Struct ExecuteOptions 

pub struct ExecuteOptions {

    pub pipeline_name: String,
    pub execution: Option<ExecutionSpec>,
    pub dry_run: bool,
    pub limit: Option<usize>,
    pub state_path_override: Option<PathBuf>,
    pub shard: Option<ShardSpec>,
    pub auth: AuthCatalog,
    pub clock: DateTime<FixedOffset>,
    pub cancel: Option<CancellationToken>,
    pub resilience: Option<ResiliencePolicy>,
    pub sla: Option<SlaSpec>,
    pub lineage: Option<Arc<LineageEmitter>>,
    pub lineage_cfg: Option<LineageConfig>,
    pub notifier: Option<Arc<Notifier>>,
    pub catalog: Option<CatalogHandle>,
}

Knobs passed to run_expanded.

Fields

pipeline_name: String

Pipeline name — used in log lines and as the first segment of every state key.

execution: Option<ExecutionSpec>

Override for execution.max_concurrent. None → use the value in ExecutionSpec or the default (num_cpus::get().min(4), floored at 1).

dry_run: bool

--dry-run — every sink is replaced with a no-op counter.

limit: Option<usize>

--limit N — wraps every sink to drop records past the cap.

state_path_override: Option<PathBuf>

--state-path PATH — overrides the file state-store path.

shard: Option<ShardSpec>

Clustered Mode B (#230): narrow this run’s single source to one shard before streaming, and suffix its state key with the shard id so resume is per-shard. None (the default) runs the whole source unchanged. Only set by the serve shard executor; every other caller leaves it None.

auth: AuthCatalog

Shared auth providers built from the top-level auth: block. Connectors that reference one via auth: { ref } resolve against this catalog; every row sharing a provider gets the same Arc (one token, shared).

clock: DateTime<FixedOffset>

Wall-clock instant for ${now.*} interpolation in this run’s configs. faucet run sets process-start (or --clock); faucet schedule sets the tick’s scheduled time in the schedule timezone.

cancel: Option<CancellationToken>

Optional external cancellation token. When set and cancelled, in-flight invocations stop at their next page boundary and flush their sinks (so buffered output like a Parquet footer is durable), rather than being hard-dropped (#146 H16). faucet serve wires this to run-cancel / timeout / shutdown; faucet run leaves it None.

resilience: Option<ResiliencePolicy>

Optional resilience policy (retry/backoff/circuit-breaker/poison), attached to every invocation’s RunStreamOptions and injected into rest/xml/graphql sources. Built once from the top-level resilience: block; None preserves today’s behaviour.

sla: Option<SlaSpec>

Optional freshness/volume SLA (#202), evaluated after every root invocation against history persisted in the node’s state store. Violations emit metrics + warnings; they never fail the run. None disables the pass entirely.

lineage: Option<Arc<LineageEmitter>>

Available on crate feature lineage only.

Shared OpenLineage emitter, built once from the lineage: block. None disables lineage (and adds zero overhead). Gated on the lineage feature.

lineage_cfg: Option<LineageConfig>

Available on crate feature lineage only.

The resolved lineage: config block (facet/event toggles, sampling, job name template). Carried alongside the emitter so run_one_invocation knows which facets/events to assemble. Gated on the lineage feature.

notifier: Option<Arc<Notifier>>

Available on crate feature notify only.

Optional notification/incident-routing notifier (#280), built once from the top-level notifications: block and shared across invocations. Fires run success/failure, SLA breach, circuit-open, contract-abort, and DLQ-threshold events after every root invocation. None disables notifications entirely (zero overhead). Gated on the notify feature.

catalog: Option<CatalogHandle>

Available on crate feature catalog only.

Optional Data Movement Catalog store (#279), recorded into after every successful root invocation (dataset identity, schema timeline, volume/freshness, lineage edge). faucet serve passes its run-history backend + the serve run id; the CLI runtimes connect one from the catalog: block. None disables recording entirely (zero overhead). Recording never fails the run. Gated on the catalog feature.