V2 compiler convergence

Cargo.toml

@@ -35,7 +35,7 @@ edition = "2021"
 license = "MIT"
 
 [workspace.dependencies]
-serde = { version = "1.0", features = ["derive"] }
+serde = { version = "1.0", features = ["derive", "rc"] }
 serde_json = "1.0"
 thiserror = "1.0"
 toml = "0.8"

dsl/extdeps/cargo.dag

@@ -4,13 +4,13 @@
 // features, and command behaviors.
 //
 // Consumers:
-//   tools/clippy.dag          — clippy lint workflow
-//   config/build_commands.dag — build command composition
-//   tools/build.dag           — build workflow
+//   tools/clippy.dag          -- clippy lint workflow
+//   config/build_commands.dag -- build command composition
+//   tools/build.dag           -- build workflow
 
 module extdeps.cargo
 
-// ── Package model ─────────────────────────────────────────────────
+// -- Package model -------------------------------------------------
 
 type CargoPackage {
   name: String
@@ -19,7 +19,7 @@ type CargoPackage {
   path: String
 }
 
-// ── Targets ───────────────────────────────────────────────────────
+// -- Targets -------------------------------------------------------
 
 type CargoTarget
   = Lib
@@ -28,7 +28,7 @@ type CargoTarget
   | Example { name: String }
   | Bench { name: String }
 
-// ── Profiles ──────────────────────────────────────────────────────
+// -- Profiles ------------------------------------------------------
 // Cargo allows arbitrary user-defined profiles in Cargo.toml
 // (e.g., [profile.ci-optimized]). Use String to avoid a closed-world
 // enum that cannot represent valid workspaces.
@@ -37,28 +37,28 @@ type CargoProfile = String
 
 data canonical_profiles: List<String> = ["dev", "release", "test", "bench"]
 
-// ── Features ──────────────────────────────────────────────────────
+// -- Features ------------------------------------------------------
 
 type CargoFeature {
   name: String
   dependencies: List<String>
 }
 
-// ── Test harness ──────────────────────────────────────────────────
+// -- Test harness --------------------------------------------------
 
 type TestHarness = Harness | NoHarness
 
-// ── Commands ──────────────────────────────────────────────────────
+// -- Commands ------------------------------------------------------
 
 type CargoCommand = CargoBuild | CargoTest | CargoClippy | CargoDoc | CargoRun | CargoCheck | CargoBench | CargoPublish
 
-// ── Constants ─────────────────────────────────────────────────────
+// -- Constants -----------------------------------------------------
 
 data default_edition: String = "2021"
 
 data default_profile: CargoProfile = "dev"
 
-// ── Service: shell transport wiring ─────────────────────────────
+// -- Service: shell transport wiring -----------------------------
 
 service cargo.Build {
   operation Build {

dsl/extdeps/cloud/cloud.dag

@@ -1,16 +1,16 @@
 // extdeps/cloud/core.dag -- "What is a cloud provider?"
 //
 // Universal concepts shared across GCP, AWS, and Azure.
-// Types only — concrete values live in provider-specific core.dag files.
+// Types only -- concrete values live in provider-specific core.dag files.
 //
 // Consumers:
-//   extdeps/cloud/gcp/core.dag   — GCP-specific identity, endpoints
-//   extdeps/cloud/aws/core.dag   — AWS-specific ARNs, SigV4
-//   extdeps/cloud/azure/core.dag — Azure-specific tenants, subscriptions
+//   extdeps/cloud/gcp/core.dag   -- GCP-specific identity, endpoints
+//   extdeps/cloud/aws/core.dag   -- AWS-specific ARNs, SigV4
+//   extdeps/cloud/azure/core.dag -- Azure-specific tenants, subscriptions
 
 module extdeps.cloud.cloud
 
-// ── Authentication schemes ────────────────────────────────────────
+// -- Authentication schemes ----------------------------------------
 // How cloud APIs authenticate requests. Each provider uses a subset.
 
