Connectum

Standardized Service Structure

Opinionated production architecture with a single createServer() entry point. Predictable behavior across all your services — no glue code, no custom wiring.

Operational Safety Envelope

Fixed-order interceptor chain — timeout, retry, circuit breaker, bulkhead, and fallback. Enterprise resilience patterns enforced by default.

Auth & Zero-Trust

JWT, gateway, and session authentication with declarative RBAC. mTLS and proto-based authorization keep security alongside your API contract.

Full Observability Stack

Distributed tracing, RPC metrics, and structured logging via OpenTelemetry. First-class instrumentation for both server and client calls.

Proto-First Contract

The .proto schema is your single source of truth — validation rules, authorization policies, and REST routing all defined alongside the API contract. One file governs the full request lifecycle.

Cloud-Native by Default

Health and readiness probes, graceful shutdown with dependency ordering, TLS/mTLS, and server reflection. Kubernetes-ready from the first line of code.

See It in Action

deployment.protodeploymentService.tsserver.tscli

protobuf

syntax = "proto3";
package platform.v1;

import "buf/validate/validate.proto";
import "google/api/annotations.proto";
import "connectum/auth/v1/options.proto";

service DeploymentService {
  option (connectum.auth.v1.service_auth) = {
    default_policy: "deny"
    default_requires: { roles: ["platform-engineer"] }
  };

  rpc CreateDeployment(CreateDeploymentRequest) returns (Deployment) {
    option (google.api.http) = { post: "/v1/deployments" body: "*" };
  }

  rpc GetDeployment(GetDeploymentRequest) returns (Deployment) {
    option (connectum.auth.v1.method_auth) = { public: true };
    option (google.api.http) = { get: "/v1/deployments/{deployment_id}" };
  }
}

message CreateDeploymentRequest {
  string namespace = 1 [(buf.validate.field).string.min_len = 1];
  string image = 2 [(buf.validate.field).string.pattern = "^[a-z0-9./:-]+$"];
  int32 replicas = 3 [(buf.validate.field).int32 = { gte: 1, lte: 100 }];
}

message GetDeploymentRequest {
  string deployment_id = 1 [(buf.validate.field).string.uuid = true];
}

message Deployment {
  string deployment_id = 1;
  string namespace = 2;
  string image = 3;
  int32 replicas = 4;
  string status = 5;
  string created_by = 6;
}

typescript

import { create } from '@bufbuild/protobuf';
import type { ConnectRouter } from '@connectrpc/connect';
import { requireAuthContext } from '@connectum/auth';
import { getLogger, getMeter } from '@connectum/otel';
import { DeploymentService, DeploymentSchema } from '#gen/platform_pb.js';

const logger = getLogger('DeploymentService');
const deployments = getMeter().createCounter('platform.deployments.total');

export default (router: ConnectRouter) => {
  router.service(DeploymentService, {
    async createDeployment(req) {
      const auth = requireAuthContext();

      deployments.add(1, { namespace: req.namespace });
      logger.info('Deployment created', {
        namespace: req.namespace,
        image: req.image,
        createdBy: auth.subject,
      });

      return create(DeploymentSchema, {
        deploymentId: crypto.randomUUID(),
        namespace: req.namespace,
        image: req.image,
        replicas: req.replicas,
        status: 'PENDING',
        createdBy: auth.subject,
      });
    },
  });
};