@scoutflo/topology-contracts 0.7.3 → 0.7.5

package/dist/src/correlation/contracts/registry.js

@@ -0,0 +1,83 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CONNECTION_CONTRACT_FAMILY_ORDER = exports.ACTIVE_CONNECTION_CONTRACT_REFS = exports.CONNECTION_CONTRACT_REGISTRY_BY_REF = exports.CONNECTION_CONTRACT_REGISTRY = void 0;
+exports.listConnectionContracts = listConnectionContracts;
+exports.getConnectionContract = getConnectionContract;
+exports.listConnectionContractsByStatus = listConnectionContractsByStatus;
+exports.listActiveConnectionContracts = listActiveConnectionContracts;
+exports.listConnectionContractsByFamily = listConnectionContractsByFamily;
+exports.listNonActiveConnectionContracts = listNonActiveConnectionContracts;
+exports.k8sWorkloadCandidateForProvider = k8sWorkloadCandidateForProvider;
+const status_1 = require("./status");
+const types_1 = require("./types");
+const families_1 = require("./families");
+const providers_1 = require("../../providers");
+const topology_1 = require("../../topology");
+exports.CONNECTION_CONTRACT_REGISTRY = families_1.CONNECTION_CONTRACT_FAMILY_REGISTRIES
+    .flat();
+function buildConnectionContractIndex(contracts) {
+    const byCompositeKey = new Map();
+    for (const contract of contracts) {
+        const compositeKey = (0, types_1.connectionContractCompositeKey)(contract.key, contract.version);
+        if (byCompositeKey.has(compositeKey)) {
+            throw new Error(`Duplicate connection contract registration: ${compositeKey}`);
+        }
+        byCompositeKey.set(compositeKey, contract);
+    }
+    return byCompositeKey;
+}
+exports.CONNECTION_CONTRACT_REGISTRY_BY_REF = buildConnectionContractIndex(exports.CONNECTION_CONTRACT_REGISTRY);
+exports.ACTIVE_CONNECTION_CONTRACT_REFS = exports.CONNECTION_CONTRACT_REGISTRY
+    .filter((contract) => contract.status === status_1.CONNECTION_CONTRACT_STATUS.ACTIVE)
+    .map(types_1.connectionContractRef);
+function listConnectionContracts() {
+    return exports.CONNECTION_CONTRACT_REGISTRY;
+}
+function getConnectionContract(key, version) {
+    return exports.CONNECTION_CONTRACT_REGISTRY_BY_REF.get((0, types_1.connectionContractCompositeKey)(key, version));
+}
+function listConnectionContractsByStatus(status) {
+    return exports.CONNECTION_CONTRACT_REGISTRY.filter((contract) => contract.status === status);
+}
+function listActiveConnectionContracts() {
+    return listConnectionContractsByStatus(status_1.CONNECTION_CONTRACT_STATUS.ACTIVE);
+}
+function listConnectionContractsByFamily(family) {
+    return exports.CONNECTION_CONTRACT_REGISTRY.filter((contract) => contract.family === family);
+}
+function listNonActiveConnectionContracts() {
+    return exports.CONNECTION_CONTRACT_REGISTRY.filter((contract) => contract.status !== status_1.CONNECTION_CONTRACT_STATUS.ACTIVE);
+}
+const KUBERNETES_WORKLOAD_RESOURCE_TYPES = new Set([
+    topology_1.TOPOLOGY_RESOURCE_TYPE.KUBERNETES_DEPLOYMENT,
+    topology_1.TOPOLOGY_RESOURCE_TYPE.KUBERNETES_STATEFUL_SET,
+    topology_1.TOPOLOGY_RESOURCE_TYPE.KUBERNETES_DAEMON_SET,
+    topology_1.TOPOLOGY_RESOURCE_TYPE.KUBERNETES_JOB,
+    topology_1.TOPOLOGY_RESOURCE_TYPE.KUBERNETES_CRON_JOB,
+]);
+function endpointIncludesKubernetesWorkload(contract) {
+    const endpoint = contract.source_endpoint;
+    const resourceTypes = endpoint.resource_types || (endpoint.resource_type ? [endpoint.resource_type] : []);
+    return (endpoint.entity_type === 'resource' &&
+        endpoint.provider === providers_1.TOPOLOGY_PROVIDER.K8S &&
+        resourceTypes.some((resourceType) => KUBERNETES_WORKLOAD_RESOURCE_TYPES.has(resourceType)));
+}
+function k8sWorkloadCandidateForProvider(provider) {
+    const parsedProvider = providers_1.topologyProviderSchema.safeParse(provider.trim().toLowerCase());
+    if (!parsedProvider.success) {
+        return undefined;
+    }
+    return exports.CONNECTION_CONTRACT_REGISTRY.find((contract) => contract.status === status_1.CONNECTION_CONTRACT_STATUS.CANDIDATE &&
+        contract.family === types_1.CONNECTION_CONTRACT_FAMILY.INTEGRATIONS &&
+        endpointIncludesKubernetesWorkload(contract) &&
+        contract.target_endpoint.entity_type === 'resource' &&
+        contract.target_endpoint.provider === parsedProvider.data);
+}
+exports.CONNECTION_CONTRACT_FAMILY_ORDER = [
+    types_1.CONNECTION_CONTRACT_FAMILY.AWS,
+    types_1.CONNECTION_CONTRACT_FAMILY.KUBERNETES,
