@scoutflo/topology-contracts 0.7.2 → 0.7.4

package/dist/src/correlation/candidate.d.ts

@@ -25,6 +25,8 @@ export declare const topologyCorrelationCandidateSchema: z.ZodObject<{
         id: string;
     }>;
     relation: z.ZodString;
+    correlation_contract_key: z.ZodOptional<z.ZodString>;
+    correlation_contract_version: z.ZodOptional<z.ZodString>;
     canonical_key: z.ZodString;
     semantic_key: z.ZodString;
     confidence: z.ZodObject<{
@@ -169,6 +171,8 @@ export declare const topologyCorrelationCandidateSchema: z.ZodObject<{
         id: string;
     }>;
     relation: z.ZodString;
+    correlation_contract_key: z.ZodOptional<z.ZodString>;
+    correlation_contract_version: z.ZodOptional<z.ZodString>;
     canonical_key: z.ZodString;
     semantic_key: z.ZodString;
     confidence: z.ZodObject<{
@@ -313,6 +317,8 @@ export declare const topologyCorrelationCandidateSchema: z.ZodObject<{
         id: string;
     }>;
     relation: z.ZodString;
+    correlation_contract_key: z.ZodOptional<z.ZodString>;
+    correlation_contract_version: z.ZodOptional<z.ZodString>;
     canonical_key: z.ZodString;
     semantic_key: z.ZodString;
     confidence: z.ZodObject<{

package/dist/src/correlation/candidate.js

@@ -4,6 +4,7 @@ exports.topologyCorrelationCandidateSchema = exports.topologyCorrelationDecision
 const zod_1 = require("zod");
 const correlation_core_1 = require("@scoutflo/correlation-core");
 const common_1 = require("../source-sync/common");
+const contractVocabulary_1 = require("./contractVocabulary");
 exports.topologyCorrelationDecisionSchema = zod_1.z.enum([
     'ready',
     'warning_only',
@@ -19,6 +20,8 @@ exports.topologyCorrelationCandidateSchema = zod_1.z.object({
     from: correlation_core_1.correlationEntityRefSchema,
     to: correlation_core_1.correlationEntityRefSchema,
     relation: common_1.nonEmptyStringSchema,
+    correlation_contract_key: contractVocabulary_1.topologyCorrelationContractKeySchema.optional(),
+    correlation_contract_version: contractVocabulary_1.topologyCorrelationContractVersionSchema.optional(),
     canonical_key: common_1.nonEmptyStringSchema,
     semantic_key: common_1.nonEmptyStringSchema,
     confidence: correlation_core_1.confidenceSchema,

package/dist/src/correlation/candidate.js.map

@@ -1 +1 @@
-{"version":3,"file":"candidate.js","sourceRoot":"","sources":["../../../src/correlation/candidate.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,iEAKoC;AACpC,kDAG+B;AAElB,QAAA,iCAAiC,GAAG,OAAC,CAAC,IAAI,CAAC;IACtD,OAAO;IACP,cAAc;IACd,WAAW;IACX,SAAS;IACT,UAAU;IACV,YAAY;CACb,CAAC,CAAC;AAEU,QAAA,kCAAkC,GAAG,OAAC,CAAC,MAAM,CAAC;IACzD,aAAa,EAAE,6BAAoB;IACnC,QAAQ,EAAE,6BAAoB;IAC9B,YAAY,EAAE,6BAAoB;IAClC,IAAI,EAAE,6CAA0B;IAChC,EAAE,EAAE,6CAA0B;IAC9B,QAAQ,EAAE,6BAAoB;IAC9B,aAAa,EAAE,6BAAoB;IACnC,YAAY,EAAE,6BAAoB;IAClC,UAAU,EAAE,mCAAgB;IAC5B,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,4CAAyB,CAAC;IAC5C,QAAQ,EAAE,yCAAiC;IAC3C,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,8CAA2B,CAAC,CAAC,QAAQ,EAAE;IAC5D,UAAU,EAAE,qBAAY,CAAC,QAAQ,EAAE;IACnC,iBAAiB,EAAE,qBAAY,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC,WAAW,EAAE,CAAC"}
+{"version":3,"file":"candidate.js","sourceRoot":"","sources":["../../../src/correlation/candidate.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,iEAKoC;AACpC,kDAG+B;AAC/B,6DAG8B;AAEjB,QAAA,iCAAiC,GAAG,OAAC,CAAC,IAAI,CAAC;IACtD,OAAO;IACP,cAAc;IACd,WAAW;IACX,SAAS;IACT,UAAU;IACV,YAAY;CACb,CAAC,CAAC;AAEU,QAAA,kCAAkC,GAAG,OAAC,CAAC,MAAM,CAAC;IACzD,aAAa,EAAE,6BAAoB;IACnC,QAAQ,EAAE,6BAAoB;IAC9B,YAAY,EAAE,6BAAoB;IAClC,IAAI,EAAE,6CAA0B;IAChC,EAAE,EAAE,6CAA0B;IAC9B,QAAQ,EAAE,6BAAoB;IAC9B,wBAAwB,EAAE,yDAAoC,CAAC,QAAQ,EAAE;IACzE,4BAA4B,EAAE,6DAAwC,CAAC,QAAQ,EAAE;IACjF,aAAa,EAAE,6BAAoB;IACnC,YAAY,EAAE,6BAAoB;IAClC,UAAU,EAAE,mCAAgB;IAC5B,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,4CAAyB,CAAC;IAC5C,QAAQ,EAAE,yCAAiC;IAC3C,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,8CAA2B,CAAC,CAAC,QAAQ,EAAE;IAC5D,UAAU,EAAE,qBAAY,CAAC,QAAQ,EAAE;IACnC,iBAAiB,EAAE,qBAAY,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC,WAAW,EAAE,CAAC"}

