dag-typesafe

This is intended to generate pipeline source from local JSON inputs. It contains no evident malware or network exfiltration, but untrusted plan or registry data can inject code into generated Python or TypeScript, especially through `registry_ref` and unescaped identifiers; generated output should only be produced from trusted inputs. The supplied fragment also appears syntactically invalid as written. Severity is a security warning for code generation with untrusted inputs.