@sequenceholdings/pipeline-spec 0.1.0

package/dist/envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../src/envelope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAcvB;;;;;;;;;GASG;AAEH,eAAO,MAAM,aAAa,aAG2C,CAAA;AAErE,eAAO,MAAM,kBAAkB,aAEuE,CAAA;AAEtG,eAAO,MAAM,aAAa,mDAAoD,CAAA;AAC9E,eAAO,MAAM,iBAAiB;;;;EAAwB,CAAA;AACtD,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAE3D;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,8DAA+D,CAAA;AAChG,eAAO,MAAM,wBAAwB;;;;EAA+B,CAAA;AACpE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAEzE,wGAAwG;AACxG,eAAO,MAAM,UAAU;;;kBAKrB,CAAA;AAEF,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAA;AAE7C,qFAAqF;AACrF,eAAO,MAAM,YAAY;;kBAEvB,CAAA;AAEF,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAA;AA+DjD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAI/B,CAAA;AAEF,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAIpC,CAAA;AAEF,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAI7B,CAAA;AAEF;;;GAGG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAgDxB,CAAA;AAEJ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AACvD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AAE5D,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC,SAAS,EAAE;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC,CAAA;AAC1E,MAAM,MAAM,uBAAuB,GAAG,OAAO,CAAC,SAAS,EAAE;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE,CAAC,CAAA;AACpF,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,SAAS,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,CAAA"}