+    types_1.CONNECTION_CONTRACT_FAMILY.GITHUB,
+    types_1.CONNECTION_CONTRACT_FAMILY.ARGOCD,
+    types_1.CONNECTION_CONTRACT_FAMILY.INTEGRATIONS,
+];
+//# sourceMappingURL=registry.js.map

package/dist/src/correlation/contracts/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../../src/correlation/contracts/registry.ts"],"names":[],"mappings":";;;AAuCA,0DAEC;AAED,sDAKC;AAED,0EAIC;AAED,sEAEC;AAED,0EAIC;AAED,4EAEC;AAqBD,0EAcC;AAvGD,qCAAqF;AACrF,mCAMiB;AACjB,yCAAmE;AACnE,+CAA4E;AAC5E,6CAAmF;AAEtE,QAAA,4BAA4B,GAAG,gDAAqC;KAC9E,IAAI,EAAkD,CAAC;AAE1D,SAAS,4BAA4B,CACnC,SAAgD;IAEhD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAsC,CAAC;IAErE,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,IAAA,sCAA8B,EAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpF,IAAI,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,+CAA+C,YAAY,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,cAAc,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC;AAEY,QAAA,mCAAmC,GAAG,4BAA4B,CAC7E,oCAA4B,CAC7B,CAAC;AAEW,QAAA,+BAA+B,GAAG,oCAA4B;KACxE,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,mCAA0B,CAAC,MAAM,CAAC;KAC3E,GAAG,CAAC,6BAAqB,CAAC,CAAC;AAE9B,SAAgB,uBAAuB;IACrC,OAAO,oCAA4B,CAAC;AACtC,CAAC;AAED,SAAgB,qBAAqB,CACnC,GAAW,EACX,OAAe;IAEf,OAAO,2CAAmC,CAAC,GAAG,CAAC,IAAA,sCAA8B,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,SAAgB,+BAA+B,CAC7C,MAAgC;IAEhC,OAAO,oCAA4B,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;AACvF,CAAC;AAED,SAAgB,6BAA6B;IAC3C,OAAO,+BAA+B,CAAC,mCAA0B,CAAC,MAAM,CAAC,CAAC;AAC5E,CAAC;AAED,SAAgB,+BAA+B,CAC7C,MAAgC;IAEhC,OAAO,oCAA4B,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;AACvF,CAAC;AAED,SAAgB,gCAAgC;IAC9C,OAAO,oCAA4B,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,mCAA0B,CAAC,MAAM,CAAC,CAAC;AAClH,CAAC;AAED,MAAM,kCAAkC,GAAG,IAAI,GAAG,CAAuB;IACvE,iCAAsB,CAAC,qBAAqB;IAC5C,iCAAsB,CAAC,uBAAuB;IAC9C,iCAAsB,CAAC,qBAAqB;IAC5C,iCAAsB,CAAC,cAAc;IACrC,iCAAsB,CAAC,mBAAmB;CAC3C,CAAC,CAAC;AAEH,SAAS,kCAAkC,CAAC,QAAoC;IAC9E,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,CAAC;IAC1C,MAAM,aAAa,GAAG,QAAQ,CAAC,cAAc,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAE1G,OAAO,CACL,QAAQ,CAAC,WAAW,KAAK,UAAU;QACnC,QAAQ,CAAC,QAAQ,KAAK,6BAAiB,CAAC,GAAG;QAC3C,aAAa,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,kCAAkC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAC3F,CAAC;AACJ,CAAC;AAED,SAAgB,+BAA+B,CAAC,QAAgB;IAC9D,MAAM,cAAc,GAAG,kCAAsB,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACvF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,oCAA4B,CAAC,IAAI,CACtC,CAAC,QAAQ,EAAE,EAAE,CACX,QAAQ,CAAC,MAAM,KAAK,mCAA0B,CAAC,SAAS;QACxD,QAAQ,CAAC,MAAM,KAAK,kCAA0B,CAAC,YAAY;QAC3D,kCAAkC,CAAC,QAAQ,CAAC;QAC5C,QAAQ,CAAC,eAAe,CAAC,WAAW,KAAK,UAAU;QACnD,QAAQ,CAAC,eAAe,CAAC,QAAQ,KAAK,cAAc,CAAC,IAAI,CAC5D,CAAC;AACJ,CAAC;AAEY,QAAA,gCAAgC,GAAG;IAC9C,kCAA0B,CAAC,GAAG;IAC9B,kCAA0B,CAAC,UAAU;IACrC,kCAA0B,CAAC,MAAM;IACjC,kCAA0B,CAAC,MAAM;IACjC,kCAA0B,CAAC,YAAY;CAC/B,CAAC"}

package/dist/src/correlation/contracts/status.d.ts

@@ -0,0 +1,10 @@
+import { z } from 'zod';
+export declare const CONNECTION_CONTRACT_STATUS: {
+    readonly ACTIVE: "active";
+    readonly CANDIDATE: "candidate";
+    readonly EXPERIMENTAL: "experimental";
+    readonly RESERVED: "reserved";
+};
+export declare const CONNECTION_CONTRACT_STATUS_VALUES: readonly ["active", "candidate", "experimental", "reserved"];
+export declare const connectionContractStatusSchema: z.ZodEnum<["active", "candidate", "experimental", "reserved"]>;
+export type ConnectionContractStatus = z.infer<typeof connectionContractStatusSchema>;

package/dist/src/correlation/contracts/status.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.connectionContractStatusSchema = exports.CONNECTION_CONTRACT_STATUS_VALUES = exports.CONNECTION_CONTRACT_STATUS = void 0;
+const zod_1 = require("zod");
+exports.CONNECTION_CONTRACT_STATUS = {
+    ACTIVE: 'active',
+    CANDIDATE: 'candidate',
+    EXPERIMENTAL: 'experimental',
+    RESERVED: 'reserved',
+};
+exports.CONNECTION_CONTRACT_STATUS_VALUES = [
+    exports.CONNECTION_CONTRACT_STATUS.ACTIVE,
+    exports.CONNECTION_CONTRACT_STATUS.CANDIDATE,
+    exports.CONNECTION_CONTRACT_STATUS.EXPERIMENTAL,
+    exports.CONNECTION_CONTRACT_STATUS.RESERVED,
+];
+exports.connectionContractStatusSchema = zod_1.z.enum(exports.CONNECTION_CONTRACT_STATUS_VALUES);
+//# sourceMappingURL=status.js.map