package/dist/src/correlation/connectionContractV1.d.ts

@@ -0,0 +1,80 @@
+import { z } from 'zod';
+export declare const CONNECTION_CONTRACT_VERSION_V1 = "v1";
+export declare const K8S_WORKLOAD_PART_OF_NAMESPACE_CONTRACT_KEY = "k8s_workload_part_of_namespace";
+export declare const K8S_WORKLOAD_SENDS_METRICS_TO_PROMETHEUS_COMPATIBLE_CONTRACT_KEY = "k8s_workload_sends_metrics_to_prometheus_compatible";
+export declare const WORKLOAD_REPORTS_ERRORS_TO_SENTRY_CONTRACT_KEY = "workload_reports_errors_to_sentry";
+export declare const CONNECTION_CONTRACT_V1_KEYS: readonly ["k8s_workload_part_of_namespace", "k8s_workload_sends_metrics_to_prometheus_compatible", "workload_reports_errors_to_sentry"];
+export declare const RELATIONSHIP_STRUCTURAL_CONTAINMENT_ATTRIBUTE_SCHEMA_KEY = "relationship.structural_containment.v1";
+export declare const MONITORING_PROMETHEUS_ATTRIBUTE_SCHEMA_KEY = "monitoring.prometheus";
+export declare const MONITORING_MIMIR_ATTRIBUTE_SCHEMA_KEY = "monitoring.mimir";
+export declare const MONITORING_VICTORIAMETRICS_ATTRIBUTE_SCHEMA_KEY = "monitoring.victoriametrics";
+export declare const MONITORING_SENTRY_ATTRIBUTE_SCHEMA_KEY = "monitoring.sentry";
+export declare const CONNECTION_CONTRACT_ATTRIBUTE_SCHEMA_KEYS: readonly ["relationship.structural_containment.v1", "monitoring.prometheus", "monitoring.mimir", "monitoring.victoriametrics", "monitoring.sentry"];
+export declare const PERSISTED_CANONICAL_IDENTITY_CLAIMS: readonly ["service_name", "namespace", "workload_name", "workload_type", "cluster_id", "environment", "provider", "integration_category"];
+export declare const KUBERNETES_WORKLOAD_CANONICAL_IDENTITY_CLAIMS: readonly ["cluster_id", "namespace", "workload_name", "workload_type"];
+export declare const RATIFIED_MATCH_EVIDENCE_SIGNAL_CATEGORIES: readonly ["service", "workload", "cluster", "pod", "container", "app", "team", "project", "repository", "space"];
+export declare const SUPPORTED_CORRELATION_SIGNAL_CATEGORIES: readonly ["service", "namespace", "workload", "cluster", "pod", "container", "app", "team", "project", "repository", "space", "environment"];
+export declare const INTEGRATION_CATEGORY_VALUES: readonly ["observability", "logging", "tracing", "vcs", "ticketing", "deployment", "alerting"];
+export declare const PROMETHEUS_COMPATIBLE_PROVIDERS: readonly ["mimir", "prometheus", "victoriametrics"];
+export declare const PROMETHEUS_COMPATIBLE_ATTRIBUTE_SCHEMA_BY_PROVIDER: {
+    readonly mimir: "monitoring.mimir";
+    readonly prometheus: "monitoring.prometheus";
+    readonly victoriametrics: "monitoring.victoriametrics";
+};
+export declare const connectionContractVersionV1Schema: z.ZodLiteral<"v1">;
+export declare const connectionContractV1KeySchema: z.ZodEnum<["k8s_workload_part_of_namespace", "k8s_workload_sends_metrics_to_prometheus_compatible", "workload_reports_errors_to_sentry"]>;
+export declare const connectionContractAttributeSchemaKeySchema: z.ZodEnum<["relationship.structural_containment.v1", "monitoring.prometheus", "monitoring.mimir", "monitoring.victoriametrics", "monitoring.sentry"]>;
+export declare const persistedCanonicalIdentityClaimSchema: z.ZodEnum<["service_name", "namespace", "workload_name", "workload_type", "cluster_id", "environment", "provider", "integration_category"]>;
+export declare const kubernetesWorkloadCanonicalIdentityClaimSchema: z.ZodEnum<["cluster_id", "namespace", "workload_name", "workload_type"]>;
+export declare const ratifiedMatchEvidenceSignalCategorySchema: z.ZodEnum<["service", "workload", "cluster", "pod", "container", "app", "team", "project", "repository", "space"]>;
+export declare const supportedCorrelationSignalCategorySchema: z.ZodEnum<["service", "namespace", "workload", "cluster", "pod", "container", "app", "team", "project", "repository", "space", "environment"]>;
+export declare const integrationCategoryValueSchema: z.ZodEnum<["observability", "logging", "tracing", "vcs", "ticketing", "deployment", "alerting"]>;
+export declare const prometheusCompatibleProviderSchema: z.ZodEnum<["mimir", "prometheus", "victoriametrics"]>;
+export declare const connectionContractV1RefSchema: z.ZodObject<{
+    correlation_contract_key: z.ZodEnum<["k8s_workload_part_of_namespace", "k8s_workload_sends_metrics_to_prometheus_compatible", "workload_reports_errors_to_sentry"]>;
+    correlation_contract_version: z.ZodLiteral<"v1">;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    correlation_contract_key: z.ZodEnum<["k8s_workload_part_of_namespace", "k8s_workload_sends_metrics_to_prometheus_compatible", "workload_reports_errors_to_sentry"]>;
+    correlation_contract_version: z.ZodLiteral<"v1">;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    correlation_contract_key: z.ZodEnum<["k8s_workload_part_of_namespace", "k8s_workload_sends_metrics_to_prometheus_compatible", "workload_reports_errors_to_sentry"]>;
+    correlation_contract_version: z.ZodLiteral<"v1">;
+}, z.ZodTypeAny, "passthrough">>;
+export declare const K8S_WORKLOAD_PART_OF_NAMESPACE_CONTRACT_REF: {
+    readonly correlation_contract_key: "k8s_workload_part_of_namespace";
+    readonly correlation_contract_version: "v1";
+};
+export declare const K8S_WORKLOAD_SENDS_METRICS_TO_PROMETHEUS_COMPATIBLE_CONTRACT_REF: {
+    readonly correlation_contract_key: "k8s_workload_sends_metrics_to_prometheus_compatible";
+    readonly correlation_contract_version: "v1";
+};
+export declare const WORKLOAD_REPORTS_ERRORS_TO_SENTRY_CONTRACT_REF: {
+    readonly correlation_contract_key: "workload_reports_errors_to_sentry";
+    readonly correlation_contract_version: "v1";
+};
+export declare const CONNECTION_CONTRACT_V1_REFS: readonly [{
+    readonly correlation_contract_key: "k8s_workload_part_of_namespace";
+    readonly correlation_contract_version: "v1";
+}, {
+    readonly correlation_contract_key: "k8s_workload_sends_metrics_to_prometheus_compatible";
+    readonly correlation_contract_version: "v1";
+}, {
+    readonly correlation_contract_key: "workload_reports_errors_to_sentry";
+    readonly correlation_contract_version: "v1";
+}];
+export type ConnectionContractV1Key = z.infer<typeof connectionContractV1KeySchema>;
+export type ConnectionContractVersionV1 = z.infer<typeof connectionContractVersionV1Schema>;
+export type ConnectionContractV1Ref = z.infer<typeof connectionContractV1RefSchema>;
+export type ConnectionContractAttributeSchemaKey = z.infer<typeof connectionContractAttributeSchemaKeySchema>;
+export type PersistedCanonicalIdentityClaim = z.infer<typeof persistedCanonicalIdentityClaimSchema>;
+export type KubernetesWorkloadCanonicalIdentityClaim = z.infer<typeof kubernetesWorkloadCanonicalIdentityClaimSchema>;
+export type RatifiedMatchEvidenceSignalCategory = z.infer<typeof ratifiedMatchEvidenceSignalCategorySchema>;
+export type SupportedCorrelationSignalCategory = z.infer<typeof supportedCorrelationSignalCategorySchema>;
+export type IntegrationCategoryValue = z.infer<typeof integrationCategoryValueSchema>;
+export type PrometheusCompatibleProvider = z.infer<typeof prometheusCompatibleProviderSchema>;
+export declare function prometheusCompatibleContractForProvider(provider: string): (typeof K8S_WORKLOAD_SENDS_METRICS_TO_PROMETHEUS_COMPATIBLE_CONTRACT_REF & {
+    attribute_schema_key: (typeof PROMETHEUS_COMPATIBLE_ATTRIBUTE_SCHEMA_BY_PROVIDER)[PrometheusCompatibleProvider];
+}) | undefined;
+export declare function sentryContractForProvider(provider: string): (typeof WORKLOAD_REPORTS_ERRORS_TO_SENTRY_CONTRACT_REF & {
+    attribute_schema_key: typeof MONITORING_SENTRY_ATTRIBUTE_SCHEMA_KEY;
+}) | undefined;