package/dist/envelope.js

@@ -0,0 +1,163 @@
+import { z } from 'zod';
+import { DEPLOY_TARGET_PATTERN, STAGE_ID_PATTERN } from './constants.js';
+import { operationsBlockSchema } from './operations.js';
+import { scanForCredentialLikeStrings } from './secret-scan.js';
+import { ingestionBodyShape, isoDurationSchema, refineIngestionBody, symbolicRefSchema, } from './bodies/ingestion.js';
+import { refineTransformationBody, transformationBodyShape } from './bodies/transformation.js';
+import { refineServingBody, servingBodyShape } from './bodies/serving.js';
+/**
+ * The stage envelope — the kind-agnostic contract every stage carries:
+ * identity, ownership, reliability posture, deploy targets, and operations.
+ * The typed bodies (ingestion / transformation / serving) hang off the `type`
+ * discriminator.
+ *
+ * Everything here is **portable**: symbolic references only (credential
+ * families, alert channels, worker machines). Resolution against a deploy
+ * target's facts happens in `resolveSpec`.
+ */
+export const stageIdSchema = z
+    .string()
+    .max(63)
+    .regex(STAGE_ID_PATTERN, 'must be a kebab-case slug (a-z, 0-9, -)');
+export const deployTargetSchema = z
+    .string()
+    .regex(DEPLOY_TARGET_PATTERN, 'must be a lowercase deploy-target slug (no path separators or dots)');
+export const CRITICALITIES = ['critical', 'standard', 'experimental'];
+export const criticalitySchema = z.enum(CRITICALITIES);
+/**
+ * Remediation posture when the platform detects a contract/reliability
+ * failure (carried over from the pipeline-observability contract vocabulary):
+ * `manual_only` (default) — page a human; `draft_pr_allowlisted` — the
+ * platform may draft a fix PR touching allowlisted paths; `disabled` — no
+ * automated remediation, alerts only.
+ */
+export const REMEDIATION_POSTURES = ['manual_only', 'draft_pr_allowlisted', 'disabled'];
+export const remediationPostureSchema = z.enum(REMEDIATION_POSTURES);
+/** Reliability targets. Both optional — criticality drives which are required by policy, not schema. */
+export const slosSchema = z.strictObject({
+    /** Max staleness of the stage's outputs before the freshness SLO is breached. */
+    freshness: isoDurationSchema.optional(),
+    /** Wall-clock budget for a single run. */
+    max_duration: isoDurationSchema.optional(),
+});
+/** Symbolic alert channel references — bound to concrete routes by `resolveSpec`. */
+export const alertsSchema = z.strictObject({
+    channels: z.array(symbolicRefSchema).min(1),
+});
+/**
+ * The kind-agnostic envelope fields shared by all stage types. Kept as a raw
+ * shape so each discriminated-union variant can spread it alongside its body.
+ */
+const envelopeShape = {
+    /** Spec grammar version — bump on breaking grammar changes. */
+    schema_version: z.literal(1),
+    /** Kebab id, unique within its Pipeline (repo); must match the spec's file basename. */
+    stage: stageIdSchema,
+    title: z.string().min(1).max(255),
+    description: z.string().min(1),
+    owners: z
+        .array(z.email())
+        .min(1)
+        .refine((owners) => new Set(owners).size === owners.length, 'owners must be unique'),
+    criticality: criticalitySchema,
+    slos: slosSchema.optional(),
+    alerts: alertsSchema.optional(),
+    /** Where humans go when this stage pages. */
+    runbook: z.url().optional(),
+    remediation_posture: remediationPostureSchema.default('manual_only'),
+    /** Deploy targets the stage supports (e.g. staging, production, banksouth). */
+    environments: z
+        .array(deployTargetSchema)
+        .min(1)
+        .refine((environments) => new Set(environments).size === environments.length, 'environments must be unique'),
+    operations: operationsBlockSchema.default({}),
+};
+function refineCatalogBindingTargets({ binding, environments, path, ctx, }) {
+    if (!binding || typeof binding === 'string')
+        return;
+    const defaultTarget = environments[0];
+    for (const target of Object.keys(binding.by_target)) {
+        if (environments.includes(target) && target !== defaultTarget)
+            continue;
+        ctx.addIssue({
+            code: 'custom',
+            path: [...path, 'by_target', target],
+            message: `catalog target '${target}' must be a non-default declared environment`,
+        });
+    }
+    for (const target of environments.slice(1)) {
+        if (target in binding.by_target)
+            continue;
+        ctx.addIssue({
+            code: 'custom',
+            path: [...path, 'by_target'],
+            message: `catalog binding must explicitly map non-default environment '${target}'`,
+        });
+    }
+}
+export const ingestionStageSchema = z.strictObject({
+    ...envelopeShape,
+    type: z.literal('ingestion'),
+    ...ingestionBodyShape,
+});
+export const transformationStageSchema = z.strictObject({
+    ...envelopeShape,
+    type: z.literal('transformation'),
+    ...transformationBodyShape,
+});
+export const servingStageSchema = z.strictObject({
+    ...envelopeShape,
+    type: z.literal('serving'),
+    ...servingBodyShape,
+});
+/**
+ * A full stage spec: envelope + typed body, discriminated on `type`.
+ * The single source of truth for spec shapes — all TS types are inferred.
+ */
+export const stageSpecSchema = z
+    .discriminatedUnion('type', [ingestionStageSchema, transformationStageSchema, servingStageSchema])
+    .superRefine((spec, ctx) => {
+    // Symbolic-references-only invariant: reject literal credentials, webhook
+    // URLs, and connection strings anywhere in the spec. Use the segment
+    // array — record keys like `gold.players` contain dots, so splitting the
+    // display path would mis-place the issue.
+    for (const finding of scanForCredentialLikeStrings(spec)) {
+        ctx.addIssue({
+            code: 'custom',
+            path: [...finding.segments],
+            message: finding.reason,
+        });
+    }
+    refineCatalogBindingTargets({
+        binding: spec.type === 'transformation'
+            ? spec.config?.catalog
+            : spec.type === 'serving'
+                ? spec.source.catalog
+                : undefined,
+        environments: spec.environments,
+        path: spec.type === 'serving' ? ['source', 'catalog'] : ['config', 'catalog'],
+        ctx,
+    });
+    if (spec.type === 'transformation') {
+        for (const key of ['history_catalog', 'silver_catalog']) {
+            refineCatalogBindingTargets({
+                binding: spec.config?.[key],
+                environments: spec.environments,
+                path: ['config', key],
+                ctx,
+            });
+        }
+    }
+    switch (spec.type) {
+        case 'ingestion':
+            refineIngestionBody(spec, ctx);
+            break;
+        case 'transformation':
+            refineTransformationBody(spec, ctx);
+            break;
+        case 'serving':
+            refineServingBody(spec, ctx);
+            break;
+    }
+});
+//# sourceMappingURL=envelope.js.map