package/dist/src/correlation/contracts/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../../src/correlation/contracts/status.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAEX,QAAA,0BAA0B,GAAG;IACxC,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,WAAW;IACtB,YAAY,EAAE,cAAc;IAC5B,QAAQ,EAAE,UAAU;CACZ,CAAC;AAEE,QAAA,iCAAiC,GAAG;IAC/C,kCAA0B,CAAC,MAAM;IACjC,kCAA0B,CAAC,SAAS;IACpC,kCAA0B,CAAC,YAAY;IACvC,kCAA0B,CAAC,QAAQ;CAC3B,CAAC;AAEE,QAAA,8BAA8B,GAAG,OAAC,CAAC,IAAI,CAAC,yCAAiC,CAAC,CAAC"}

package/dist/src/correlation/contracts/types.d.ts

@@ -0,0 +1,302 @@
+import { z } from 'zod';
+import type { TopologyProvider } from '../../providers';
+import type { TopologyRelationType, TopologyResourceType } from '../../topology';
+import { type ConnectionContractStatus } from './status';
+export declare const CONNECTION_CONTRACT_FAMILY: {
+    readonly AWS: "aws";
+    readonly KUBERNETES: "kubernetes";
+    readonly GITHUB: "github";
+    readonly ARGOCD: "argocd";
+    readonly INTEGRATIONS: "integrations";
+};
+export declare const CONNECTION_CONTRACT_FAMILY_VALUES: readonly ["aws", "kubernetes", "github", "argocd", "integrations"];
+export declare const CONNECTION_CONTRACT_EVIDENCE_LEVEL: {
+    readonly IMPLEMENTED: "implemented";
+    readonly CODE_EVIDENCE: "code_evidence";
+    readonly PLANNED: "planned";
+    readonly PRE_PROD_VALIDATION: "pre_prod_validation";
+    readonly RESERVED_SHAPE: "reserved_shape";
+};
+export declare const CONNECTION_CONTRACT_EVIDENCE_LEVEL_VALUES: readonly ["implemented", "code_evidence", "planned", "pre_prod_validation", "reserved_shape"];
+export declare const CONNECTION_CONTRACT_PROVIDER_CATEGORY: {
+    readonly CLOUD: "cloud";
+    readonly OBSERVABILITY: "observability";
+    readonly LOGGING: "logging";
+    readonly TRACING: "tracing";
+    readonly VCS: "vcs";
+    readonly TICKETING: "ticketing";
+    readonly DEPLOYMENT: "deployment";
+    readonly ALERTING: "alerting";
+};
+export declare const CONNECTION_CONTRACT_PROVIDER_CATEGORY_VALUES: readonly ["cloud", "observability", "logging", "tracing", "vcs", "ticketing", "deployment", "alerting"];
+export declare const STRUCTURAL_CONTAINMENT_ATTRIBUTE_SCHEMA_KEY = "relationship.structural_containment.v1";
+export declare const VCS_GITHUB_ATTRIBUTE_SCHEMA_KEY = "vcs.github";
+export declare const DEPLOYMENT_ARGOCD_ATTRIBUTE_SCHEMA_KEY = "deployment.argocd";
+export declare const CONTRACT_SCHEMA_MONITORING_PROMETHEUS = "monitoring.prometheus";
+export declare const CONTRACT_SCHEMA_MONITORING_MIMIR = "monitoring.mimir";
+export declare const CONTRACT_SCHEMA_MONITORING_VICTORIAMETRICS = "monitoring.victoriametrics";
+export declare const CONTRACT_SCHEMA_MONITORING_SENTRY = "monitoring.sentry";
+export declare const CONTRACT_SCHEMA_MONITORING_DATADOG = "monitoring.datadog";
+export declare const CONTRACT_SCHEMA_MONITORING_GRAFANA = "monitoring.grafana";
+export declare const CONTRACT_SCHEMA_MONITORING_GROUNDCOVER = "monitoring.groundcover";
+export declare const CONTRACT_SCHEMA_LOGGING_ELK = "logging.elk";
+export declare const CONTRACT_SCHEMA_LOGGING_LOKI = "logging.loki";
+export declare const CONTRACT_SCHEMA_LOGGING_VICTORIALOGS = "logging.victorialogs";
+export declare const CONTRACT_SCHEMA_TRACING_TEMPO = "tracing.tempo";
+export declare const CONTRACT_SCHEMA_TRACING_VICTORIATRACES = "tracing.victoriatraces";
+export declare const CONTRACT_SCHEMA_TICKETING_JIRA = "ticketing.jira";
+export declare const CONTRACT_SCHEMA_TICKETING_JSM = "ticketing.jsm";
+export declare const CONTRACT_SCHEMA_ALERTING_PROVIDER_RESERVED = "alerting.provider.reserved";
+export declare const connectionContractFamilySchema: z.ZodEnum<["aws", "kubernetes", "github", "argocd", "integrations"]>;
+export declare const connectionContractEvidenceLevelSchema: z.ZodEnum<["implemented", "code_evidence", "planned", "pre_prod_validation", "reserved_shape"]>;
+export declare const connectionContractProviderCategorySchema: z.ZodEnum<["cloud", "observability", "logging", "tracing", "vcs", "ticketing", "deployment", "alerting"]>;
+export declare const connectionContractEndpointSchema: z.ZodObject<{
+    entity_type: z.ZodEnum<["service", "resource"]>;
+    resource_type: z.ZodOptional<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>>;
+    resource_types: z.ZodOptional<z.ZodArray<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>, "many">>;
+    source_type: z.ZodOptional<z.ZodString>;
+    family: z.ZodOptional<z.ZodString>;