 type CloudAuthScheme
@@ -19,46 +19,46 @@ type CloudAuthScheme
   | ApiKey
   | OidcToken { audience: String }
 
-// ── Service endpoints ─────────────────────────────────────────────
+// -- Service endpoints ---------------------------------------------
 
 type ServiceEndpoint {
   base_url: String
   version: String
   regional: Bool
 }
 
-// ── Rate limiting ─────────────────────────────────────────────────
+// -- Rate limiting -------------------------------------------------
 
 type RateLimitPolicy {
   requests_per_minute: Int
   burst: Int?
   scope: String
 }
 
-// ── Credentials ───────────────────────────────────────────────────
+// -- Credentials ---------------------------------------------------
 
 type Credential {
   scheme: CloudAuthScheme
   scopes: List<String>?
   expires_seconds: Int?
 }
 
-// ── Idempotency ───────────────────────────────────────────────────
+// -- Idempotency ---------------------------------------------------
 
 type IdempotencyToken {
   header: String
   format: String
 }
 
-// ── Quotas ────────────────────────────────────────────────────────
+// -- Quotas --------------------------------------------------------
 
 type CloudQuota {
   resource: String
   limit: Int
   scope: String
 }
 
-// ── Regions ───────────────────────────────────────────────────────
+// -- Regions -------------------------------------------------------
 
 type CloudRegion {
   provider: String

dsl/extdeps/cloud/gcp/gcp.dag

@@ -9,23 +9,23 @@
 //
 // Consumers:
 //   extdeps/cloud/gcp/{storage,pubsub,iam,secret_manager,cloud_run,sts}.dag
-//   gunbc/auth/patterns.dag         — credential chain
+//   gunbc/auth/patterns.dag         -- credential chain
 
 module extdeps.cloud.gcp.gcp
 
 import extdeps.cloud.cloud { ServiceEndpoint, CloudAuthScheme }
 import std.types { FilePath, NonEmptyStr, Secret }
 import std.errors { GcpErrorShape }
 
-// ── Projects ──────────────────────────────────────────────────────
+// -- Projects ------------------------------------------------------
 
 type GcpProject {
   project_id: String
   project_number: Int
   name: String
 }
 
-// ── Service accounts ──────────────────────────────────────────────
+// -- Service accounts ----------------------------------------------
 
 type GcpServiceAccount {
   email: String
@@ -34,7 +34,7 @@ type GcpServiceAccount {
   disabled: Bool
 }
 
-// ── OAuth2 scopes ─────────────────────────────────────────────────
+// -- OAuth2 scopes -------------------------------------------------
 
 type OAuth2Scope {
   scope: String
@@ -49,7 +49,7 @@ data common_scopes: List<OAuth2Scope> = [
   { scope: "https://www.googleapis.com/auth/secretmanager", description: "Secret Manager access" }
 ]
 
-// ── Workload Identity Federation ──────────────────────────────────
+// -- Workload Identity Federation ----------------------------------
 
 type WifPool {
   name: String
@@ -65,7 +65,7 @@ type WifProvider {
   attribute_mapping: Map<String, String>?
 }
 
-// ── API endpoints ─────────────────────────────────────────────────
+// -- API endpoints -------------------------------------------------
 // Pattern: {service}.googleapis.com/{version}
 
 type GcpApiEndpoint {
@@ -83,7 +83,7 @@ data api_endpoints: List<GcpApiEndpoint> = [
   { service: "sts", base_url: "https://sts.googleapis.com/v1", version: "v1" }
 ]
 
-// ── Regions ───────────────────────────────────────────────────────
+// -- Regions -------------------------------------------------------
 
 type GcpRegion {
   name: String
@@ -100,7 +100,7 @@ data regions: List<GcpRegion> = [
   { name: "eu", zones: [], multi_region: true }
 ]
 