package/dist/envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../src/envelope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AACvD,OAAO,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAA;AAC/D,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAA;AAC9F,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAEzE;;;;;;;;;GASG;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,EAAE;KACR,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,gBAAgB,EAAE,yCAAyC,CAAC,CAAA;AAErE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,EAAE;KACR,KAAK,CAAC,qBAAqB,EAAE,qEAAqE,CAAC,CAAA;AAEtG,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,cAAc,CAAU,CAAA;AAC9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;AAGtD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,aAAa,EAAE,sBAAsB,EAAE,UAAU,CAAU,CAAA;AAChG,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;AAGpE,wGAAwG;AACxG,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,YAAY,CAAC;IACvC,iFAAiF;IACjF,SAAS,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACvC,0CAA0C;IAC1C,YAAY,EAAE,iBAAiB,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAA;AAIF,qFAAqF;AACrF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5C,CAAC,CAAA;AAIF;;;GAGG;AACH,MAAM,aAAa,GAAG;IACpB,+DAA+D;IAC/D,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5B,wFAAwF;IACxF,KAAK,EAAE,aAAa;IACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,MAAM,EAAE,CAAC;SACN,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;SAChB,GAAG,CAAC,CAAC,CAAC;SACN,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACtF,WAAW,EAAE,iBAAiB;IAC9B,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC/B,6CAA6C;IAC7C,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC3B,mBAAmB,EAAE,wBAAwB,CAAC,OAAO,CAAC,aAAa,CAAC;IACpE,+EAA+E;IAC/E,YAAY,EAAE,CAAC;SACZ,KAAK,CAAC,kBAAkB,CAAC;SACzB,GAAG,CAAC,CAAC,CAAC;SACN,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC9G,UAAU,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;CACtB,CAAA;AAEzB,SAAS,2BAA2B,CAAC,EACnC,OAAO,EACP,YAAY,EACZ,IAAI,EACJ,GAAG,GAMJ;IACC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAM;IAEnD,MAAM,aAAa,GAAG,YAAY,CAAC,CAAC,CAAC,CAAA;IACrC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACpD,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,aAAa;YAAE,SAAQ;QACvE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC;YACpC,OAAO,EAAE,mBAAmB,MAAM,8CAA8C;SACjF,CAAC,CAAA;IACJ,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,IAAI,MAAM,IAAI,OAAO,CAAC,SAAS;YAAE,SAAQ;QACzC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAC5B,OAAO,EAAE,gEAAgE,MAAM,GAAG;SACnF,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,YAAY,CAAC;IACjD,GAAG,aAAa;IAChB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC5B,GAAG,kBAAkB;CACtB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAY,CAAC;IACtD,GAAG,aAAa;IAChB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,GAAG,uBAAuB;CAC3B,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC/C,GAAG,aAAa;IAChB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,GAAG,gBAAgB;CACpB,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,kBAAkB,CAAC,MAAM,EAAE,CAAC,oBAAoB,EAAE,yBAAyB,EAAE,kBAAkB,CAAC,CAAC;KACjG,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,0EAA0E;IAC1E,qEAAqE;IACrE,yEAAyE;IACzE,0CAA0C;IAC1C,KAAK,MAAM,OAAO,IAAI,4BAA4B,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;YAC3B,OAAO,EAAE,OAAO,CAAC,MAAM;SACxB,CAAC,CAAA;IACJ,CAAC;IAED,2BAA2B,CAAC;QAC1B,OAAO,EACL,IAAI,CAAC,IAAI,KAAK,gBAAgB;YAC5B,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO;YACtB,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;gBACvB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;gBACrB,CAAC,CAAC,SAAS;QACjB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC;QAC7E,GAAG;KACJ,CAAC,CAAA;IACF,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACnC,KAAK,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,CAAU,EAAE,CAAC;YACjE,2BAA2B,CAAC;gBAC1B,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC;gBAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,IAAI,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC;gBACrB,GAAG;aACJ,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,WAAW;YACd,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;YAC9B,MAAK;QACP,KAAK,gBAAgB;YACnB,wBAAwB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;YACnC,MAAK;QACP,KAAK,SAAS;YACZ,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;YAC5B,MAAK;IACT,CAAC;AACH,CAAC,CAAC,CAAA"}

