwB;IACpC,kBAAkB,EAAE,OAAC,CAAC,OAAO,EAAE;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AACC,QAAA,sBAAsB,GAAG,OAAC;KACpC,MAAM,CAAC;IACN,EAAE,EAAE,IAAI;IACR,IAAI,EAAE,2BAAmB;IACzB,EAAE,EAAE,2BAAmB;IACvB,QAAQ,EAAE,IAAI;IACd,cAAc,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;IACrD,sBAAsB,EAAE,OAAC;SACtB,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;SAC3C,QAAQ,EAAE;IACb,oBAAoB,EAAE,IAAI,CAAC,QAAQ,EAAE;IACrC,UAAU,EAAE,gCAAwB;IACpC,kBAAkB,EAAE,OAAC,CAAC,OAAO,EAAE;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AACC,QAAA,mBAAmB,GAAG,OAAC;KACjC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;KACtE,MAAM,EAAE,CAAC;AACC,QAAA,qBAAqB,GAAG,OAAC;KACnC,MAAM,CAAC;IACN,MAAM,EAAE,2BAAmB;IAC3B,UAAU,EAAE,2BAAmB;IAC/B,oBAAoB,EAAE,OAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,cAAc,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,mBAAmB,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;IACvE,aAAa,EAAE,gCAAwB;IACvC,oBAAoB,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;IACxE,OAAO;CACR,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IAC3B,IAAI,MAAM,CAAC,oBAAoB,KAAK,UAAU,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM;QACrE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,iDAAiD;SAC3D,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AACL,MAAM,MAAM,GAAG,OAAC;KACb,MAAM,CAAC;IACN,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC;QACb,QAAQ;QACR,UAAU;QACV,WAAW;QACX,mBAAmB;QACnB,gBAAgB;KACjB,CAAC;IACF,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,6BAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,OAAO;CACR,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,IACE,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAClD,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;YAChE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAEtB,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,sCAAsC;SAChD,CAAC,CAAC;IACL,IAAI,IAAI,CAAC,MAAM,KAAK,mBAAmB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;QAC7D,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,qCAAqC;SAC/C,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AACQ,QAAA,uBAAuB,GAAG,OAAC;KACrC,MAAM,CAAC;IACN,OAAO,EAAE,2BAAmB;IAC5B,UAAU,EAAE,MAAM;IAClB,OAAO,EAAE,MAAM;IACf,UAAU,EAAE,MAAM;CACnB,CAAC;KACD,MAAM,EAAE,CAAC;AACZ,MAAM,QAAQ,GAAG,OAAC;KACf,MAAM,CAAC;IACN,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE;IACrB,OAAO;IACP,QAAQ,EAAE,OAAC;SACR,KAAK,CACJ,OAAC;SACE,MAAM,CAAC;QACN,EAAE,EAAE,2BAAmB;QACvB,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC;YACX,YAAY;YACZ,QAAQ;YACR,YAAY;YACZ,SAAS;YACT,YAAY;SACb,CAAC;QACF,MAAM;QACN,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;QACpD,mBAAmB,EAAE,2BAAmB,CAAC,QAAQ,EAAE;KACpD,CAAC;SACD,MAAM,EAAE,CACZ;SACA,GAAG,CAAC,GAAG,CAAC;CACZ,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QACnE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,sCAAsC;SAChD,CAAC,CAAC;IACL,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM;QAC1C,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,uCAAuC;SACjD,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AACL,MAAM,aAAa,GAAG,OAAC;KACpB,MAAM,CACL,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,4BAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;IACvD,GAAG;IACH,OAAC;SACE,MAAM,EAAE;SACR,GAAG,EAAE;SACL,WAAW,EAAE;SACb,GAAG,CAAC,GAAG,KAAK,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;CAC5C,CAAC,CACuD,CAC5D;KACA,MAAM,EAAE,CAAC;AACZ,MAAM,IAAI,GAAG,OAAC;KACX,MAAM,CAAC;IACN,cAAc,EAAE,OAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;IAC7C,OAAO,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IACrC,mBAAmB,EAAE,IAAI;IACzB,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAClE,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAChD,WAAW,EAAE,OAAC;SACX,MAAM,CAAC;QACN,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACpC,CAAC;SACD,MAAM,EAAE;IACX,oBAAoB,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAChE,MAAM,EAAE,2BAAmB;IAC3B,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,wBAAgB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC5C,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,8BAAsB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvD,eAAe,EAAE,OAAC,CAAC,KAAK,CAAC,+BAAuB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACzD,QAAQ,EAAE,OAAC;SACR,MAAM,CAAC;QACN,YAAY,EAAE,QAAQ;QACtB,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,QAAQ;KACtB,CAAC;SACD,MAAM,EAAE;IACX,cAAc,EAAE,aAAa;CAC9B,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,EAAE,CAChC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,qBAAa,EAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EACvE,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,IACE,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM;QACvC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,aAAa,CAAC,MAAM;QACzC,IAAI,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,qBAAa,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;aAChE,IAAI,KAAK,KAAK,CAAC,eAAe,CAAC,MAAM;QAExC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,CAAC,GAAkB,EAAE,EAAE;QACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAA,qBAAa,EAAC,GAAG,CAAC,CAAC;YAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACpE,CAAC,CAAC;IACF,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACpC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACd,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QACtC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACjB,KAAK,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,YAAY,CAAU,EAAE,CAAC;YACpE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;YACrC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;gBAChC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;oBAC9B,CAAC,CAAC,UAAU,CAAC,QAAQ;oBACrB,CAAC,CAAC,UAAU,CAAC,iBAAiB;oBAC9B,CAAC,CAAC,UAAU,CAAC,WAAW;iBACzB,CAAC,CAAC;gBACH,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAAE,KAAK,CAAC,0BAA0B,CAAC,CAAC;gBAChE,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACzB,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC;gBACnB,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,oBAAoB,EAAE,CAAC;oBACxC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;wBACV,KAAK,CAAC,sBAAsB,CAAC,CAAC;wBAC9B,SAAS;oBACX,CAAC;oBACD,IAAI,IAAA,qBAAa,EAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAA,qBAAa,EAAC,EAAE,CAAC;wBAAE,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;yBAC5D,IACH,IAAI,KAAK,YAAY;wBACrB,IAAI,CAAC,QAAQ,KAAK,SAAS;wBAC3B,IAAA,qBAAa,EAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAA,qBAAa,EAAC,EAAE,CAAC;wBAE5C,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;;wBACZ,KAAK,CAAC,mBAAmB,CAAC,CAAC;gBAClC,CAAC;gBACD,IACE,CAAC,CAAC,cAAc,KAAK,mBAAmB;oBACxC,IAAA,qBAAa,EAAC,EAAE,CAAC,KAAK,IAAA,qBAAa,EAAC,CAAC,CAAC,MAAM,CAAC;oBAE7C,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBACtC,IACE,CAAC,CAAC,cAAc,KAAK,mBAAmB;oBACxC,CAAC,CAAC,oBAAoB,CAAC,MAAM;oBAE7B,KAAK,CAAC,oCAAoC,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,cAAc,CAAC,aAAa;gBAC7D,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC3B,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACZ,IAAI,CAAC,CAAC,mBAAmB;gBAAE,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YACxD,IAAI,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC;gBAC5D,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC1C,CAAC;IACH,MAAM,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACjC,IACE,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC,cAAc;QAC7C,CAAC,CAAC,UAAU,GAAG,KAAK,CAAC,cAAc,CAAC,UAAU;QAC9C,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,cAAc,CAAC,QAAQ;QACrD,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,KAAK,CAAC,cAAc,CAAC,aAAa;QAC/D,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,KAAK,CAAC,cAAc,CAAC,cAAc;QAElE,KAAK,CAAC,uBAAuB,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC;AACQ,QAAA,0BAA0B,GAAG,OAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IACpE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,KAAK,GAAG,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,kCAAkC;SAC5C,CAAC,CAAC;QACH,OAAO,OAAC,CAAC,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,EAAE,IAAI,CAAC,CAAC"}