package/dist/src/correlation/connectionContractV1.js

@@ -0,0 +1,139 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CONNECTION_CONTRACT_V1_REFS = exports.WORKLOAD_REPORTS_ERRORS_TO_SENTRY_CONTRACT_REF = exports.K8S_WORKLOAD_SENDS_METRICS_TO_PROMETHEUS_COMPATIBLE_CONTRACT_REF = exports.K8S_WORKLOAD_PART_OF_NAMESPACE_CONTRACT_REF = exports.connectionContractV1RefSchema = exports.prometheusCompatibleProviderSchema = exports.integrationCategoryValueSchema = exports.supportedCorrelationSignalCategorySchema = exports.ratifiedMatchEvidenceSignalCategorySchema = exports.kubernetesWorkloadCanonicalIdentityClaimSchema = exports.persistedCanonicalIdentityClaimSchema = exports.connectionContractAttributeSchemaKeySchema = exports.connectionContractV1KeySchema = exports.connectionContractVersionV1Schema = exports.PROMETHEUS_COMPATIBLE_ATTRIBUTE_SCHEMA_BY_PROVIDER = exports.PROMETHEUS_COMPATIBLE_PROVIDERS = exports.INTEGRATION_CATEGORY_VALUES = exports.SUPPORTED_CORRELATION_SIGNAL_CATEGORIES = exports.RATIFIED_MATCH_EVIDENCE_SIGNAL_CATEGORIES = exports.KUBERNETES_WORKLOAD_CANONICAL_IDENTITY_CLAIMS = exports.PERSISTED_CANONICAL_IDENTITY_CLAIMS = exports.CONNECTION_CONTRACT_ATTRIBUTE_SCHEMA_KEYS = exports.MONITORING_SENTRY_ATTRIBUTE_SCHEMA_KEY = exports.MONITORING_VICTORIAMETRICS_ATTRIBUTE_SCHEMA_KEY = exports.MONITORING_MIMIR_ATTRIBUTE_SCHEMA_KEY = exports.MONITORING_PROMETHEUS_ATTRIBUTE_SCHEMA_KEY = exports.RELATIONSHIP_STRUCTURAL_CONTAINMENT_ATTRIBUTE_SCHEMA_KEY = exports.CONNECTION_CONTRACT_V1_KEYS = exports.WORKLOAD_REPORTS_ERRORS_TO_SENTRY_CONTRACT_KEY = exports.K8S_WORKLOAD_SENDS_METRICS_TO_PROMETHEUS_COMPATIBLE_CONTRACT_KEY = exports.K8S_WORKLOAD_PART_OF_NAMESPACE_CONTRACT_KEY = exports.CONNECTION_CONTRACT_VERSION_V1 = void 0;
+exports.prometheusCompatibleContractForProvider = prometheusCompatibleContractForProvider;
+exports.sentryContractForProvider = sentryContractForProvider;
+const zod_1 = require("zod");
+const providers_1 = require("../providers");
+exports.CONNECTION_CONTRACT_VERSION_V1 = 'v1';
+exports.K8S_WORKLOAD_PART_OF_NAMESPACE_CONTRACT_KEY = 'k8s_workload_part_of_namespace';
+exports.K8S_WORKLOAD_SENDS_METRICS_TO_PROMETHEUS_COMPATIBLE_CONTRACT_KEY = 'k8s_workload_sends_metrics_to_prometheus_compatible';
+exports.WORKLOAD_REPORTS_ERRORS_TO_SENTRY_CONTRACT_KEY = 'workload_reports_errors_to_sentry';
+exports.CONNECTION_CONTRACT_V1_KEYS = [
+    exports.K8S_WORKLOAD_PART_OF_NAMESPACE_CONTRACT_KEY,
+    exports.K8S_WORKLOAD_SENDS_METRICS_TO_PROMETHEUS_COMPATIBLE_CONTRACT_KEY,
+    exports.WORKLOAD_REPORTS_ERRORS_TO_SENTRY_CONTRACT_KEY,
+];
+exports.RELATIONSHIP_STRUCTURAL_CONTAINMENT_ATTRIBUTE_SCHEMA_KEY = 'relationship.structural_containment.v1';
+exports.MONITORING_PROMETHEUS_ATTRIBUTE_SCHEMA_KEY = 'monitoring.prometheus';
+exports.MONITORING_MIMIR_ATTRIBUTE_SCHEMA_KEY = 'monitoring.mimir';
+exports.MONITORING_VICTORIAMETRICS_ATTRIBUTE_SCHEMA_KEY = 'monitoring.victoriametrics';
+exports.MONITORING_SENTRY_ATTRIBUTE_SCHEMA_KEY = 'monitoring.sentry';
+exports.CONNECTION_CONTRACT_ATTRIBUTE_SCHEMA_KEYS = [
+    exports.RELATIONSHIP_STRUCTURAL_CONTAINMENT_ATTRIBUTE_SCHEMA_KEY,
+    exports.MONITORING_PROMETHEUS_ATTRIBUTE_SCHEMA_KEY,
+    exports.MONITORING_MIMIR_ATTRIBUTE_SCHEMA_KEY,
+    exports.MONITORING_VICTORIAMETRICS_ATTRIBUTE_SCHEMA_KEY,
+    exports.MONITORING_SENTRY_ATTRIBUTE_SCHEMA_KEY,
+];
+exports.PERSISTED_CANONICAL_IDENTITY_CLAIMS = [
+    'service_name',
+    'namespace',
+    'workload_name',
+    'workload_type',
+    'cluster_id',
+    'environment',
+    'provider',
+    'integration_category',
+];
+exports.KUBERNETES_WORKLOAD_CANONICAL_IDENTITY_CLAIMS = [
+    'cluster_id',
+    'namespace',
+    'workload_name',
+    'workload_type',
+];
+exports.RATIFIED_MATCH_EVIDENCE_SIGNAL_CATEGORIES = [
+    'service',
+    'workload',
+    'cluster',
+    'pod',
+    'container',
+    'app',
+    'team',
+    'project',
+    'repository',
+    'space',
+];