package/dist/errors.d.ts

@@ -0,0 +1,30 @@
+/**
+ * A spec failed to parse or validate. `file` is the repo-relative source file
+ * and `path` the dotted location within it (`feeds.games.cursor`), so CLI and
+ * CI output can point at the exact line of YAML to fix.
+ */
+export declare class SpecDefinitionError extends Error {
+    readonly file?: string | undefined;
+    readonly path?: string | undefined;
+    readonly name = "SpecDefinitionError";
+    constructor(message: string, file?: string | undefined, path?: string | undefined);
+}
+/**
+ * Enumerable resolution failure codes — the full set of ways
+ * `resolveSpec` can fail, so callers (deploy adapter, CLI, registry) can
+ * switch on them rather than string-match messages.
+ */
+export declare const RESOLUTION_ERROR_CODES: readonly ["missing_workspace_binding", "missing_credential_binding", "missing_alert_channel_binding", "unknown_target", "invalid_target_facts"];
+export type ResolutionErrorCode = (typeof RESOLUTION_ERROR_CODES)[number];
+/**
+ * Structured resolution failure. `code` is machine-readable; `subject` names
+ * the symbolic reference or target involved (e.g. the credential family that
+ * has no binding).
+ */
+export declare class SpecResolutionError extends Error {
+    readonly code: ResolutionErrorCode;
+    readonly subject?: string | undefined;
+    readonly name = "SpecResolutionError";
+    constructor(code: ResolutionErrorCode, message: string, subject?: string | undefined);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAK1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;IALxB,SAAkB,IAAI,yBAAwB;gBAG5C,OAAO,EAAE,MAAM,EACN,IAAI,CAAC,EAAE,MAAM,YAAA,EACb,IAAI,CAAC,EAAE,MAAM,YAAA;CAUzB;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,iJAMzB,CAAA;AAEV,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAA;AAEzE;;;;GAIG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAI1C,QAAQ,CAAC,IAAI,EAAE,mBAAmB;IAElC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM;IAL3B,SAAkB,IAAI,yBAAwB;gBAGnC,IAAI,EAAE,mBAAmB,EAClC,OAAO,EAAE,MAAM,EACN,OAAO,CAAC,EAAE,MAAM,YAAA;CAI5B"}

package/dist/errors.js

@@ -0,0 +1,47 @@
+/**
+ * A spec failed to parse or validate. `file` is the repo-relative source file
+ * and `path` the dotted location within it (`feeds.games.cursor`), so CLI and
+ * CI output can point at the exact line of YAML to fix.
+ */
+export class SpecDefinitionError extends Error {
+    file;
+    path;
+    name = 'SpecDefinitionError';
+    constructor(message, file, path) {
+        super(file
+            ? `${file}${path ? ` (${path})` : ''}: ${message}`
+            : path
+                ? `${path}: ${message}`
+                : message);
+        this.file = file;
+        this.path = path;
+    }
+}
+/**
+ * Enumerable resolution failure codes — the full set of ways
+ * `resolveSpec` can fail, so callers (deploy adapter, CLI, registry) can
+ * switch on them rather than string-match messages.
+ */
+export const RESOLUTION_ERROR_CODES = [
+    'missing_workspace_binding',
+    'missing_credential_binding',
+    'missing_alert_channel_binding',
+    'unknown_target',
+    'invalid_target_facts',
+];
+/**
+ * Structured resolution failure. `code` is machine-readable; `subject` names
+ * the symbolic reference or target involved (e.g. the credential family that
+ * has no binding).
+ */
+export class SpecResolutionError extends Error {
+    code;
+    subject;
+    name = 'SpecResolutionError';
+    constructor(code, message, subject) {
+        super(message);
+        this.code = code;
+        this.subject = subject;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAKjC;IACA;IALO,IAAI,GAAG,qBAAqB,CAAA;IAE9C,YACE,OAAe,EACN,IAAa,EACb,IAAa;QAEtB,KAAK,CACH,IAAI;YACF,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,EAAE;YAClD,CAAC,CAAC,IAAI;gBACJ,CAAC,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE;gBACvB,CAAC,CAAC,OAAO,CACd,CAAA;QATQ,SAAI,GAAJ,IAAI,CAAS;QACb,SAAI,GAAJ,IAAI,CAAS;IASxB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,2BAA2B;IAC3B,4BAA4B;IAC5B,+BAA+B;IAC/B,gBAAgB;IAChB,sBAAsB;CACd,CAAA;AAIV;;;;GAIG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAIjC;IAEA;IALO,IAAI,GAAG,qBAAqB,CAAA;IAE9C,YACW,IAAyB,EAClC,OAAe,EACN,OAAgB;QAEzB,KAAK,CAAC,OAAO,CAAC,CAAA;QAJL,SAAI,GAAJ,IAAI,CAAqB;QAEzB,YAAO,GAAP,OAAO,CAAS;IAG3B,CAAC;CACF"}

