Module spec_input 

Cell spec path reading (O_NOFOLLOW on Unix) and NATS subject template resolution.

Constants

TENANT_ID_DEFAULT_TOKEN

Token substituted for {tenantId} when a spec has no correlation.tenantId.

Functions

read_cell_spec

Read the cell spec. If path is -, reads the entire document from stdin (no O_NOFOLLOW; caller supplies bytes from a sealed pipe or CI artifact). Otherwise reads from a file: on Unix, opens with O_NOFOLLOW on the final path component so a swapped-in symlink cannot be followed.

resolve_event_subject

Resolve the NATS event subject for this supervisor run.

spec_sha256

Compute the SHA-256 of raw spec bytes and return the lowercase hex digest.