+exports.SUPPORTED_CORRELATION_SIGNAL_CATEGORIES = [
+    'service',
+    'namespace',
+    'workload',
+    'cluster',
+    'pod',
+    'container',
+    'app',
+    'team',
+    'project',
+    'repository',
+    'space',
+    'environment',
+];
+exports.INTEGRATION_CATEGORY_VALUES = [
+    'observability',
+    'logging',
+    'tracing',
+    'vcs',
+    'ticketing',
+    'deployment',
+    'alerting',
+];
+exports.PROMETHEUS_COMPATIBLE_PROVIDERS = [
+    providers_1.TOPOLOGY_PROVIDER.MIMIR,
+    providers_1.TOPOLOGY_PROVIDER.PROMETHEUS,
+    providers_1.TOPOLOGY_PROVIDER.VICTORIAMETRICS,
+];
+exports.PROMETHEUS_COMPATIBLE_ATTRIBUTE_SCHEMA_BY_PROVIDER = {
+    [providers_1.TOPOLOGY_PROVIDER.MIMIR]: exports.MONITORING_MIMIR_ATTRIBUTE_SCHEMA_KEY,
+    [providers_1.TOPOLOGY_PROVIDER.PROMETHEUS]: exports.MONITORING_PROMETHEUS_ATTRIBUTE_SCHEMA_KEY,
+    [providers_1.TOPOLOGY_PROVIDER.VICTORIAMETRICS]: exports.MONITORING_VICTORIAMETRICS_ATTRIBUTE_SCHEMA_KEY,
+};
+exports.connectionContractVersionV1Schema = zod_1.z.literal(exports.CONNECTION_CONTRACT_VERSION_V1);
+exports.connectionContractV1KeySchema = zod_1.z.enum(exports.CONNECTION_CONTRACT_V1_KEYS);
+exports.connectionContractAttributeSchemaKeySchema = zod_1.z.enum(exports.CONNECTION_CONTRACT_ATTRIBUTE_SCHEMA_KEYS);
+exports.persistedCanonicalIdentityClaimSchema = zod_1.z.enum(exports.PERSISTED_CANONICAL_IDENTITY_CLAIMS);
+exports.kubernetesWorkloadCanonicalIdentityClaimSchema = zod_1.z.enum(exports.KUBERNETES_WORKLOAD_CANONICAL_IDENTITY_CLAIMS);
+exports.ratifiedMatchEvidenceSignalCategorySchema = zod_1.z.enum(exports.RATIFIED_MATCH_EVIDENCE_SIGNAL_CATEGORIES);
+exports.supportedCorrelationSignalCategorySchema = zod_1.z.enum(exports.SUPPORTED_CORRELATION_SIGNAL_CATEGORIES);
+exports.integrationCategoryValueSchema = zod_1.z.enum(exports.INTEGRATION_CATEGORY_VALUES);
+exports.prometheusCompatibleProviderSchema = zod_1.z.enum(exports.PROMETHEUS_COMPATIBLE_PROVIDERS);
+exports.connectionContractV1RefSchema = zod_1.z.object({
+    correlation_contract_key: exports.connectionContractV1KeySchema,
+    correlation_contract_version: exports.connectionContractVersionV1Schema,
+}).passthrough();
+exports.K8S_WORKLOAD_PART_OF_NAMESPACE_CONTRACT_REF = {
+    correlation_contract_key: exports.K8S_WORKLOAD_PART_OF_NAMESPACE_CONTRACT_KEY,
+    correlation_contract_version: exports.CONNECTION_CONTRACT_VERSION_V1,
+};
+exports.K8S_WORKLOAD_SENDS_METRICS_TO_PROMETHEUS_COMPATIBLE_CONTRACT_REF = {
+    correlation_contract_key: exports.K8S_WORKLOAD_SENDS_METRICS_TO_PROMETHEUS_COMPATIBLE_CONTRACT_KEY,
+    correlation_contract_version: exports.CONNECTION_CONTRACT_VERSION_V1,
+};
+exports.WORKLOAD_REPORTS_ERRORS_TO_SENTRY_CONTRACT_REF = {
+    correlation_contract_key: exports.WORKLOAD_REPORTS_ERRORS_TO_SENTRY_CONTRACT_KEY,
+    correlation_contract_version: exports.CONNECTION_CONTRACT_VERSION_V1,
+};
+exports.CONNECTION_CONTRACT_V1_REFS = [
+    exports.K8S_WORKLOAD_PART_OF_NAMESPACE_CONTRACT_REF,
+    exports.K8S_WORKLOAD_SENDS_METRICS_TO_PROMETHEUS_COMPATIBLE_CONTRACT_REF,
+    exports.WORKLOAD_REPORTS_ERRORS_TO_SENTRY_CONTRACT_REF,
+];
+function prometheusCompatibleContractForProvider(provider) {
+    const parsedProvider = exports.prometheusCompatibleProviderSchema.safeParse(provider.trim().toLowerCase());
+    if (!parsedProvider.success) {
+        return undefined;
+    }
+    return {
+        attribute_schema_key: exports.PROMETHEUS_COMPATIBLE_ATTRIBUTE_SCHEMA_BY_PROVIDER[parsedProvider.data],
+        ...exports.K8S_WORKLOAD_SENDS_METRICS_TO_PROMETHEUS_COMPATIBLE_CONTRACT_REF,
+    };
+}
+function sentryContractForProvider(provider) {
+    if (provider.trim().toLowerCase() !== providers_1.TOPOLOGY_PROVIDER.SENTRY) {
+        return undefined;
+    }
+    return {
+        attribute_schema_key: exports.MONITORING_SENTRY_ATTRIBUTE_SCHEMA_KEY,
+        ...exports.WORKLOAD_REPORTS_ERRORS_TO_SENTRY_CONTRACT_REF,
+    };
+}
+//# sourceMappingURL=connectionContractV1.js.map