package/dist/graph-references.d.ts

@@ -0,0 +1,34 @@
+import { type ColumnMap, type ColumnsOrRef } from './columns.js';
+import type { StageSpec } from './envelope.js';
+/**
+ * Edge extraction for graph validation: which assets a stage consumes and
+ * which stages its schedule chains off. Pure lookups shared by reference
+ * resolution, trigger-target validation, and cycle detection.
+ */
+export interface ConsumedReference {
+    /** Logical asset id the reference points at. */
+    readonly id: string;
+    readonly producerStage: string;
+    /** Column names the consumer narrows to (undefined = whole asset). */
+    readonly columns?: readonly string[];
+    readonly loose: boolean;
+    readonly path: string;
+}
+export declare function consumedReferences(spec: StageSpec): ConsumedReference[];
+/** `after:` scheduling targets — transformation `trigger.after[]` and serving `trigger.after`. */
+export declare function triggerTargets(spec: StageSpec): string[];
+/** Stages a stage depends on (graph edges for cycle detection). */
+export declare function upstreamStages(spec: StageSpec): string[];
+/** Columns when resolved; undefined for an unresolved ref (reported as `unresolved_schema_ref`). */
+export declare const softColumns: (columns: ColumnsOrRef) => ColumnMap | undefined;
+/**
+ * Columns positions still holding a `schema_ref` — loaded specs never have
+ * any (the loader resolves them); direct SDK callers get a structured
+ * `unresolved_schema_ref` finding instead of an exception, and the affected
+ * column checks degrade to skipped.
+ */
+export declare function unresolvedSchemaRefs(spec: StageSpec): Array<{
+    path: string;
+    ref: string;
+}>;
+//# sourceMappingURL=graph-references.d.ts.map

package/dist/graph-references.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-references.d.ts","sourceRoot":"","sources":["../src/graph-references.ts"],"names":[],"mappings":"AACA,OAAO,EAAe,KAAK,SAAS,EAAE,KAAK,YAAY,EAAE,MAAM,cAAc,CAAA;AAC7E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAE9C;;;;GAIG;AAEH,MAAM,WAAW,iBAAiB;IAChC,gDAAgD;IAChD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,sEAAsE;IACtE,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,SAAS,GAAG,iBAAiB,EAAE,CA8BvE;AAED,kGAAkG;AAClG,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,EAAE,CAIxD;AAED,mEAAmE;AACnE,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,EAAE,CAKxD;AAED,oGAAoG;AACpG,eAAO,MAAM,WAAW,GAAI,SAAS,YAAY,KAAG,SAAS,GAAG,SACpB,CAAA;AAE5C;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,SAAS,GAAG,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAkB1F"}

