@rayspec/spec 1.5.0

package/dist/grammar.js

@@ -0,0 +1,503 @@
+/**
+ * The RaySpec config grammar — `RaySpec` and its six sections.
+ *
+ * A deployed backend is ONE validated `RaySpec` — stores · api · agents ·
+ * tooling · triggers · handlers. This module defines ONLY the Zod grammar (shape). The
+ * two-phase parser (`parse.ts`), the semantic linter (`lint.ts`), and the JSON-Schema exporter
+ * (`export.ts`) build on top of it.
+ *
+ * FAIL-CLOSED BY CONSTRUCTION: every GRAMMAR object level is `.strict()`, so an
+ * unknown key is rejected — there is no silent passthrough of a typo'd or unrecognized field.
+ * Verified (zod 4.4.3, doc-first probe): `.omit().extend().strict()` composes so the wrap layer
+ * stays strict AND the exported JSON-Schema carries `additionalProperties:false` at every STRICT
+ * grammar level. The THREE embedded JSON-Schema slots (a tool's `parameters`/`outputSchema` and an
+ * agent's `outputSchema.schema`) are intentionally OPEN records — they ARE free-form JSON-Schema,
+ * validated separately by ajv (lint.ts), not by strict-key rejection.
+ *
+ * HYBRID WRAP:
+ *  - `agents[]` and `tooling[]` WRAP the neutral `core` types (`AgentSpec`/`ToolSpec`) — the
+ *    literal interpreter input — so there is ONE source of truth for the neutral fields. Honest
+ *    limit of the wrap: a neutral REMOVAL or RENAME surfaces LOUDLY (a `.omit()`/`.extend()` on a
+ *    missing key is a compile error); a neutral ADDITION is ABSORBED SILENTLY into the grammar.
+ *    The `AgentSpecConfig`/`ToolSpecConfig` shape-key PIN TESTS (grammar.test.ts) are what make an
+ *    addition deliberate — a new neutral key fails the pin and forces a conscious spec-bump call.
+ *  - `stores[]`, `api[]`, `triggers[]`, `handlers[]` are INDEPENDENT Zod types (no neutral
+ *    precedent exists for them).
+ *
+ * RUNTIME vs CONFIG (load-bearing): `core.AgentSpec` includes `input` — that is the RUNTIME task
+ * value supplied per request, NOT config. A declared agent MUST OMIT it (we `.omit({ input })`),
+ * and supplies it at request time. Likewise `core.AgentSpec.tools` is an INLINE
+ * neutral-tool array; in the config layer an agent references declared `tooling[]` entries BY ID,
+ * so we omit the inline array and add an `id`-reference list (`tools: string[]`) instead. The
+ * lint pass resolves those references against the `tooling[]` section.
+ */
+import { BackendId, AgentSpec as NeutralAgentSpec, ToolSpec as NeutralToolSpec, } from '@rayspec/core';
+import { z } from 'zod';
+/** The supported spec major.minor. Parsed FIRST (two-phase) so an unknown major fails cleanly. */
+export const SPEC_VERSION = '1.0';
+// ---------------------------------------------------------------------------------------
+// metadata
+// ---------------------------------------------------------------------------------------
+/** Minimal deployment metadata. `name` identifies the backend; extend later as needed. */
+export const Metadata = z
+    .object({
+    name: z.string().min(1),
+    description: z.string().optional(),
+})
+    .strict();
+// ---------------------------------------------------------------------------------------
+// deployment — independent grammar (deployment PROPERTY, not a backend capability)
+// ---------------------------------------------------------------------------------------
+/**
+ * Deployment-level properties of a backend. These describe HOW the
+ * deployment runs, NOT what any SDK can do — so `async`/off-request execution belongs HERE, on the
+ * spec, gated by "is a durable worker configured?", and is INVISIBLE to the neutral `Backend`
+ * interface and the per-backend `CapabilityDescriptor` (which must NOT be touched: whether a run
+ * executes off-request has no backend asymmetry to absorb — `runAgent` takes the same `ctx`
+ * in-request or off-request).
+ *
+ *  - `durableWorker` — when true, the deployment runs a durable off-request worker (DBOS),
+ *    so a per-request `async:true` run is enqueued onto it (202 + runId) rather than fail-closed-501.
+ *    A lint rule (lint.ts) enforces it: a spec must not be deployed expecting async without it — but
+ *    the LOAD-BEARING gate is the RUNTIME one (the run surface 501s if no executor is wired,
+ *    regardless of this flag), so this is a declaration + a static best-effort check, defense-in-depth.