package/dist/src/correlation/connectionContractV1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connectionContractV1.js","sourceRoot":"","sources":["../../../src/correlation/connectionContractV1.ts"],"names":[],"mappings":";;;AAmJA,0FAcC;AAED,8DAaC;AAhLD,6BAAwB;AACxB,4CAAiD;AAEpC,QAAA,8BAA8B,GAAG,IAAI,CAAC;AAEtC,QAAA,2CAA2C,GAAG,gCAAgC,CAAC;AAC/E,QAAA,gEAAgE,GAC3E,qDAAqD,CAAC;AAC3C,QAAA,8CAA8C,GAAG,mCAAmC,CAAC;AAErF,QAAA,2BAA2B,GAAG;IACzC,mDAA2C;IAC3C,wEAAgE;IAChE,sDAA8C;CACtC,CAAC;AAEE,QAAA,wDAAwD,GACnE,wCAAwC,CAAC;AAE9B,QAAA,0CAA0C,GAAG,uBAAuB,CAAC;AACrE,QAAA,qCAAqC,GAAG,kBAAkB,CAAC;AAC3D,QAAA,+CAA+C,GAAG,4BAA4B,CAAC;AAC/E,QAAA,sCAAsC,GAAG,mBAAmB,CAAC;AAE7D,QAAA,yCAAyC,GAAG;IACvD,gEAAwD;IACxD,kDAA0C;IAC1C,6CAAqC;IACrC,uDAA+C;IAC/C,8CAAsC;CAC9B,CAAC;AAEE,QAAA,mCAAmC,GAAG;IACjD,cAAc;IACd,WAAW;IACX,eAAe;IACf,eAAe;IACf,YAAY;IACZ,aAAa;IACb,UAAU;IACV,sBAAsB;CACd,CAAC;AAEE,QAAA,6CAA6C,GAAG;IAC3D,YAAY;IACZ,WAAW;IACX,eAAe;IACf,eAAe;CACP,CAAC;AAEE,QAAA,yCAAyC,GAAG;IACvD,SAAS;IACT,UAAU;IACV,SAAS;IACT,KAAK;IACL,WAAW;IACX,KAAK;IACL,MAAM;IACN,SAAS;IACT,YAAY;IACZ,OAAO;CACC,CAAC;AAEE,QAAA,uCAAuC,GAAG;IACrD,SAAS;IACT,WAAW;IACX,UAAU;IACV,SAAS;IACT,KAAK;IACL,WAAW;IACX,KAAK;IACL,MAAM;IACN,SAAS;IACT,YAAY;IACZ,OAAO;IACP,aAAa;CACL,CAAC;AAEE,QAAA,2BAA2B,GAAG;IACzC,eAAe;IACf,SAAS;IACT,SAAS;IACT,KAAK;IACL,WAAW;IACX,YAAY;IACZ,UAAU;CACF,CAAC;AAEE,QAAA,+BAA+B,GAAG;IAC7C,6BAAiB,CAAC,KAAK;IACvB,6BAAiB,CAAC,UAAU;IAC5B,6BAAiB,CAAC,eAAe;CACzB,CAAC;AAEE,QAAA,kDAAkD,GAAG;IAChE,CAAC,6BAAiB,CAAC,KAAK,CAAC,EAAE,6CAAqC;IAChE,CAAC,6BAAiB,CAAC,UAAU,CAAC,EAAE,kDAA0C;IAC1E,CAAC,6BAAiB,CAAC,eAAe,CAAC,EAAE,uDAA+C;CAC5E,CAAC;AAEE,QAAA,iCAAiC,GAAG,OAAC,CAAC,OAAO,CAAC,sCAA8B,CAAC,CAAC;AAC9E,QAAA,6BAA6B,GAAG,OAAC,CAAC,IAAI,CAAC,mCAA2B,CAAC,CAAC;AACpE,QAAA,0CAA0C,GAAG,OAAC,CAAC,IAAI,CAAC,iDAAyC,CAAC,CAAC;AAC/F,QAAA,qCAAqC,GAAG,OAAC,CAAC,IAAI,CAAC,2CAAmC,CAAC,CAAC;AACpF,QAAA,8CAA8C,GAAG,OAAC,CAAC,IAAI,CAAC,qDAA6C,CAAC,CAAC;AACvG,QAAA,yCAAyC,GAAG,OAAC,CAAC,IAAI,CAAC,iDAAyC,CAAC,CAAC;AAC9F,QAAA,wCAAwC,GAAG,OAAC,CAAC,IAAI,CAAC,+CAAuC,CAAC,CAAC;AAC3F,QAAA,8BAA8B,GAAG,OAAC,CAAC,IAAI,CAAC,mCAA2B,CAAC,CAAC;AACrE,QAAA,kCAAkC,GAAG,OAAC,CAAC,IAAI,CAAC,uCAA+B,CAAC,CAAC;AAE7E,QAAA,6BAA6B,GAAG,OAAC,CAAC,MAAM,CAAC;IACpD,wBAAwB,EAAE,qCAA6B;IACvD,4BAA4B,EAAE,yCAAiC;CAChE,CAAC,CAAC,WAAW,EAAE,CAAC;AAEJ,QAAA,2CAA2C,GAAG;IACzD,wBAAwB,EAAE,mDAA2C;IACrE,4BAA4B,EAAE,sCAA8B;CACpD,CAAC;AAEE,QAAA,gEAAgE,GAAG;IAC9E,wBAAwB,EAAE,wEAAgE;IAC1F,4BAA4B,EAAE,sCAA8B;CACpD,CAAC;AAEE,QAAA,8CAA8C,GAAG;IAC5D,wBAAwB,EAAE,sDAA8C;IACxE,4BAA4B,EAAE,sCAA8B;CACpD,CAAC;AAEE,QAAA,2BAA2B,GAAG;IACzC,mDAA2C;IAC3C,wEAAgE;IAChE,sDAA8C;CACtC,CAAC;AAaX,SAAgB,uCAAuC,CAAC,QAAgB;IAKtE,MAAM,cAAc,GAAG,0CAAkC,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACnG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,oBAAoB,EAAE,0DAAkD,CAAC,cAAc,CAAC,IAAI,CAAC;QAC7F,GAAG,wEAAgE;KACpE,CAAC;AACJ,CAAC;AAED,SAAgB,yBAAyB,CAAC,QAAgB;IAKxD,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,6BAAiB,CAAC,MAAM,EAAE,CAAC;QAC/D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,oBAAoB,EAAE,8CAAsC;QAC5D,GAAG,sDAA8C;KAClD,CAAC;AACJ,CAAC"}