+    provider: z.ZodOptional<z.ZodEnum<["aws", "k8s", "gcp", "azure", "sentry", "prometheus", "grafana", "loki", "tempo", "mimir", "victoriametrics", "victorialogs", "victoriatraces", "github", "gitlab", "bitbucket", "argocd", "datadog", "groundcover", "elk", "pagerduty", "zenduty", "correlation", "jira", "confluence", "jsm", "custom"]>>;
+    label: z.ZodOptional<z.ZodString>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    entity_type: z.ZodEnum<["service", "resource"]>;
+    resource_type: z.ZodOptional<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>>;
+    resource_types: z.ZodOptional<z.ZodArray<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>, "many">>;
+    source_type: z.ZodOptional<z.ZodString>;
+    family: z.ZodOptional<z.ZodString>;
+    provider: z.ZodOptional<z.ZodEnum<["aws", "k8s", "gcp", "azure", "sentry", "prometheus", "grafana", "loki", "tempo", "mimir", "victoriametrics", "victorialogs", "victoriatraces", "github", "gitlab", "bitbucket", "argocd", "datadog", "groundcover", "elk", "pagerduty", "zenduty", "correlation", "jira", "confluence", "jsm", "custom"]>>;
+    label: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    entity_type: z.ZodEnum<["service", "resource"]>;
+    resource_type: z.ZodOptional<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>>;
+    resource_types: z.ZodOptional<z.ZodArray<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>, "many">>;
+    source_type: z.ZodOptional<z.ZodString>;
+    family: z.ZodOptional<z.ZodString>;
+    provider: z.ZodOptional<z.ZodEnum<["aws", "k8s", "gcp", "azure", "sentry", "prometheus", "grafana", "loki", "tempo", "mimir", "victoriametrics", "victorialogs", "victoriatraces", "github", "gitlab", "bitbucket", "argocd", "datadog", "groundcover", "elk", "pagerduty", "zenduty", "correlation", "jira", "confluence", "jsm", "custom"]>>;
+    label: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">>;
+export declare const connectionContractMetadataSchema: z.ZodObject<{
+    key: z.ZodString;
+    version: z.ZodString;
+    status: z.ZodEnum<["active", "candidate", "experimental", "reserved"]>;
+    family: z.ZodEnum<["aws", "kubernetes", "github", "argocd", "integrations"]>;
+    source_endpoint: z.ZodObject<{
+        entity_type: z.ZodEnum<["service", "resource"]>;
+        resource_type: z.ZodOptional<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>>;
+        resource_types: z.ZodOptional<z.ZodArray<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>, "many">>;
+        source_type: z.ZodOptional<z.ZodString>;
+        family: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<["aws", "k8s", "gcp", "azure", "sentry", "prometheus", "grafana", "loki", "tempo", "mimir", "victoriametrics", "victorialogs", "victoriatraces", "github", "gitlab", "bitbucket", "argocd", "datadog", "groundcover", "elk", "pagerduty", "zenduty", "correlation", "jira", "confluence", "jsm", "custom"]>>;
+        label: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        entity_type: z.ZodEnum<["service", "resource"]>;
+        resource_type: z.ZodOptional<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>>;
+        resource_types: z.ZodOptional<z.ZodArray<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>, "many">>;
+        source_type: z.ZodOptional<z.ZodString>;
+        family: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<["aws", "k8s", "gcp", "azure", "sentry", "prometheus", "grafana", "loki", "tempo", "mimir", "victoriametrics", "victorialogs", "victoriatraces", "github", "gitlab", "bitbucket", "argocd", "datadog", "groundcover", "elk", "pagerduty", "zenduty", "correlation", "jira", "confluence", "jsm", "custom"]>>;
+        label: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        entity_type: z.ZodEnum<["service", "resource"]>;
+        resource_type: z.ZodOptional<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>>;
+        resource_types: z.ZodOptional<z.ZodArray<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>, "many">>;
+        source_type: z.ZodOptional<z.ZodString>;
+        family: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<["aws", "k8s", "gcp", "azure", "sentry", "prometheus", "grafana", "loki", "tempo", "mimir", "victoriametrics", "victorialogs", "victoriatraces", "github", "gitlab", "bitbucket", "argocd", "datadog", "groundcover", "elk", "pagerduty", "zenduty", "correlation", "jira", "confluence", "jsm", "custom"]>>;