+ */
+export const DeploymentSpec = z
+    .object({
+    durableWorker: z.boolean().optional(),
+})
+    .strict();
+// ---------------------------------------------------------------------------------------
+// stores[] — independent grammar (DB-materialized product tables)
+// ---------------------------------------------------------------------------------------
+/**
+ * The closed set of column types an author may declare. Small + closed so the store generator
+ * can map each to a Drizzle/Postgres type deterministically and the migration gate sees a finite
+ * vocabulary. (Authors declare BUSINESS columns only — the tenancy/GDPR columns `tenant_id`,
+ * `id`, `created_at`, `deleted_at`, `retention_days`, `region` are INJECTED by the generator,
+ * never declared here.)
+ */
+export const ColumnType = z.enum(['text', 'uuid', 'timestamp', 'integer', 'boolean', 'jsonb']);
+/**
+ * A SAFE SQL/TS IDENTIFIER for a store name / column name / FK column-or-reference (TEN-1).
+ * Store/column names are interpolated VERBATIM into generated SQL (`CREATE TABLE "<name>"`)
+ * AND generated TS (`export const <camel> = pgTable('<name>', …)`) — so an unconstrained
+ * `z.string()` is an INJECTION seam (a name like `m" ); DROP …` lands in executable DDL, and the
+ * destructive scan is a closed blocklist that can never catch every form). Fail-closed at the
+ * SOURCE: a safe identifier is `[a-z_][a-z0-9_]*`, length 1..63 (the Postgres identifier limit),
+ * lowercase only (Postgres folds unquoted idents to lowercase; we keep snake_case author names and
+ * camelCase them for TS). `parseSpec` rejects a metacharacter/over-long name as `schema_violation`.
+ * The generators re-assert the SAME shape (defense-in-depth for a code-built spec bypassing parse).
+ */
+export const SAFE_IDENTIFIER_RE = /^[a-z_][a-z0-9_]*$/;
+export const MAX_IDENTIFIER_LENGTH = 63;
+export const SafeIdentifier = z
+    .string()
+    .min(1)
+    .max(MAX_IDENTIFIER_LENGTH, `identifier must be <= ${MAX_IDENTIFIER_LENGTH} chars (Postgres limit)`)
+    .regex(SAFE_IDENTIFIER_RE, 'identifier must match /^[a-z_][a-z0-9_]*$/ (lowercase letters/digits/underscore, no metacharacters)');
+/**
+ * Re-assert the safe-identifier shape OUTSIDE Zod (the generators call this on a spec that may have
+ * been built in code, bypassing parseSpec). THROWS — never returns a malformed identifier into
+ * generated SQL/TS. Single source of the rule shared by the grammar refine above + both generators.
+ */
+export function assertSafeIdentifier(value, what) {
+    if (value.length === 0 ||
+        value.length > MAX_IDENTIFIER_LENGTH ||
+        !SAFE_IDENTIFIER_RE.test(value)) {
+        throw new Error(`unsafe identifier for ${what}: ${JSON.stringify(value)} — must match ` +
+            `/^[a-z_][a-z0-9_]*$/ and be <= ${MAX_IDENTIFIER_LENGTH} chars (injection guard, TEN-1)`);
+    }
+}
+/** One business column on a store. `nullable`/`unique` default false (the conservative shape). */
+export const StoreColumn = z
+    .object({
+    name: SafeIdentifier,
+    type: ColumnType,
+    nullable: z.boolean().default(false),
+    unique: z.boolean().default(false),
+    /** Optional whitelist of allowed values for a text column (a stored value must be one of these). */
+    enum: z.array(z.string().min(1)).min(1).optional(),
+})
+    .strict();
+/**
+ * A child→parent foreign key (the throwaway has `transcripts` referencing `meetings`). The
+ * generator emits the FK + `ON DELETE` policy; the parent must be another declared store (the
+ * lint pass resolves `references`). This is a PRODUCT-to-PRODUCT FK; FK-to-core (e.g. orgs) is
+ * the injected tenancy column, not declared here.