package/dist/src/correlation/contracts/families/argocd/index.d.ts

@@ -0,0 +1,73 @@
+export declare const ARGOCD_CONNECTION_CONTRACTS: readonly [{
+    readonly key: "argocd_app_sources_github_repository";
+    readonly version: "v1";
+    readonly status: "experimental";
+    readonly family: "argocd";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "ci_cd";
+        readonly source_type: "argocd_application";
+        readonly provider: "argocd";
+    };
+    readonly relation: "CONFIGURED_BY";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "vcs";
+        readonly source_type: "github_repository";
+        readonly provider: "github";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "deployment.argocd";
+    readonly evidence_level: "pre_prod_validation";
+    readonly provider_family: "argocd";
+    readonly provider_category: "deployment";
+    readonly guardrails: readonly ["ArgoCD contracts are experimental until application nodes and endpoint-specific relation semantics exist.", "Application manifests and provider-specific sync facts remain in source_attributes."];
+}, {
+    readonly key: "argocd_app_deploys_to_k8s_service";
+    readonly version: "v1";
+    readonly status: "experimental";
+    readonly family: "argocd";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "ci_cd";
+        readonly source_type: "argocd_application";
+        readonly provider: "argocd";
+    };
+    readonly relation: "DEPLOYED_ON";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "kubernetes_service";
+        readonly provider: "k8s";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "deployment.argocd";
+    readonly evidence_level: "pre_prod_validation";
+    readonly provider_family: "argocd";
+    readonly provider_category: "deployment";
+    readonly notes: readonly ["Relation naming should be reviewed before ratification; this is not active production behavior."];
+    readonly guardrails: readonly ["ArgoCD contracts are experimental until application nodes and endpoint-specific relation semantics exist.", "Application manifests and provider-specific sync facts remain in source_attributes."];
+}, {
+    readonly key: "argocd_app_deploys_to_k8s_workload";
+    readonly version: "v1";
+    readonly status: "experimental";
+    readonly family: "argocd";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "ci_cd";
+        readonly source_type: "argocd_application";
+        readonly provider: "argocd";
+    };
+    readonly relation: "DEPLOYED_ON";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_types: readonly ["kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job"];
+        readonly provider: "k8s";
+    };
+    readonly relation_class: "associative";
+    readonly attribute_schema_key: "deployment.argocd";
+    readonly evidence_level: "pre_prod_validation";
+    readonly provider_family: "argocd";
+    readonly provider_category: "deployment";
+    readonly notes: readonly ["Relation naming should be reviewed before ratification; this is not active production behavior."];
+    readonly guardrails: readonly ["ArgoCD contracts are experimental until application nodes and endpoint-specific relation semantics exist.", "Application manifests and provider-specific sync facts remain in source_attributes."];
+}];

package/dist/src/correlation/contracts/families/argocd/index.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ARGOCD_CONNECTION_CONTRACTS = void 0;
+const providers_1 = require("../../../../providers");
+const topology_1 = require("../../../../topology");
+const types_1 = require("../../types");
+const status_1 = require("../../status");
+const argocdGuardrails = [
+    'ArgoCD contracts are experimental until application nodes and endpoint-specific relation semantics exist.',
+    'Application manifests and provider-specific sync facts remain in source_attributes.',
+];
+exports.ARGOCD_CONNECTION_CONTRACTS = [
+    {
+        key: 'argocd_app_sources_github_repository',
+        version: 'v1',
+        status: status_1.CONNECTION_CONTRACT_STATUS.EXPERIMENTAL,
+        family: types_1.CONNECTION_CONTRACT_FAMILY.ARGOCD,
+        source_endpoint: { entity_type: 'resource', resource_type: topology_1.TOPOLOGY_RESOURCE_TYPE.CI_CD, source_type: 'argocd_application', provider: providers_1.TOPOLOGY_PROVIDER.ARGOCD },
+        relation: topology_1.TOPOLOGY_RELATION_TYPE.CONFIGURED_BY,
+        target_endpoint: { entity_type: 'resource', resource_type: topology_1.TOPOLOGY_RESOURCE_TYPE.VCS, source_type: 'github_repository', provider: providers_1.TOPOLOGY_PROVIDER.GITHUB },
+        relation_class: 'associative',
+        attribute_schema_key: types_1.DEPLOYMENT_ARGOCD_ATTRIBUTE_SCHEMA_KEY,
+        evidence_level: types_1.CONNECTION_CONTRACT_EVIDENCE_LEVEL.PRE_PROD_VALIDATION,
+        provider_family: 'argocd',
+        provider_category: types_1.CONNECTION_CONTRACT_PROVIDER_CATEGORY.DEPLOYMENT,
+        guardrails: argocdGuardrails,
+    },
+    {
+        key: 'argocd_app_deploys_to_k8s_service',
+        version: 'v1',
+        status: status_1.CONNECTION_CONTRACT_STATUS.EXPERIMENTAL,
+        family: types_1.CONNECTION_CONTRACT_FAMILY.ARGOCD,
+        source_endpoint: { entity_type: 'resource', resource_type: topology_1.TOPOLOGY_RESOURCE_TYPE.CI_CD, source_type: 'argocd_application', provider: providers_1.TOPOLOGY_PROVIDER.ARGOCD },
+        relation: topology_1.TOPOLOGY_RELATION_TYPE.DEPLOYED_ON,
+        target_endpoint: { entity_type: 'resource', resource_type: topology_1.TOPOLOGY_RESOURCE_TYPE.KUBERNETES_SERVICE, provider: providers_1.TOPOLOGY_PROVIDER.K8S },
+        relation_class: 'associative',
+        attribute_schema_key: types_1.DEPLOYMENT_ARGOCD_ATTRIBUTE_SCHEMA_KEY,
+        evidence_level: types_1.CONNECTION_CONTRACT_EVIDENCE_LEVEL.PRE_PROD_VALIDATION,
+        provider_family: 'argocd',
+        provider_category: types_1.CONNECTION_CONTRACT_PROVIDER_CATEGORY.DEPLOYMENT,
+        notes: ['Relation naming should be reviewed before ratification; this is not active production behavior.'],
+        guardrails: argocdGuardrails,
+    },
+    {
+        key: 'argocd_app_deploys_to_k8s_workload',
+        version: 'v1',
+        status: status_1.CONNECTION_CONTRACT_STATUS.EXPERIMENTAL,
+        family: types_1.CONNECTION_CONTRACT_FAMILY.ARGOCD,
+        source_endpoint: { entity_type: 'resource', resource_type: topology_1.TOPOLOGY_RESOURCE_TYPE.CI_CD, source_type: 'argocd_application', provider: providers_1.TOPOLOGY_PROVIDER.ARGOCD },
+        relation: topology_1.TOPOLOGY_RELATION_TYPE.DEPLOYED_ON,
+        target_endpoint: {
+            entity_type: 'resource',
+            resource_types: [
+                topology_1.TOPOLOGY_RESOURCE_TYPE.KUBERNETES_DEPLOYMENT,
+                topology_1.TOPOLOGY_RESOURCE_TYPE.KUBERNETES_STATEFUL_SET,
+                topology_1.TOPOLOGY_RESOURCE_TYPE.KUBERNETES_DAEMON_SET,
+                topology_1.TOPOLOGY_RESOURCE_TYPE.KUBERNETES_JOB,
+                topology_1.TOPOLOGY_RESOURCE_TYPE.KUBERNETES_CRON_JOB,
+            ],
+            provider: providers_1.TOPOLOGY_PROVIDER.K8S,
+        },
+        relation_class: 'associative',
+        attribute_schema_key: types_1.DEPLOYMENT_ARGOCD_ATTRIBUTE_SCHEMA_KEY,
+        evidence_level: types_1.CONNECTION_CONTRACT_EVIDENCE_LEVEL.PRE_PROD_VALIDATION,
+        provider_family: 'argocd',
+        provider_category: types_1.CONNECTION_CONTRACT_PROVIDER_CATEGORY.DEPLOYMENT,
+        notes: ['Relation naming should be reviewed before ratification; this is not active production behavior.'],
+        guardrails: argocdGuardrails,
+    },
+];
+//# sourceMappingURL=index.js.map

