quicue.ca

1. Import a provider

import "quicue.ca/template/govc/patterns"

actions: patterns.#GovcRegistry

2. Define resources

import "quicue.ca/vocab"

resources: {[string]: vocab.#Resource}
resources: web01: {
  type: "vm"
  host: "esxi-01"
}

3. Query the graph

cue export . -e actions --out json
cue export . -e jsonld --out json

#InfraGraph

Converts resources into a dependency graph with computed depth, ancestors, topology layers, roots, and leaves.

infra: patterns.#InfraGraph & {
  Input: _resources
}
// infra.resources.dns._depth
// infra.topology, infra.roots

#ExecutionPlan

Unifies binding + ordering. Single input produces resolved commands, graph topology, and deployment layers.

exec: patterns.#ExecutionPlan & {
  resources: _resources
  providers: _providers
}
// exec.plan.layers
// exec.cluster.bound

#DeploymentPlan

Layer-by-layer deployment sequence with gate checkpoints between layers.

deploy: patterns.#DeploymentPlan & {
  Graph: infra
}
// deploy.layers
// deploy.startup_sequence

#ImpactQuery

What breaks if X fails? Finds all resources that transitively depend on a target.

impact: patterns.#ImpactQuery & {
  Graph: infra
  Target: "dns-primary"
}
// impact.affected, impact.affected_count

#BlastRadius

Full impact analysis: affected resources, rollback order, startup order, safe peers at the same layer.

blast: patterns.#BlastRadius & {
  Graph: infra
  Target: "dns"
}
// blast.rollback_order
// blast.safe_peers

#HealthStatus

Propagate health through the graph. If a resource is down, all dependents become degraded.

health: patterns.#HealthStatus & {
  Graph: infra
  Status: {"vault": "down"}
}
// health.propagated.web == "degraded"

#SinglePointsOfFailure

Find resources with dependents but no peer of the same type at the same layer.

spof: patterns.#SinglePointsOfFailure & {
  Graph: infra
}
// spof.risks

#TOONExport

Token-Oriented Object Notation — reduces LLM token cost ~55% by grouping resources into compact tables.

toon: patterns.#TOONExport & {
  resources: _resources
}
// toon.output (compact tables)

#OpenAPISpec

Generate OpenAPI 3.0.3 from bound commands. Every resource/provider/action becomes a POST endpoint.

api: patterns.#OpenAPISpec & {
  Cluster: cluster
  Info: {title: "Ops API"}
}
// api.spec (valid OpenAPI JSON)

Jupyter Notebooks

Executable .ipynb runbooks. Each deployment layer becomes a section with gate checks and executable command cells.

cue export ./examples/datacenter/   -e notebook --out json   > deploy.ipynb

Rundeck Jobs

YAML job definitions grouped by layer and provider. Import into Rundeck for scheduled, self-service execution with RBAC.

cue export ./examples/datacenter/   -e rundeck --out yaml   > jobs.yaml

Auto-Docs

MkDocs wiki generated from infrastructure graphs. Per-resource, per-type, per-host pages with Mermaid dependency graphs.

CAB Reports

Change Advisory Board reports generated from CUE. Impact analysis, blast radius, deployment runbooks, rollback plans.

GitLab CI

Reusable CI templates for CUE validation, export, topology analysis, impact assessment, and Pages deployment.

SPARQL

Load catalogue.jsonld into Oxigraph. Query providers, actions, and categories as linked data.

SELECT ?p ?cat WHERE {
  ?p a quicue:Provider ;
     quicue:category ?cat .
}

OpenAPI 3.0.3

654 paths — every bound command exposed as a POST endpoint. Organized by resource, provider, and action.

How binding works

// 1. Resource declares @type
"router-core": {"@type": {Router: true}}

// 2. Provider matches by type overlap
vyos: {types: {Router: true}, registry: ...}

// 3. #BindCluster resolves ALL templates
// Output: concrete commands, zero placeholders

Export commands

cue export ./examples/datacenter/ \
  -e output.commands --out json

cue export ./examples/datacenter/ \
  -e openapi_spec --out json

JSON-LD

Full provider graph as linked data. Load into Oxigraph for SPARQL queries.

JSON

Structured catalogue data for tooling and automation.

CUE Source

Every provider is a CUE package. Import and unify.