+        label: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>;
+    relation: z.ZodEnum<["DEPLOYED_ON", "DEPLOYED_AS", "RUNS_ON", "PART_OF", "CALLS", "PUBLISHES_TO", "SUBSCRIBES_TO", "CONSUMES", "PROVIDES", "PROXIES", "ROUTES_TO", "DEPENDS_ON", "AGGREGATES", "COMPOSES", "USES", "STORES_DATA_IN", "CACHES_IN", "CONFIGURED_BY", "EXPOSED_VIA", "PROTECTED_BY", "AUTHENTICATES_WITH", "OWNS", "OBSERVES", "MONITORED_BY", "SENDS_METRICS_TO", "SENDS_LOGS_TO", "SENDS_TRACES_TO", "CONNECTS_TO", "REPLICATES", "BACKS_UP", "MIRRORS", "TRIGGERS", "MIGRATES_TO", "REPLACES", "REPLICATED_FROM"]>;
+    target_endpoint: z.ZodObject<{
+        entity_type: z.ZodEnum<["service", "resource"]>;
+        resource_type: z.ZodOptional<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>>;
+        resource_types: z.ZodOptional<z.ZodArray<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>, "many">>;
+        source_type: z.ZodOptional<z.ZodString>;
+        family: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<["aws", "k8s", "gcp", "azure", "sentry", "prometheus", "grafana", "loki", "tempo", "mimir", "victoriametrics", "victorialogs", "victoriatraces", "github", "gitlab", "bitbucket", "argocd", "datadog", "groundcover", "elk", "pagerduty", "zenduty", "correlation", "jira", "confluence", "jsm", "custom"]>>;
+        label: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        entity_type: z.ZodEnum<["service", "resource"]>;
+        resource_type: z.ZodOptional<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>>;
+        resource_types: z.ZodOptional<z.ZodArray<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>, "many">>;
+        source_type: z.ZodOptional<z.ZodString>;
+        family: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<["aws", "k8s", "gcp", "azure", "sentry", "prometheus", "grafana", "loki", "tempo", "mimir", "victoriametrics", "victorialogs", "victoriatraces", "github", "gitlab", "bitbucket", "argocd", "datadog", "groundcover", "elk", "pagerduty", "zenduty", "correlation", "jira", "confluence", "jsm", "custom"]>>;
+        label: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        entity_type: z.ZodEnum<["service", "resource"]>;
+        resource_type: z.ZodOptional<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>>;
+        resource_types: z.ZodOptional<z.ZodArray<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>, "many">>;
+        source_type: z.ZodOptional<z.ZodString>;
+        family: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<["aws", "k8s", "gcp", "azure", "sentry", "prometheus", "grafana", "loki", "tempo", "mimir", "victoriametrics", "victorialogs", "victoriatraces", "github", "gitlab", "bitbucket", "argocd", "datadog", "groundcover", "elk", "pagerduty", "zenduty", "correlation", "jira", "confluence", "jsm", "custom"]>>;
+        label: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>;
+    relation_class: z.ZodEnum<["structural", "associative"]>;
+    attribute_schema_key: z.ZodString;
+    evidence_level: z.ZodEnum<["implemented", "code_evidence", "planned", "pre_prod_validation", "reserved_shape"]>;
+    provider_family: z.ZodOptional<z.ZodString>;
+    provider_category: z.ZodOptional<z.ZodEnum<["cloud", "observability", "logging", "tracing", "vcs", "ticketing", "deployment", "alerting"]>>;
+    notes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    guardrails: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    key: z.ZodString;
+    version: z.ZodString;
+    status: z.ZodEnum<["active", "candidate", "experimental", "reserved"]>;
+    family: z.ZodEnum<["aws", "kubernetes", "github", "argocd", "integrations"]>;
+    source_endpoint: z.ZodObject<{
+        entity_type: z.ZodEnum<["service", "resource"]>;
+        resource_type: z.ZodOptional<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>>;
+        resource_types: z.ZodOptional<z.ZodArray<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>, "many">>;
+        source_type: z.ZodOptional<z.ZodString>;
+        family: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<["aws", "k8s", "gcp", "azure", "sentry", "prometheus", "grafana", "loki", "tempo", "mimir", "victoriametrics", "victorialogs", "victoriatraces", "github", "gitlab", "bitbucket", "argocd", "datadog", "groundcover", "elk", "pagerduty", "zenduty", "correlation", "jira", "confluence", "jsm", "custom"]>>;