package/dist/src/correlation/contracts/families/argocd/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/correlation/contracts/families/argocd/index.ts"],"names":[],"mappings":";;;AAAA,qDAA0D;AAC1D,mDAAsF;AACtF,uCAMqB;AACrB,yCAA0D;AAE1D,MAAM,gBAAgB,GAAG;IACvB,2GAA2G;IAC3G,qFAAqF;CAC7E,CAAC;AAEE,QAAA,2BAA2B,GAAG;IACzC;QACE,GAAG,EAAE,sCAAsC;QAC3C,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,mCAA0B,CAAC,YAAY;QAC/C,MAAM,EAAE,kCAA0B,CAAC,MAAM;QACzC,eAAe,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,iCAAsB,CAAC,KAAK,EAAE,WAAW,EAAE,oBAAoB,EAAE,QAAQ,EAAE,6BAAiB,CAAC,MAAM,EAAE;QAChK,QAAQ,EAAE,iCAAsB,CAAC,aAAa;QAC9C,eAAe,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,iCAAsB,CAAC,GAAG,EAAE,WAAW,EAAE,mBAAmB,EAAE,QAAQ,EAAE,6BAAiB,CAAC,MAAM,EAAE;QAC7J,cAAc,EAAE,aAAa;QAC7B,oBAAoB,EAAE,8CAAsC;QAC5D,cAAc,EAAE,0CAAkC,CAAC,mBAAmB;QACtE,eAAe,EAAE,QAAQ;QACzB,iBAAiB,EAAE,6CAAqC,CAAC,UAAU;QACnE,UAAU,EAAE,gBAAgB;KAC7B;IACD;QACE,GAAG,EAAE,mCAAmC;QACxC,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,mCAA0B,CAAC,YAAY;QAC/C,MAAM,EAAE,kCAA0B,CAAC,MAAM;QACzC,eAAe,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,iCAAsB,CAAC,KAAK,EAAE,WAAW,EAAE,oBAAoB,EAAE,QAAQ,EAAE,6BAAiB,CAAC,MAAM,EAAE;QAChK,QAAQ,EAAE,iCAAsB,CAAC,WAAW;QAC5C,eAAe,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,iCAAsB,CAAC,kBAAkB,EAAE,QAAQ,EAAE,6BAAiB,CAAC,GAAG,EAAE;QACvI,cAAc,EAAE,aAAa;QAC7B,oBAAoB,EAAE,8CAAsC;QAC5D,cAAc,EAAE,0CAAkC,CAAC,mBAAmB;QACtE,eAAe,EAAE,QAAQ;QACzB,iBAAiB,EAAE,6CAAqC,CAAC,UAAU;QACnE,KAAK,EAAE,CAAC,iGAAiG,CAAC;QAC1G,UAAU,EAAE,gBAAgB;KAC7B;IACD;QACE,GAAG,EAAE,oCAAoC;QACzC,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,mCAA0B,CAAC,YAAY;QAC/C,MAAM,EAAE,kCAA0B,CAAC,MAAM;QACzC,eAAe,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,iCAAsB,CAAC,KAAK,EAAE,WAAW,EAAE,oBAAoB,EAAE,QAAQ,EAAE,6BAAiB,CAAC,MAAM,EAAE;QAChK,QAAQ,EAAE,iCAAsB,CAAC,WAAW;QAC5C,eAAe,EAAE;YACf,WAAW,EAAE,UAAU;YACvB,cAAc,EAAE;gBACd,iCAAsB,CAAC,qBAAqB;gBAC5C,iCAAsB,CAAC,uBAAuB;gBAC9C,iCAAsB,CAAC,qBAAqB;gBAC5C,iCAAsB,CAAC,cAAc;gBACrC,iCAAsB,CAAC,mBAAmB;aAC3C;YACD,QAAQ,EAAE,6BAAiB,CAAC,GAAG;SAChC;QACD,cAAc,EAAE,aAAa;QAC7B,oBAAoB,EAAE,8CAAsC;QAC5D,cAAc,EAAE,0CAAkC,CAAC,mBAAmB;QACtE,eAAe,EAAE,QAAQ;QACzB,iBAAiB,EAAE,6CAAqC,CAAC,UAAU;QACnE,KAAK,EAAE,CAAC,iGAAiG,CAAC;QAC1G,UAAU,EAAE,gBAAgB;KAC7B;CACuD,CAAC"}