+ */
+export const StoreForeignKey = z
+    .object({
+    /** The local column carrying the FK (must be a DECLARED business column — lint-resolved). */
+    column: SafeIdentifier,
+    /** The referenced store name (must be a declared store — lint-resolved). */
+    references: SafeIdentifier,
+    /** When set, the FK targets this (unique) column of the referenced store instead of its id. */
+    referencesColumn: SafeIdentifier.optional(),
+    /** ON DELETE policy; `cascade` mirrors the tenancy cascade discipline. */
+    onDelete: z.enum(['cascade', 'restrict', 'set null']).default('cascade'),
+})
+    .strict();
+/**
+ * A declared product store. Authors declare a name + business columns (+ optional child→parent
+ * FKs). Tenancy is NON-OPTIONAL by construction — there is no opt-out field (a non-tenant store
+ * would be the spec-level analogue of `.unscoped()`, deliberately not expressible in v1.0).
+ */
+export const StoreSpec = z
+    .object({
+    name: SafeIdentifier,
+    columns: z.array(StoreColumn).min(1),
+    foreignKeys: z.array(StoreForeignKey).default([]),
+    /** Opt-in soft delete: a delete marks the row deleted instead of removing it (default: hard delete). */
+    softDelete: z.boolean().optional(),
+    /** Opt-in full-text search: the store gets a generated tsvector column (over its text columns) + a
+     *  GIN index, and a ranked search query surface. Default: substring (ILIKE) search only. */
+    fullTextSearch: z.boolean().optional(),
+})
+    .strict();
+// ---------------------------------------------------------------------------------------
+// handlers[] — independent grammar (escape-hatch TS module references)
+// ---------------------------------------------------------------------------------------
+/**
+ * What a handler is wired into. A logical id maps to a TS module + export; `kind` declares the
+ * chokepoint it dispatches through (tool → dispatchTool; route → the api chokepoint; trigger →
+ * the triggers seam). The loader resolves the symbol from a path-jailed escape-hatch
+ * root — the grammar layer parses the mapping only.
+ */
+export const HandlerKind = z.enum(['tool', 'route', 'trigger']);
+export const HandlerSpec = z
+    .object({
+    /** Logical id referenced by tooling/api/triggers. */
+    id: z.string().min(1),
+    /** The escape-hatch TS module path (resolved under the jailed root at load). */
+    module: z.string().min(1),
+    /** The named export within that module. */
+    export: z.string().min(1),
+    kind: HandlerKind,
+    /**
+     * Opt-in: a route handler that only READS product stores. When true, its route is gated
+     * `store:read` instead of the default `store:write`, so a read-scoped credential can reach it.
+     */
+    readonly: z.boolean().optional(),
+})
+    .strict();
+// ---------------------------------------------------------------------------------------
+// agents[] — WRAP core.AgentSpec
+// ---------------------------------------------------------------------------------------
+/**
+ * A declared agent. WRAPS `core.AgentSpec`:
+ *  - `.omit({ input })` — `input` is the per-request RUNTIME value, never config.
+ *  - `.omit({ tools })` — the neutral inline tool array is replaced by ID references into the
+ *    `tooling[]` section (a config agent wires tools by id; lint resolves them).
+ *  - `.extend(...)` — the wrap-layer fields the engine needs: a logical `id`, a `backend`
+ *    selection, the `tools` id-reference list, and an optional `requireNativeStructuredOutput`
+ *    flag so a capability violation (e.g. native structured output demanded on pi) is expressible
+ *    and checked at config time (lint).
+ *  - `.strict()` — fail-closed unknown-key rejection (applied last; verified to compose).
+ *
+ * Single source of truth: `name`/`instructions`/`model`/`outputSchema`/`maxTurns` come straight
+ * from the neutral type. If the neutral `AgentSpec` churns, this wrap is where the compat decision
+ * (minor vs major spec bump) is made — by design.
+ */
+export const AgentSpecConfig = NeutralAgentSpec.omit({ input: true, tools: true })
+    .extend({
+    /** Logical id (unique within `agents[]`). */
+    id: z.string().min(1),
+    /** Which backend runs this agent. */
+    backend: BackendId,
+    /** Tool ids referenced from the `tooling[]` section (lint-resolved). */
+    tools: z.array(z.string().min(1)).default([]),
+    /**
+     * When true, an `outputSchema` DEMANDS native structured output — rejected at config time on
+     * a backend that lacks it (pi). Threaded into core `validateSpec` by the lint pass.
+     */
+    requireNativeStructuredOutput: z.boolean().default(false),
+})
+    .strict();
+// ---------------------------------------------------------------------------------------
+// tooling[] — WRAP core.ToolSpec
+// ---------------------------------------------------------------------------------------
+/**
+ * A declared tool. WRAPS `core.ToolSpec` (name/description/parameters — the model-facing
+ * declaration) + the wrap-layer fields the resolver needs to build a `NeutralTool`:
+ *  - `id` — logical id referenced from `agents[].tools` and unique within `tooling[]`.