+        label: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        entity_type: z.ZodEnum<["service", "resource"]>;
+        resource_type: z.ZodOptional<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>>;
+        resource_types: z.ZodOptional<z.ZodArray<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>, "many">>;
+        source_type: z.ZodOptional<z.ZodString>;
+        family: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<["aws", "k8s", "gcp", "azure", "sentry", "prometheus", "grafana", "loki", "tempo", "mimir", "victoriametrics", "victorialogs", "victoriatraces", "github", "gitlab", "bitbucket", "argocd", "datadog", "groundcover", "elk", "pagerduty", "zenduty", "correlation", "jira", "confluence", "jsm", "custom"]>>;
+        label: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        entity_type: z.ZodEnum<["service", "resource"]>;
+        resource_type: z.ZodOptional<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>>;
+        resource_types: z.ZodOptional<z.ZodArray<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>, "many">>;
+        source_type: z.ZodOptional<z.ZodString>;
+        family: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<["aws", "k8s", "gcp", "azure", "sentry", "prometheus", "grafana", "loki", "tempo", "mimir", "victoriametrics", "victorialogs", "victoriatraces", "github", "gitlab", "bitbucket", "argocd", "datadog", "groundcover", "elk", "pagerduty", "zenduty", "correlation", "jira", "confluence", "jsm", "custom"]>>;
+        label: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>;
+    relation: z.ZodEnum<["DEPLOYED_ON", "DEPLOYED_AS", "RUNS_ON", "PART_OF", "CALLS", "PUBLISHES_TO", "SUBSCRIBES_TO", "CONSUMES", "PROVIDES", "PROXIES", "ROUTES_TO", "DEPENDS_ON", "AGGREGATES", "COMPOSES", "USES", "STORES_DATA_IN", "CACHES_IN", "CONFIGURED_BY", "EXPOSED_VIA", "PROTECTED_BY", "AUTHENTICATES_WITH", "OWNS", "OBSERVES", "MONITORED_BY", "SENDS_METRICS_TO", "SENDS_LOGS_TO", "SENDS_TRACES_TO", "CONNECTS_TO", "REPLICATES", "BACKS_UP", "MIRRORS", "TRIGGERS", "MIGRATES_TO", "REPLACES", "REPLICATED_FROM"]>;
+    target_endpoint: z.ZodObject<{
+        entity_type: z.ZodEnum<["service", "resource"]>;
+        resource_type: z.ZodOptional<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>>;
+        resource_types: z.ZodOptional<z.ZodArray<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>, "many">>;
+        source_type: z.ZodOptional<z.ZodString>;
+        family: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<["aws", "k8s", "gcp", "azure", "sentry", "prometheus", "grafana", "loki", "tempo", "mimir", "victoriametrics", "victorialogs", "victoriatraces", "github", "gitlab", "bitbucket", "argocd", "datadog", "groundcover", "elk", "pagerduty", "zenduty", "correlation", "jira", "confluence", "jsm", "custom"]>>;
+        label: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        entity_type: z.ZodEnum<["service", "resource"]>;
+        resource_type: z.ZodOptional<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>>;
+        resource_types: z.ZodOptional<z.ZodArray<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>, "many">>;
+        source_type: z.ZodOptional<z.ZodString>;
+        family: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<["aws", "k8s", "gcp", "azure", "sentry", "prometheus", "grafana", "loki", "tempo", "mimir", "victoriametrics", "victorialogs", "victoriatraces", "github", "gitlab", "bitbucket", "argocd", "datadog", "groundcover", "elk", "pagerduty", "zenduty", "correlation", "jira", "confluence", "jsm", "custom"]>>;
+        label: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        entity_type: z.ZodEnum<["service", "resource"]>;
+        resource_type: z.ZodOptional<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>>;
+        resource_types: z.ZodOptional<z.ZodArray<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>, "many">>;
+        source_type: z.ZodOptional<z.ZodString>;
+        family: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<["aws", "k8s", "gcp", "azure", "sentry", "prometheus", "grafana", "loki", "tempo", "mimir", "victoriametrics", "victorialogs", "victoriatraces", "github", "gitlab", "bitbucket", "argocd", "datadog", "groundcover", "elk", "pagerduty", "zenduty", "correlation", "jira", "confluence", "jsm", "custom"]>>;
+        label: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>;