package/dist/src/correlation/contracts/families/aws/index.d.ts

@@ -0,0 +1,181 @@
+export declare const AWS_CONNECTION_CONTRACTS: readonly [{
+    readonly key: "aws_vpc_part_of_account";
+    readonly version: "v1";
+    readonly status: "candidate";
+    readonly family: "aws";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "vpc";
+        readonly provider: "aws";
+    };
+    readonly relation: "PART_OF";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "aws_account";
+        readonly provider: "aws";
+    };
+    readonly relation_class: "structural";
+    readonly attribute_schema_key: "relationship.structural_containment.v1";
+    readonly evidence_level: "code_evidence";
+    readonly provider_family: "aws";
+    readonly provider_category: "cloud";
+    readonly notes: readonly ["Uses the generic persisted database resource_type; current AWS adapter evidence maps this to RDS-style resources."];
+    readonly guardrails: readonly ["Candidate registry metadata only; Gateway owns source-sync stamping, validation, and reconciliation.", "Provider-specific AWS identifiers remain in source_attributes and must not become global normalized keys."];
+}, {
+    readonly key: "aws_subnet_part_of_vpc";
+    readonly version: "v1";
+    readonly status: "candidate";
+    readonly family: "aws";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "subnet";
+        readonly provider: "aws";
+    };
+    readonly relation: "PART_OF";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "vpc";
+        readonly provider: "aws";
+    };
+    readonly relation_class: "structural";
+    readonly attribute_schema_key: "relationship.structural_containment.v1";
+    readonly evidence_level: "code_evidence";
+    readonly provider_family: "aws";
+    readonly provider_category: "cloud";
+    readonly notes: readonly ["Uses the generic persisted object_storage resource_type; current AWS adapter evidence maps this to S3-style resources."];
+    readonly guardrails: readonly ["Candidate registry metadata only; Gateway owns source-sync stamping, validation, and reconciliation.", "Provider-specific AWS identifiers remain in source_attributes and must not become global normalized keys."];
+}, {
+    readonly key: "aws_compute_instance_part_of_subnet";
+    readonly version: "v1";
+    readonly status: "candidate";
+    readonly family: "aws";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "compute_instance";
+        readonly provider: "aws";
+    };
+    readonly relation: "PART_OF";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "subnet";
+        readonly provider: "aws";
+    };
+    readonly relation_class: "structural";
+    readonly attribute_schema_key: "relationship.structural_containment.v1";
+    readonly evidence_level: "code_evidence";
+    readonly provider_family: "aws";
+    readonly provider_category: "cloud";
+    readonly notes: readonly ["Uses the generic persisted kubernetes_cluster resource_type; current AWS adapter evidence maps this to EKS-style resources."];
+    readonly guardrails: readonly ["Candidate registry metadata only; Gateway owns source-sync stamping, validation, and reconciliation.", "Provider-specific AWS identifiers remain in source_attributes and must not become global normalized keys."];
+}, {
+    readonly key: "aws_compute_instance_part_of_vpc";
+    readonly version: "v1";
+    readonly status: "candidate";
+    readonly family: "aws";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "compute_instance";
+        readonly provider: "aws";
+    };
+    readonly relation: "PART_OF";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "vpc";
+        readonly provider: "aws";
+    };
+    readonly relation_class: "structural";
+    readonly attribute_schema_key: "relationship.structural_containment.v1";
+    readonly evidence_level: "code_evidence";
+    readonly provider_family: "aws";
+    readonly provider_category: "cloud";
+    readonly notes: readonly ["Uses the generic persisted kubernetes_cluster resource_type; current AWS adapter evidence maps this to EKS-style resources."];
+    readonly guardrails: readonly ["Candidate registry metadata only; Gateway owns source-sync stamping, validation, and reconciliation.", "Provider-specific AWS identifiers remain in source_attributes and must not become global normalized keys."];
+}, {
+    readonly key: "aws_database_part_of_vpc";
+    readonly version: "v1";
+    readonly status: "candidate";
+    readonly family: "aws";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "database";
+        readonly provider: "aws";
+    };
+    readonly relation: "PART_OF";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "vpc";
+        readonly provider: "aws";
+    };
+    readonly relation_class: "structural";
+    readonly attribute_schema_key: "relationship.structural_containment.v1";
+    readonly evidence_level: "code_evidence";
+    readonly provider_family: "aws";
+    readonly provider_category: "cloud";
+    readonly guardrails: readonly ["Candidate registry metadata only; Gateway owns source-sync stamping, validation, and reconciliation.", "Provider-specific AWS identifiers remain in source_attributes and must not become global normalized keys."];
+}, {
+    readonly key: "aws_object_storage_part_of_account";
+    readonly version: "v1";
+    readonly status: "candidate";
+    readonly family: "aws";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "object_storage";
+        readonly provider: "aws";
+    };
+    readonly relation: "PART_OF";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "aws_account";
+        readonly provider: "aws";
+    };
+    readonly relation_class: "structural";
+    readonly attribute_schema_key: "relationship.structural_containment.v1";
+    readonly evidence_level: "code_evidence";
+    readonly provider_family: "aws";
+    readonly provider_category: "cloud";
+    readonly guardrails: readonly ["Candidate registry metadata only; Gateway owns source-sync stamping, validation, and reconciliation.", "Provider-specific AWS identifiers remain in source_attributes and must not become global normalized keys."];
+}, {
+    readonly key: "aws_kubernetes_cluster_part_of_vpc";
+    readonly version: "v1";
+    readonly status: "candidate";
+    readonly family: "aws";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "kubernetes_cluster";
+        readonly provider: "aws";
+    };
+    readonly relation: "PART_OF";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "vpc";
+        readonly provider: "aws";
+    };
+    readonly relation_class: "structural";
+    readonly attribute_schema_key: "relationship.structural_containment.v1";
+    readonly evidence_level: "code_evidence";
+    readonly provider_family: "aws";
+    readonly provider_category: "cloud";
+    readonly guardrails: readonly ["Candidate registry metadata only; Gateway owns source-sync stamping, validation, and reconciliation.", "Provider-specific AWS identifiers remain in source_attributes and must not become global normalized keys."];
+}, {
+    readonly key: "aws_kubernetes_cluster_part_of_account";
+    readonly version: "v1";
+    readonly status: "candidate";
+    readonly family: "aws";
+    readonly source_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "kubernetes_cluster";
+        readonly provider: "aws";
+    };
+    readonly relation: "PART_OF";
+    readonly target_endpoint: {
+        readonly entity_type: "resource";
+        readonly resource_type: "aws_account";
+        readonly provider: "aws";
+    };
+    readonly relation_class: "structural";
+    readonly attribute_schema_key: "relationship.structural_containment.v1";
+    readonly evidence_level: "code_evidence";
+    readonly provider_family: "aws";
+    readonly provider_category: "cloud";
+    readonly guardrails: readonly ["Candidate registry metadata only; Gateway owns source-sync stamping, validation, and reconciliation.", "Provider-specific AWS identifiers remain in source_attributes and must not become global normalized keys."];
+}];