-// ── Service: GCP auth operations (shell + REST transport) ───────
+// -- Service: GCP auth operations (shell + REST transport) -------
 
 service gcloud.Auth {
   operation Login {

dsl/extdeps/cloud/gcp/iam.dag

@@ -4,15 +4,15 @@
 // chains, token lifetimes.
 //
 // Consumers:
-//   gunbc/auth/patterns.dag        — credential_chain pattern
-//   gunbc/auth/patterns.dag        — credential_chain pattern
+//   gunbc/auth/patterns.dag        -- credential_chain pattern
+//   gunbc/auth/patterns.dag        -- credential_chain pattern
 
 module extdeps.cloud.gcp.iam
 
 import extdeps.cloud.gcp.gcp { GcpServiceAccount, GcpProject }
 import std.errors { GcpErrorShape }
 
-// ── Roles ─────────────────────────────────────────────────────────
+// -- Roles ---------------------------------------------------------
 
 type GcpRole {
   name: String
@@ -32,7 +32,7 @@ data common_roles: List<GcpRole> = [
   { name: "roles/run.invoker", title: "Cloud Run Invoker", permissions: null, predefined: true }
 ]
 
-// ── Bindings & policies ───────────────────────────────────────────
+// -- Bindings & policies -------------------------------------------
 
 type IamCondition {
   title: String
@@ -52,15 +52,15 @@ type GcpPolicy {
   version: Int
 }
 
-// ── Impersonation ─────────────────────────────────────────────────
+// -- Impersonation -------------------------------------------------
 
 type ImpersonationChain {
   source: String
   target: String
   delegates: List<String>
 }
 
-// ── Token lifetimes ───────────────────────────────────────────────
+// -- Token lifetimes -----------------------------------------------
 
 type TokenLifetime {
   default_seconds: Int
@@ -72,7 +72,7 @@ data default_token_lifetime: TokenLifetime = {
   max_seconds: 43200
 }
 
-// ── Service: REST transport wiring ──────────────────────────────
+// -- Service: REST transport wiring ------------------------------
 
 service gcp.IAM {
   config {

dsl/extdeps/cloud/gcp/secret_manager.dag

@@ -7,14 +7,14 @@
 // behavioral specs for coordination/access patterns).
 //
 // Consumers:
-//   gunbc/auth/patterns.dag    — credential-chain secret access
+//   gunbc/auth/patterns.dag    -- credential-chain secret access
 
 module extdeps.cloud.gcp.secret_manager
 
 import extdeps.cloud.gcp.gcp { GcpProject }
 import std.errors { GcpErrorShape }
 
-// ── Replication ───────────────────────────────────────────────────
+// -- Replication ---------------------------------------------------
 
 type SmReplica {
   location: String
@@ -24,7 +24,7 @@ type SmReplication
   = Automatic
   | UserManaged { replicas: List<SmReplica> }
 
-// ── Secrets ───────────────────────────────────────────────────────
+// -- Secrets -------------------------------------------------------
 
 type GcpSecret {
   name: String
@@ -34,7 +34,7 @@ type GcpSecret {
   create_time: String
 }
 
-// ── Versions ──────────────────────────────────────────────────────
+// -- Versions ------------------------------------------------------
 
 type SmVersionState = SmEnabled | SmDisabled | SmDestroyed
 
@@ -44,26 +44,26 @@ type GcpSecretVersion {
   create_time: String
 }
 
-// ── Payload ───────────────────────────────────────────────────────
+// -- Payload -------------------------------------------------------
 
 type SecretPayload {
   data: Bytes
 }
 
-// ── Rotation ──────────────────────────────────────────────────────
+// -- Rotation ------------------------------------------------------
 
 type SmRotationSchedule {
   next_rotation_time: String?
   rotation_period_seconds: Int?
 }
 
-// ── Constants ─────────────────────────────────────────────────────
+// -- Constants -----------------------------------------------------
 
 data max_secret_size_bytes: Int = 65536
 
 data max_versions: Int = 1000
 
-// ── Service: REST transport wiring ──────────────────────────────
+// -- Service: REST transport wiring ------------------------------
 
 service gcp.SecretManager {
   config {