+ *  - `handler` — a logical handler id from the `handlers[]` section (lint-resolved).
+ *  - `idempotent` — REQUIRED, NO DEFAULT. This is the reviewed replay-safety declaration the whole
+ *    `dispatchTool` contract keys off (a `false` tool must never re-fire / return a cached output
+ *    on replay). There is no platform-side verification of this boolean — it must be an explicit,
+ *    reviewed author decision, so we give it no default.
+ *  - `timeoutMs` — bounds the handler (AbortSignal in dispatchTool).
+ *  - `outputSchema` — optional embedded JSON-Schema validating the handler output (Ajv-compiled
+ *    at load by the lint pass). `parameters` (the input schema) is inherited from `ToolSpec`.
+ */
+export const ToolSpecConfig = NeutralToolSpec.extend({
+    /** Logical id (unique within `tooling[]`; referenced from `agents[].tools`). */
+    id: z.string().min(1),
+    /** A declared handler id (lint-resolved against `handlers[]`). */
+    handler: z.string().min(1),
+    /**
+     * The replay-safety declaration — REQUIRED, no default (a reviewed author decision; the whole
+     * dispatchTool replay contract keys off it).
+     */
+    idempotent: z.boolean(),
+    /** Hard timeout for the handler (ms). */
+    timeoutMs: z.number().int().positive(),
+    /** Optional embedded JSON-Schema validating handler OUTPUT (Ajv-compiled at load). */
+    outputSchema: z.record(z.string(), z.unknown()).optional(),
+}).strict();
+// ---------------------------------------------------------------------------------------
+// api[] — independent grammar (declared HTTP routes)
+// ---------------------------------------------------------------------------------------
+/** The HTTP method a route handles. */
+export const HttpMethod = z.enum(['GET', 'POST', 'PUT', 'PATCH', 'DELETE']);
+/** A CRUD operation against a materialized store. */
+export const StoreOp = z.enum(['list', 'get', 'create', 'update', 'delete']);
+/**
+ * A `stream` route's runtime mode — discriminates the init shape the interpreter builds WITHIN the
+ * `kind:'stream'` arm (NOT a union discriminant — the union still discriminates on `kind`):
+ *  - `ingest`   — the binary write half: the interpreter reads the RAW request body.
+ *  - `playback` — the media read half: Range/206 + conditional-GET from a `BlobStore`.
+ *
+ * `mode` is a per-arm field (like a store action's `op`), not a fourth `kind`: an ingest and a
+ * playback route are the SAME kind of action (a raw-Request/Response stream handler) differing only
+ * in runtime behavior, so one `kind` keeps the closed union minimal.
+ */
+export const StreamMode = z.enum(['ingest', 'playback']);
+/**
+ * A route action — a discriminated union over its `kind`:
+ *  - `store`   — CRUD over a materialized store via TenantDb.
+ *  - `agent`   — invoke a declared agent over the SSE/JSON run surface.
+ *  - `handler` — a declared route-handler id.
+ *  - `stream`  — a raw binary ingest / Range-206 playback handler; `mode`
+ *               discriminates ingest vs playback WITHIN this arm (the union still keys on `kind`).
+ *
+ * The discriminant `kind` is an explicit field (not inferred from which payload is set) so the union
+ * is unambiguous and fail-closed. The `stream` arm's `handler` resolves against a declared
+ * `route`-kind handler — the SAME chokepoint a `kind:'handler'` route uses (a stream handler is a
+ * route handler that receives a raw `Request` instead of parsed JSON; the raw-vs-JSON init shape is
+ * a RUNTIME concern, not a grammar-kind concern — so no new `HandlerKind` is introduced).
+ */
+export const RouteAction = z.discriminatedUnion('kind', [
+    z
+        .object({
+        kind: z.literal('store'),
+        /** The declared store name (lint-resolved). */
+        store: z.string().min(1),
+        op: StoreOp,
+    })
+        .strict(),
+    z
+        .object({
+        kind: z.literal('agent'),
+        /** The declared agent id (lint-resolved). */
+        agent: z.string().min(1),
+        /**
+         * Optional: a declared store name (lint-resolved). When set, the agent's validated
+         * `outputSchema` output is written as one row into this store after a successful run —
+         * exactly-once across the sync and durable execution paths. Omitted ⇒ the run's output is
+         * returned/journaled but not persisted to a store.