+    relation_class: z.ZodEnum<["structural", "associative"]>;
+    attribute_schema_key: z.ZodString;
+    evidence_level: z.ZodEnum<["implemented", "code_evidence", "planned", "pre_prod_validation", "reserved_shape"]>;
+    provider_family: z.ZodOptional<z.ZodString>;
+    provider_category: z.ZodOptional<z.ZodEnum<["cloud", "observability", "logging", "tracing", "vcs", "ticketing", "deployment", "alerting"]>>;
+    notes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    guardrails: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    key: z.ZodString;
+    version: z.ZodString;
+    status: z.ZodEnum<["active", "candidate", "experimental", "reserved"]>;
+    family: z.ZodEnum<["aws", "kubernetes", "github", "argocd", "integrations"]>;
+    source_endpoint: z.ZodObject<{
+        entity_type: z.ZodEnum<["service", "resource"]>;
+        resource_type: z.ZodOptional<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>>;
+        resource_types: z.ZodOptional<z.ZodArray<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>, "many">>;
+        source_type: z.ZodOptional<z.ZodString>;
+        family: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<["aws", "k8s", "gcp", "azure", "sentry", "prometheus", "grafana", "loki", "tempo", "mimir", "victoriametrics", "victorialogs", "victoriatraces", "github", "gitlab", "bitbucket", "argocd", "datadog", "groundcover", "elk", "pagerduty", "zenduty", "correlation", "jira", "confluence", "jsm", "custom"]>>;
+        label: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        entity_type: z.ZodEnum<["service", "resource"]>;
+        resource_type: z.ZodOptional<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>>;
+        resource_types: z.ZodOptional<z.ZodArray<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>, "many">>;
+        source_type: z.ZodOptional<z.ZodString>;
+        family: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<["aws", "k8s", "gcp", "azure", "sentry", "prometheus", "grafana", "loki", "tempo", "mimir", "victoriametrics", "victorialogs", "victoriatraces", "github", "gitlab", "bitbucket", "argocd", "datadog", "groundcover", "elk", "pagerduty", "zenduty", "correlation", "jira", "confluence", "jsm", "custom"]>>;
+        label: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        entity_type: z.ZodEnum<["service", "resource"]>;
+        resource_type: z.ZodOptional<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>>;
+        resource_types: z.ZodOptional<z.ZodArray<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>, "many">>;
+        source_type: z.ZodOptional<z.ZodString>;
+        family: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<["aws", "k8s", "gcp", "azure", "sentry", "prometheus", "grafana", "loki", "tempo", "mimir", "victoriametrics", "victorialogs", "victoriatraces", "github", "gitlab", "bitbucket", "argocd", "datadog", "groundcover", "elk", "pagerduty", "zenduty", "correlation", "jira", "confluence", "jsm", "custom"]>>;
+        label: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>;
+    relation: z.ZodEnum<["DEPLOYED_ON", "DEPLOYED_AS", "RUNS_ON", "PART_OF", "CALLS", "PUBLISHES_TO", "SUBSCRIBES_TO", "CONSUMES", "PROVIDES", "PROXIES", "ROUTES_TO", "DEPENDS_ON", "AGGREGATES", "COMPOSES", "USES", "STORES_DATA_IN", "CACHES_IN", "CONFIGURED_BY", "EXPOSED_VIA", "PROTECTED_BY", "AUTHENTICATES_WITH", "OWNS", "OBSERVES", "MONITORED_BY", "SENDS_METRICS_TO", "SENDS_LOGS_TO", "SENDS_TRACES_TO", "CONNECTS_TO", "REPLICATES", "BACKS_UP", "MIRRORS", "TRIGGERS", "MIGRATES_TO", "REPLACES", "REPLICATED_FROM"]>;
+    target_endpoint: z.ZodObject<{
+        entity_type: z.ZodEnum<["service", "resource"]>;
+        resource_type: z.ZodOptional<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>>;
+        resource_types: z.ZodOptional<z.ZodArray<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>, "many">>;
+        source_type: z.ZodOptional<z.ZodString>;
+        family: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<["aws", "k8s", "gcp", "azure", "sentry", "prometheus", "grafana", "loki", "tempo", "mimir", "victoriametrics", "victorialogs", "victoriatraces", "github", "gitlab", "bitbucket", "argocd", "datadog", "groundcover", "elk", "pagerduty", "zenduty", "correlation", "jira", "confluence", "jsm", "custom"]>>;
+        label: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        entity_type: z.ZodEnum<["service", "resource"]>;