package/dist/graph-references.js

@@ -0,0 +1,81 @@
+import { isLakebaseCdfInput } from './bodies/transformation.js';
+import { isSchemaRef } from './columns.js';
+export function consumedReferences(spec) {
+    if (spec.type === 'transformation') {
+        const references = [];
+        spec.inputs.forEach((input, index) => {
+            if (isLakebaseCdfInput(input))
+                return;
+            const asset = input.feed ?? input.output;
+            // Shape validation guarantees exactly one of feed/output.
+            if (asset === undefined)
+                return;
+            references.push({
+                id: `${input.stage}.${asset}`,
+                producerStage: input.stage,
+                columns: input.columns,
+                loose: input.declared_loose === true,
+                path: `inputs.${index}`,
+            });
+        });
+        return references;
+    }
+    if (spec.type === 'serving') {
+        if (spec.source.external)
+            return [];
+        return [
+            {
+                id: `${spec.source.stage}.${spec.source.output}`,
+                producerStage: spec.source.stage,
+                loose: false,
+                path: 'source',
+            },
+        ];
+    }
+    return [];
+}
+/** `after:` scheduling targets — transformation `trigger.after[]` and serving `trigger.after`. */
+export function triggerTargets(spec) {
+    if (spec.type === 'transformation')
+        return spec.trigger.after ?? [];
+    if (spec.type === 'serving' && spec.trigger)
+        return [spec.trigger.after];
+    return [];
+}
+/** Stages a stage depends on (graph edges for cycle detection). */
+export function upstreamStages(spec) {
+    const upstream = new Set();
+    for (const reference of consumedReferences(spec))
+        upstream.add(reference.producerStage);
+    for (const target of triggerTargets(spec))
+        upstream.add(target);
+    return [...upstream];
+}
+/** Columns when resolved; undefined for an unresolved ref (reported as `unresolved_schema_ref`). */
+export const softColumns = (columns) => isSchemaRef(columns) ? undefined : columns;
+/**
+ * Columns positions still holding a `schema_ref` — loaded specs never have
+ * any (the loader resolves them); direct SDK callers get a structured
+ * `unresolved_schema_ref` finding instead of an exception, and the affected
+ * column checks degrade to skipped.
+ */
+export function unresolvedSchemaRefs(spec) {
+    const unresolved = [];
+    if (spec.type === 'transformation') {
+        for (const [asset, output] of Object.entries(spec.outputs)) {
+            if (isSchemaRef(output.columns)) {
+                unresolved.push({ path: `outputs.${asset}.columns`, ref: output.columns.schema_ref });
+            }
+        }
+        spec.inputs.forEach((input, index) => {
+            if (isLakebaseCdfInput(input) && isSchemaRef(input.columns)) {
+                unresolved.push({ path: `inputs.${index}.columns`, ref: input.columns.schema_ref });
+            }
+        });
+    }
+    if (spec.type === 'serving' && isSchemaRef(spec.projection.columns)) {
+        unresolved.push({ path: 'projection.columns', ref: spec.projection.columns.schema_ref });
+    }
+    return unresolved;
+}
+//# sourceMappingURL=graph-references.js.map

package/dist/graph-references.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-references.js","sourceRoot":"","sources":["../src/graph-references.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,EAAE,WAAW,EAAqC,MAAM,cAAc,CAAA;AAmB7E,MAAM,UAAU,kBAAkB,CAAC,IAAe;IAChD,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACnC,MAAM,UAAU,GAAwB,EAAE,CAAA;QAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACnC,IAAI,kBAAkB,CAAC,KAAK,CAAC;gBAAE,OAAM;YACrC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAA;YACxC,0DAA0D;YAC1D,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAM;YAC/B,UAAU,CAAC,IAAI,CAAC;gBACd,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,EAAE;gBAC7B,aAAa,EAAE,KAAK,CAAC,KAAK;gBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,KAAK,CAAC,cAAc,KAAK,IAAI;gBACpC,IAAI,EAAE,UAAU,KAAK,EAAE;aACxB,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QACF,OAAO,UAAU,CAAA;IACnB,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAA;QACnC,OAAO;YACL;gBACE,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;gBAChD,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;gBAChC,KAAK,EAAE,KAAK;gBACZ,IAAI,EAAE,QAAQ;aACf;SACF,CAAA;IACH,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,cAAc,CAAC,IAAe;IAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAA;IACnE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACxE,OAAO,EAAE,CAAA;AACX,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,cAAc,CAAC,IAAe;IAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,KAAK,MAAM,SAAS,IAAI,kBAAkB,CAAC,IAAI,CAAC;QAAE,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;IACvF,KAAK,MAAM,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC;QAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC/D,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAA;AACtB,CAAC;AAED,oGAAoG;AACpG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAqB,EAAyB,EAAE,CAC1E,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAA;AAE5C;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAe;IAClD,MAAM,UAAU,GAAyC,EAAE,CAAA;IAC3D,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3D,IAAI,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,KAAK,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;YACvF,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACnC,IAAI,kBAAkB,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5D,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,KAAK,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;YACrF,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACpE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;IAC1F,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC"}