+         */
+        persistTo: z.string().min(1).optional(),
+    })
+        .strict(),
+    z
+        .object({
+        kind: z.literal('handler'),
+        /** The declared handler id (lint-resolved; must be a `route`-kind handler). */
+        handler: z.string().min(1),
+    })
+        .strict(),
+    z
+        .object({
+        kind: z.literal('stream'),
+        /**
+         * The declared handler id (lint-resolved; must be a `route`-kind handler — a stream handler
+         * dispatches through the api chokepoint, like a `kind:'handler'` route).
+         */
+        handler: z.string().min(1),
+        /** ingest (raw binary write) vs playback (Range/206 media read) — see `StreamMode`. */
+        mode: StreamMode,
+    })
+        .strict(),
+]);
+/** A declared HTTP route mounted on the existing auth chain. */
+export const ApiRouteSpec = z
+    .object({
+    method: HttpMethod,
+    /** Route path (e.g. `/meetings/{id}`); interpreted by the api interpreter. */
+    path: z.string().min(1),
+    action: RouteAction,
+})
+    .strict();
+// ---------------------------------------------------------------------------------------
+// triggers[] — independent grammar (parse/register only)
+// ---------------------------------------------------------------------------------------
+/**
+ * A trigger action — what fires when the trigger runs. A trigger fires an agent or a declared
+ * trigger-handler (lint-resolved). Parse/register only (the durable worker is a deployment
+ * property); a cron/async fire is fail-closed-rejected at runtime (not in this grammar).
+ */
+export const TriggerAction = z.discriminatedUnion('kind', [
+    z
+        .object({
+        kind: z.literal('agent'),
+        agent: z.string().min(1),
+        /**
+         * Optional: a declared store name (lint-resolved). When set, the agent's validated
+         * `outputSchema` output is written as one row into this store after a successful run —
+         * exactly-once across a durable recovery re-dispatch of the same run.
+         */
+        persistTo: z.string().min(1).optional(),
+    })
+        .strict(),
+    z.object({ kind: z.literal('handler'), handler: z.string().min(1) }).strict(),
+]);
+/**
+ * A declared trigger. `kind` selects the descriptor:
+ *  - `cron`    — requires `schedule` (a cron expression; not evaluated at the grammar level).
+ *  - `webhook` — an inbound webhook (path interpreted later).
+ *  - `event`   — requires `event` (a logical event name).
+ *  - `manual`  — fired by an explicit call.
+ *
+ * `schedule`/`event` are optional at the GRAMMAR level (different kinds need different fields);
+ * the lint pass enforces the kind→field requirement (cron needs schedule, event needs event) so a
+ * malformed trigger fails fail-closed rather than parsing into a half-specified descriptor.
+ */
+export const TriggerKind = z.enum(['cron', 'webhook', 'event', 'manual']);
+export const TriggerSpec = z
+    .object({
+    name: z.string().min(1),
+    kind: TriggerKind,
+    /** Cron expression — REQUIRED for `kind:'cron'` (lint-enforced). */
+    schedule: z.string().min(1).optional(),
+    /** Logical event name — REQUIRED for `kind:'event'` (lint-enforced). */
+    event: z.string().min(1).optional(),
+    /** Opt-in cron CATCH-UP: on startup, replay every interval missed while the worker was down
+     *  (bounded look-back). Valid ONLY for `kind:'cron'` (lint-enforced). Default: no catch-up. */
+    catchUp: z.boolean().optional(),
+    action: TriggerAction,
+})
+    .strict();
+// ---------------------------------------------------------------------------------------
+// extensions[] — independent grammar (extension-pack references)
+// ---------------------------------------------------------------------------------------
+/**
+ * An EXACT semantic version pin ("zero caret/tilde"). An extension
+ * pack is product code authored + versioned in its OWN repo and named by reference here, so its
+ * version MUST be pinned exactly — any range/wildcard/floating/partial form would let the resolved
+ * pack drift silently between deploys, defeating the reviewed-deploy discipline.