+        resource_type: z.ZodOptional<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>>;
+        resource_types: z.ZodOptional<z.ZodArray<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>, "many">>;
+        source_type: z.ZodOptional<z.ZodString>;
+        family: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<["aws", "k8s", "gcp", "azure", "sentry", "prometheus", "grafana", "loki", "tempo", "mimir", "victoriametrics", "victorialogs", "victoriatraces", "github", "gitlab", "bitbucket", "argocd", "datadog", "groundcover", "elk", "pagerduty", "zenduty", "correlation", "jira", "confluence", "jsm", "custom"]>>;
+        label: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        entity_type: z.ZodEnum<["service", "resource"]>;
+        resource_type: z.ZodOptional<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>>;
+        resource_types: z.ZodOptional<z.ZodArray<z.ZodEnum<["aws_account", "vpc", "subnet", "compute_instance", "serverless_function", "load_balancer", "dns_zone", "dns_record", "log_group", "alarm", "container_registry", "kubernetes_cluster", "kubernetes_namespace", "kubernetes_deployment", "kubernetes_stateful_set", "kubernetes_daemon_set", "kubernetes_job", "kubernetes_cron_job", "kubernetes_service", "database", "cache", "message_queue", "object_storage", "vcs", "ci_cd", "alerting", "monitoring", "infrastructure_management", "secrets_manager", "network", "web_application_firewall", "cdn", "saas_vendor", "custom"]>, "many">>;
+        source_type: z.ZodOptional<z.ZodString>;
+        family: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<["aws", "k8s", "gcp", "azure", "sentry", "prometheus", "grafana", "loki", "tempo", "mimir", "victoriametrics", "victorialogs", "victoriatraces", "github", "gitlab", "bitbucket", "argocd", "datadog", "groundcover", "elk", "pagerduty", "zenduty", "correlation", "jira", "confluence", "jsm", "custom"]>>;
+        label: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>;
+    relation_class: z.ZodEnum<["structural", "associative"]>;
+    attribute_schema_key: z.ZodString;
+    evidence_level: z.ZodEnum<["implemented", "code_evidence", "planned", "pre_prod_validation", "reserved_shape"]>;
+    provider_family: z.ZodOptional<z.ZodString>;
+    provider_category: z.ZodOptional<z.ZodEnum<["cloud", "observability", "logging", "tracing", "vcs", "ticketing", "deployment", "alerting"]>>;
+    notes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    guardrails: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, z.ZodTypeAny, "passthrough">>;
+export type ConnectionContractFamily = z.infer<typeof connectionContractFamilySchema>;
+export type ConnectionContractEvidenceLevel = z.infer<typeof connectionContractEvidenceLevelSchema>;
+export type ConnectionContractProviderCategory = z.infer<typeof connectionContractProviderCategorySchema>;
+export type ConnectionContractRelationClass = 'structural' | 'associative';
+export interface ConnectionContractEndpoint {
+    readonly entity_type: 'service' | 'resource';
+    readonly resource_type?: TopologyResourceType;
+    readonly resource_types?: readonly TopologyResourceType[];
+    readonly source_type?: string;
+    readonly family?: string;
+    readonly provider?: TopologyProvider;
+    readonly label?: string;
+}
+export interface ConnectionContractMetadata {
+    readonly key: string;
+    readonly version: string;
+    readonly status: ConnectionContractStatus;
+    readonly family: ConnectionContractFamily;
+    readonly source_endpoint: ConnectionContractEndpoint;
+    readonly relation: TopologyRelationType;
+    readonly target_endpoint: ConnectionContractEndpoint;
+    readonly relation_class: ConnectionContractRelationClass;
+    readonly attribute_schema_key: string;
+    readonly evidence_level: ConnectionContractEvidenceLevel;
+    readonly provider_family?: string;
+    readonly provider_category?: ConnectionContractProviderCategory;
+    readonly notes?: readonly string[];
+    readonly guardrails?: readonly string[];
+}
+export interface ConnectionContractRef {
+    readonly correlation_contract_key: string;
+    readonly correlation_contract_version: string;
+}
+export declare function connectionContractCompositeKey(key: string, version: string): string;
+export declare function connectionContractRef(contract: Pick<ConnectionContractMetadata, 'key' | 'version'>): ConnectionContractRef;