package/dist/graph.d.ts

@@ -0,0 +1,112 @@
+import { z } from 'zod';
+import { type PostgresSnapshotBindings } from './snapshot-transport.js';
+import { type OrmContractCatalog } from './orm-satisfies.js';
+import type { StageSpec } from './envelope.js';
+/**
+ * Offline repo-level graph validation: a Pipeline's stages form a DAG through
+ * declared inputs/outputs. `validateSpecGraph` resolves references, enforces
+ * single-writer-per-physical-asset, rejects cycles, and runs column checks —
+ * with ZERO I/O, so the CI gate can run without network or database.
+ */
+export declare const GRAPH_FINDING_CODES: readonly ["snapshot_source_shape_mismatch", "duplicate_stage_id", "single_writer_violation", "unresolved_reference", "unresolved_trigger_target", "cycle_detected", "column_not_produced", "projection_column_missing", "projection_incompatible", "sync_mode_incompatible", "no_inputs_declared", "unresolved_schema_ref", "orm_contract_unavailable", "orm_contract_hash_mismatch", "orm_contract_pk_mismatch", "orm_contract_incompatible", "serving_source_catalog_mismatch"];
+export type GraphFindingCode = (typeof GRAPH_FINDING_CODES)[number];
+export interface GraphFinding {
+    readonly code: GraphFindingCode;
+    readonly severity: 'error' | 'warning';
+    readonly message: string;
+    /** Stage the finding is attached to (usually the consumer). */
+    readonly stage?: string;
+    /** Logical asset id (`<stage>.<asset>`) involved. */
+    readonly asset?: string;
+    /** Consumer stages affected (breaking-change reporting). */
+    readonly consumers?: readonly string[];
+    /** Near-miss candidates for unresolved references. */
+    readonly suggestions?: readonly string[];
+    /** Stage cycle, in order, for cycle_detected. */
+    readonly cycle_path?: readonly string[];
+}
+export interface GraphValidationResult {
+    readonly ok: boolean;
+    readonly findings: readonly GraphFinding[];
+}
+/**
+ * Cross-Pipeline references resolve against a registry **asset export**
+ * supplied by the caller — keeps the SDK offline-capable. Keys are logical
+ * asset ids (`<stage>.<asset>`, e.g. `billing-silver.silver.coding_usage`).
+ *
+ * Evolution contract: `schema_version` is the explicit format version — the
+ * registry bumps it on breaking export changes and consumers reject versions
+ * they don't understand. Objects stay STRICT in v1 (unknown keys are a
+ * version bump, never silently ignored), so producers can't leak fields the
+ * gate doesn't validate.
+ */
+export declare const externalAssetsExportSchema: z.ZodObject<{
+    schema_version: z.ZodLiteral<1>;
+    assets: z.ZodRecord<z.ZodString, z.ZodObject<{
+        columns: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            type: z.ZodUnion<readonly [z.ZodEnum<{
+                string: "string";
+                boolean: "boolean";
+                uuid: "uuid";
+                int: "int";
+                long: "long";
+                numeric: "numeric";
+                double: "double";
+                timestamp: "timestamp";
+                date: "date";
+                json: "json";
+            }>, z.ZodEnum<{
+                float: "float";
+                timestamp_ntz: "timestamp_ntz";
+                array: "array";
+                map: "map";
+                struct: "struct";
+                binary: "binary";
+            }>, z.ZodString]>;
+            nullable: z.ZodDefault<z.ZodBoolean>;
+            key: z.ZodDefault<z.ZodBoolean>;
+            domain: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
+            description: z.ZodOptional<z.ZodString>;
+            on_violation: z.ZodDefault<z.ZodEnum<{
+                fail: "fail";
+                quarantine: "quarantine";
+                warn: "warn";
+            }>>;
+        }, z.core.$strict>>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ExternalAssetsExport = z.infer<typeof externalAssetsExportSchema>;
+/** Check physical ownership across local and already deployed stages. */
+export declare function validateWriteOwnership(stages: readonly StageSpec[], options?: Pick<ValidateSpecGraphOptions, 'catalog' | 'deployTarget' | 'postgresSnapshotBindings'> & {
+    readonly externalStages?: readonly StageSpec[];
+}): GraphFinding[];
+export interface ValidateSpecGraphOptions {
+    readonly postgresSnapshotBindings?: PostgresSnapshotBindings;
+    /**
+     * Active ORM synced-table contracts keyed by `namespace.table`. When a
+     * serving stage declares `satisfies`, this catalog is required — omitting
+     * it (or missing the entry) is a graph error so drift checks never fail
+     * open. Offline CI supplies `orm-contracts.json` or `--orm-contracts`;
+     * production deploy plans load via `loadOrmContractCatalog`.
+     */
+    readonly ormContracts?: OrmContractCatalog;
+    /**
+     * Deploy-target UC catalog. When set, transformation single-writer keys
+     * are `<publish-catalog>.<asset>` (publish catalog = `config.catalog` or
+     * this value) so an unpinned writer and a writer pinned to the deploy
+     * catalog collide. Omit for offline validate without a target.
+     */
+    readonly catalog?: string;
+    /** Deploy target used to select target-aware catalog bindings. */
+    readonly deployTarget?: string;
+}
+/**
+ * Validate a Pipeline's stage graph offline. `externalAssets` (a registry
+ * export) resolves cross-Pipeline references; without it, every reference
+ * must resolve in-repo. Zero I/O.
+ *
+ * Pass `options.ormContracts` to enforce serving `satisfies:` against active
+ * ORM synced-table contracts (SEQ-2499).
+ */
+export declare function validateSpecGraph(definitions: readonly StageSpec[], externalAssets?: ExternalAssetsExport, options?: ValidateSpecGraphOptions): GraphValidationResult;
+//# sourceMappingURL=graph.d.ts.map