+ *
+ * ALLOWLIST by construction (NOT a blocklist of range characters — a blocklist false-accepts forms
+ * it doesn't enumerate, e.g. uppercase-X wildcards or floating dist-tags, AND false-rejects legit
+ * exact pins whose prerelease/build metadata contains an `x`). We accept ONLY a strict-exact semver:
+ * `MAJOR.MINOR.PATCH` (each numeric, no leading zeros) with an OPTIONAL `-prerelease` and/or
+ * `+build` metadata segment (the canonical semver.org grammar, anchored). Everything else — every
+ * range (`^`/`~`/`>=`/`<`/`=`), wildcard (`*`/`1.2.x`/`1.X`/`X`), floating dist-tag
+ * (`latest`/`stable`/`beta`/`next`), partial version (`1`/`1.2`), set/hyphen range
+ * (`1.0.0 || 2.0.0` / `1.0.0 - 2.0.0`), `v`-prefix, leading zero, or surrounding whitespace — fails
+ * by NOT matching the allowlist, so no enumeration can leak a form.
+ *
+ * Accepted: `1.2.3`, `1.2.3-rc.1`, `1.0.0-linux.1`, `2.0.0+exp.sha`, `10.20.30` (exact prerelease/
+ * build metadata — including the letter `x` inside it — is still an exact pin). We do NOT resolve
+ * the pack here (its own loader resolves + validates the actual published version); this is the
+ * fail-closed "is it EXACTLY one version?" guard at the grammar boundary.
+ *
+ * Implemented as `.regex()` (NOT `.refine()`): a `.regex()` serializes into the exported JSON-Schema
+ * as a `pattern`, so the artifact (export.ts) ALSO enforces the exact-pin constraint — a `.refine()`
+ * is dropped by `z.toJSONSchema`, which would leave the exported schema with NO version constraint.
+ */
+const EXACT_SEMVER_RE = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*))*))?(?:\+([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?$/;
+export const ExactVersionPin = z
+    .string()
+    .min(1)
+    .regex(EXACT_SEMVER_RE, {
+    message: 'extension version must be an EXACT semver pin (MAJOR.MINOR.PATCH with optional -prerelease/' +
+        '+build) — ranges, wildcards (incl. uppercase X), floating dist-tags (latest/beta/…), and ' +
+        'partial versions (1, 1.2) are rejected',
+});
+/**
+ * A reference to an extension pack to load. The pack carries ALL product code (its
+ * own stores/handlers/tooling/route fragments + capability impls); core validates ONLY this
+ * reference shape, never the pack's contents. `config` is an OPEN passthrough record whose CONTENTS
+ * are validated by the PACK's own Zod at load time, NEVER by core — but the ExtensionRef
+ * wrapper itself is `.strict()`, so an unknown key ON THE REF is fail-closed-rejected.
+ *
+ *  - `id`      — a logical id for the pack (unique within `extensions[]`; lint-resolvable later).
+ *  - `module`  — the pack module/directory reference (resolved + path-jailed by `loadExtensions`).
+ *  - `version` — an EXACT version pin (no range — see `ExactVersionPin`).
+ *  - `config`  — optional opaque pack-validated config (passthrough; core does not inspect it).
+ */
+export const ExtensionRef = z
+    .object({
+    id: z.string().min(1),
+    module: z.string().min(1),
+    version: ExactVersionPin,
+    config: z.record(z.string(), z.unknown()).optional(),
+})
+    .strict();
+// ---------------------------------------------------------------------------------------
+// frontend[] — independent grammar (static frontend mounts served alongside the API)
+// ---------------------------------------------------------------------------------------
+/**
+ * One static frontend mount served alongside the backend's API. A backend may declare a list of
+ * these so a spec can ship its own web UI (built assets) next to the routes it exposes.
+ *
+ *  - `route` — the URL prefix the mount is served under (e.g. `/` or `/app`); must start with `/`.
+ *  - `dir`   — the directory of built static assets, relative to the spec file.
+ *  - `spa`   — when true, an unmatched path under `route` falls back to `index.html` (the
+ *              History-API single-page-app fallback); default false (plain static file serving).
+ *
+ * `.strict()` — fail-closed unknown-key rejection, consistent with every other grammar level.
+ */
+export const FrontendSpec = z
+    .object({
+    route: z.string().min(1).regex(/^\//, 'route must start with "/"'),
+    dir: z.string().min(1),
+    spa: z.boolean().default(false),
+})
+    .strict();
+// ---------------------------------------------------------------------------------------
+// RaySpec — the whole document
+// ---------------------------------------------------------------------------------------
+/**
+ * The full RaySpec config document. `version` is `z.literal('1.0')` — but the parser checks it
+ * FIRST (two-phase, see `parse.ts`) so an unsupported major yields a clean `unsupported_version`
+ * SpecError instead of a wall of strict-shape errors. `.strict()` at the top level rejects any
+ * unknown top-level section.