package/dist/src/investigation/index.d.ts

@@ -1 +1,2 @@
-export * from './context';
+export * from "./context";
+export * from "./flat";

package/dist/src/investigation/index.js

@@ -15,4 +15,5 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./context"), exports);
+__exportStar(require("./flat"), exports);
 //# sourceMappingURL=index.js.map

package/dist/src/investigation/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/investigation/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/investigation/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B;AAC1B,yCAAuB"}

package/dist/test/flat.test.d.ts

@@ -0,0 +1,120 @@
+export declare function flatFixture(): {
+    schema_version: string;
+    profile: string;
+    topology_version_id: string;
+    scope: {
+        account_id: string;
+        workspace_id: string;
+    };
+    read_window: {
+        started_at: string;
+        completed_at: string;
+    };
+    observation_coverage: string;
+    anchor: {
+        entity_type: string;
+        id: string;
+    };
+    entities: {
+        ref: {
+            entity_type: string;
+            id: string;
+        };
+        name: string;
+        detail: string;
+        attributes: {};
+        metadata_truncated: boolean;
+    }[];
+    relationships: {
+        id: string;
+        from: {
+            entity_type: string;
+            id: string;
+        };
+        to: {
+            entity_type: string;
+            id: string;
+        };
+        relation: string;
+        relation_class: string;
+        attributes: {};
+        metadata_truncated: boolean;
+    }[];
+    evidence_routes: {
+        subject: {
+            entity_type: string;
+            id: string;
+        };
+        monitoring: {
+            status: string;
+            reasons: never[];
+            targets: {
+                target: {
+                    entity_type: string;
+                    id: string;
+                };
+                access_ref: {
+                    provider: string;
+                    external_id: string;
+                    source_collection: string;
+                };
+                via_relationship_ids: string[];
+                mapping_source: string;
+                query_context: {
+                    namespace: string;
+                    serviceLabel: string;
+                };
+                query_context_status: string;
+                reasons: never[];
+            }[];
+        };
+        runtime: {
+            status: string;
+            targets: never[];
+            reasons: never[];
+        };
+        deployment: {
+            status: string;
+            targets: never[];
+            reasons: never[];
+        };
+    }[];
+    coverage: {
+        dependencies: {
+            complete: boolean;
+            reasons: never[];
+            frontier: never[];
+        };
+        callers: {
+            complete: boolean;
+            reasons: never[];
+            frontier: never[];
+        };
+        attachments: {
+            complete: boolean;
+            reasons: never[];
+            frontier: never[];
+        };
+    };
+    applied_limits: {
+        dependency_hops: number;
+        dependency_entities: number;
+        dependency_edges: number;
+        fanout: number;
+        callers: number;
+        attachment_steps: number;
+        attachment_entities: number;
+        attachment_edges: number;
+        entities: number;
+        relationships: number;
+        route_subjects: number;
+        route_targets: number;
+        queries: number;
+        timeout_ms: number;
+        metadata_depth: number;
+        metadata_entries: number;
+        metadata_bytes: number;
+        response_bytes: number;
+        containers: number;
+    };
+};