package/dist/graph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph.d.ts","sourceRoot":"","sources":["../src/graph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAgD,KAAK,wBAAwB,EAAE,MAAM,yBAAyB,CAAA;AAcrH,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,oBAAoB,CAAA;AAE3B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAE9C;;;;;GAKG;AAEH,eAAO,MAAM,mBAAmB,mdAkBtB,CAAA;AAEV,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAA;AAEnE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAA;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,qDAAqD;IACrD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,sDAAsD;IACtD,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACxC,iDAAiD;IACjD,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACxC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAA;IACpB,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAA;CAC3C;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAQrC,CAAA;AAEF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAiO7E,yEAAyE;AACzE,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,SAAS,EAAE,EAC5B,OAAO,CAAC,EAAE,IAAI,CAAC,wBAAwB,EAAE,SAAS,GAAG,cAAc,GAAG,0BAA0B,CAAC,GAAG;IAClG,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,SAAS,EAAE,CAAA;CAC/C,GACA,YAAY,EAAE,CAMhB;AAsDD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,wBAAwB,CAAA;IAC5D;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,kBAAkB,CAAA;IAC1C;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,kEAAkE;IAClE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAC/B;AAsND;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,SAAS,SAAS,EAAE,EACjC,cAAc,CAAC,EAAE,oBAAoB,EACrC,OAAO,CAAC,EAAE,wBAAwB,GACjC,qBAAqB,CAsEvB"}