+ *
+ * Every section defaults to `[]` so a minimal spec (just `version` + `metadata`) is valid.
+ */
+export const RaySpec = z
+    .object({
+    version: z.literal(SPEC_VERSION),
+    metadata: Metadata,
+    stores: z.array(StoreSpec).default([]),
+    api: z.array(ApiRouteSpec).default([]),
+    agents: z.array(AgentSpecConfig).default([]),
+    tooling: z.array(ToolSpecConfig).default([]),
+    triggers: z.array(TriggerSpec).default([]),
+    handlers: z.array(HandlerSpec).default([]),
+    /**
+     * OPTIONAL extension-pack references. Defaults to `[]` so a minimal spec (just
+     * `version` + `metadata`) and every existing fixture stays valid — absent = NO-OP (no packs
+     * loaded). Each entry's contents (`config`) are validated by the pack itself, never core;
+     * the ref wrapper is `.strict()` (fail-closed on an unknown key). The `loadExtensions` merge
+     * threads pack fragments into the other sections.
+     */
+    extensions: z.array(ExtensionRef).default([]),
+    /**
+     * OPTIONAL deployment properties. An object (not an array) — absent ⇒ no
+     * durable worker (the default; a per-request `async:true` then fail-closed-501s at the run
+     * surface). A minimal spec (just `version` + `metadata`) stays valid (deployment is omittable).
+     */
+    deployment: DeploymentSpec.optional(),
+    /**
+     * OPTIONAL static frontend mounts. A list of `{route, dir, spa?}` entries served alongside the
+     * API (see `FrontendSpec`). `.optional()` (NOT `.default([])`) so a spec that omits `frontend`
+     * parses byte-identically — absent = NO static mounts. A minimal spec (just `version` +
+     * `metadata`) stays valid (frontend is omittable).
+     */
+    frontend: z.array(FrontendSpec).optional(),
+})
+    .strict();
+//# sourceMappingURL=grammar.js.map

package/dist/grammar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grammar.js","sourceRoot":"","sources":["../src/grammar.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EACL,SAAS,EACT,SAAS,IAAI,gBAAgB,EAC7B,QAAQ,IAAI,eAAe,GAC5B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,kGAAkG;AAClG,MAAM,CAAC,MAAM,YAAY,GAAG,KAAc,CAAC;AAE3C,0FAA0F;AAC1F,WAAW;AACX,0FAA0F;AAE1F,0FAA0F;AAC1F,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,0FAA0F;AAC1F,mFAAmF;AACnF,0FAA0F;AAE1F;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,0FAA0F;AAC1F,kEAAkE;AAClE,0FAA0F;AAE1F;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;AAG/F;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AACvD,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACxC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CACF,qBAAqB,EACrB,yBAAyB,qBAAqB,yBAAyB,CACxE;KACA,KAAK,CACJ,kBAAkB,EAClB,qGAAqG,CACtG,CAAC;AAEJ;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa,EAAE,IAAY;IAC9D,IACE,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,MAAM,GAAG,qBAAqB;QACpC,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAC/B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,gBAAgB;YACrE,kCAAkC,qBAAqB,iCAAiC,CAC3F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,IAAI,EAAE,cAAc;IACpB,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAClC,oGAAoG;IACpG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,6FAA6F;IAC7F,MAAM,EAAE,cAAc;IACtB,4EAA4E;IAC5E,UAAU,EAAE,cAAc;IAC1B,+FAA+F;IAC/F,gBAAgB,EAAE,cAAc,CAAC,QAAQ,EAAE;IAC3C,0EAA0E;IAC1E,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;CACzE,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjD,wGAAwG;IACxG,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC;gGAC4F;IAC5F,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,0FAA0F;AAC1F,uEAAuE;AACvE,0FAA0F;AAE1F;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAGhE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,qDAAqD;IACrD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,gFAAgF;IAChF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,2CAA2C;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,EAAE,WAAW;IACjB;;;OAGG;IACH,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,0FAA0F;AAC1F,iCAAiC;AACjC,0FAA0F;AAE1F;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;KAC/E,MAAM,CAAC;IACN,6CAA6C;IAC7C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,qCAAqC;IACrC,OAAO,EAAE,SAAS;IAClB,wEAAwE;IACxE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7C;;;OAGG;IACH,6BAA6B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC1D,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,0FAA0F;AAC1F,iCAAiC;AACjC,0FAA0F;AAE1F;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,eAAe,CAAC,MAAM,CAAC;IACnD,gFAAgF;IAChF,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,kEAAkE;IAClE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B;;;OAGG;IACH,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,yCAAyC;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtC,sFAAsF;IACtF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC3D,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,0FAA0F;AAC1F,qDAAqD;AACrD,0FAA0F;AAE1F,uCAAuC;AACvC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG5E,qDAAqD;AACrD,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG7E;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AAGzD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACtD,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,+CAA+C;QAC/C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,EAAE,EAAE,OAAO;KACZ,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,6CAA6C;QAC7C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB;;;;;WAKG;QACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACxC,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC1B,+EAA+E;QAC/E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC3B,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB;;;WAGG;QACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,uFAAuF;QACvF,IAAI,EAAE,UAAU;KACjB,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAGH,gEAAgE;AAChE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,MAAM,EAAE,UAAU;IAClB,8EAA8E;IAC9E,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,WAAW;CACpB,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,0FAA0F;AAC1F,yDAAyD;AACzD,0FAA0F;AAE1F;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACxD,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB;;;;WAIG;QACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACxC,CAAC;SACD,MAAM,EAAE;IACX,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;CAC9E,CAAC,CAAC;AAGH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG1E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,WAAW;IACjB,oEAAoE;IACpE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,wEAAwE;IACxE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC;mGAC+F;IAC/F,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,aAAa;CACtB,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,0FAA0F;AAC1F,iEAAiE;AACjE,0FAA0F;AAE1F;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,eAAe,GACnB,qLAAqL,CAAC;AACxL,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CAAC,eAAe,EAAE;IACtB,OAAO,EACL,6FAA6F;QAC7F,2FAA2F;QAC3F,wCAAwC;CAC3C,CAAC,CAAC;AAEL;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,OAAO,EAAE,eAAe;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,0FAA0F;AAC1F,qFAAqF;AACrF,0FAA0F;AAE1F;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,2BAA2B,CAAC;IAClE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,0FAA0F;AAC1F,+BAA+B;AAC/B,0FAA0F;AAE1F;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC;KACrB,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IAChC,QAAQ,EAAE,QAAQ;IAClB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C;;;;;;OAMG;IACH,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7C;;;;OAIG;IACH,UAAU,EAAE,cAAc,CAAC,QAAQ,EAAE;IACrC;;;;;OAKG;IACH,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,23 @@
+/**
+ * @rayspec/spec — the RaySpec config grammar, parser, linter, and JSON-Schema exporter.
+ *
+ * A deployed RaySpec backend is ONE validated `RaySpec` (stores · api · agents ·
+ * tooling · triggers · handlers). This package owns the GRAMMAR + the fail-closed validation
+ * pipeline; the interpreters that turn a validated spec into running infrastructure are built in
+ * the interpreter packages (and depend on this package).
+ */
+export * from './brace-params.js';
+export * from './detect.js';
+export * from './errors.js';
+export * from './export.js';
+export * from './grammar.js';
+export * from './lint.js';
+export * from './parse.js';
+export * from './product-events.js';
+export * from './product-grammar.js';
+export * from './product-lint.js';
+export * from './product-parse.js';
+export * from './product-scope.js';
+export * from './product-views.js';
+export * from './product-views-lint.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC"}

package/dist/index.js

@@ -0,0 +1,26 @@
+/**
+ * @rayspec/spec — the RaySpec config grammar, parser, linter, and JSON-Schema exporter.
+ *
+ * A deployed RaySpec backend is ONE validated `RaySpec` (stores · api · agents ·
+ * tooling · triggers · handlers). This package owns the GRAMMAR + the fail-closed validation
+ * pipeline; the interpreters that turn a validated spec into running infrastructure are built in
+ * the interpreter packages (and depend on this package).
+ */
+// Product-YAML family: the Product-YAML program document grammar/parser/linter + the
+// dispatch layer that routes a raw spec to the right family. Additive — the RaySpec surface above
+// is unchanged.
+export * from './brace-params.js';
+export * from './detect.js';
+export * from './errors.js';
+export * from './export.js';
+export * from './grammar.js';
+export * from './lint.js';
+export * from './parse.js';
+export * from './product-events.js';
+export * from './product-grammar.js';
+export * from './product-lint.js';
+export * from './product-parse.js';
+export * from './product-scope.js';
+export * from './product-views.js';
+export * from './product-views-lint.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,qFAAqF;AACrF,kGAAkG;AAClG,gBAAgB;AAChB,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC"}