@backthread/extractor 0.1.0

package/dist/infra/kamal/kamal.js

@@ -0,0 +1,162 @@
+// the Kamal InfraAdapter (net-new infra coverage, child of ).
+//
+// Kamal (Basecamp/DHH) builds a Docker image from your repo and deploys it to
+// VPS hosts (the Rails-world Heroku-replacement). It's image-referencing, so it
+// reuses the  image→source resolver, and self-hosted-container-shaped, so
+// it reuses the docker-compose image-role token map for its accessories.
+//
+// Kind mapping (locked 8-kind InfraModuleKind enum — map onto it, never weaken):
+//   the app `service` (built + deployed)        → container  (your code, an image)
+//   accessories, by image role (compose map):
+//     postgres/mysql/mongo/redis/…              → datastore
+//     kafka/rabbitmq/nats/…                     → queue
+//     anything else                             → container
+//
+// sourceRoots, in precedence order (deterministic, no LLM):
+//   1. `builder.context` — the explicit build-context dir (direct source).
+//   2. `builder.dockerfile` — its dir (direct source).
+//   3. else `image:` → the  resolver (image → in-repo Dockerfile build
+//      context). A repo-root build context ('' — the common root-Dockerfile
+//      monolith) is dropped: per the locked rule we NEVER emit a bare repo-root
+//      (it'd swallow siblings), so that code honestly stays "Other (not deployed)."
+// Accessories pull prebuilt images → they run no code of yours → no source root.
+//
+// Edges: app → accessory, verb by accessory kind (datastore→stores-in,
+// queue→publishes, else calls) — the docker-compose precedent.
+//
+// Zone label: "Kamal" (PROVIDER_ZONE_LABEL['kamal'] in assemble/zones.ts).
+// Config-only (reads config/deploy.yml + the repo's Dockerfiles, not app source);
+// the relevance gate catches config/deploy*.yml. Deterministic, no LLM.
+import { existsSync, readFileSync } from 'node:fs';
+import { join, relative } from 'node:path';
+import { findFiles } from '../walk.js';
+import { classifyImage } from '../compose/compose.js';
+import { buildDockerfileIndex, resolveImageToSourceRoots } from '../image-resolve.js';
+import { parseKamalConfig } from './kamal-parse.js';
+// `config/deploy.yml` + env-destination variants (`config/deploy.production.yml`),
+// path-scoped (a bare `deploy.yml` basename is too generic — CI files use it).
+const KAMAL_CONFIG_RE = /(^|\/)config\/deploy(\.[A-Za-z0-9_-]+)?\.ya?ml$/;
+/** The base config (no env suffix) — preferred when several variants exist. */
+const KAMAL_BASE_RE = /(^|\/)config\/deploy\.ya?ml$/;
+// ---------------------------------------------------------------------------
+// Path helpers (repo-relative, normalized) — same idiom as compose.ts/sst.ts.
+function normalizeRoot(p) {
+    return p.replace(/\\/g, '/').replace(/^\.(?:\/|$)/, '').replace(/\/+$/, '');
+}
+function dirOfPath(relPath) {
+    const n = normalizeRoot(relPath);
+    const i = n.lastIndexOf('/');
+    return i === -1 ? '' : n.slice(0, i);
+}
+// ---------------------------------------------------------------------------
+// Node-id helpers (adapter-local; registry prefixes `kamal:` at merge time).
+const appId = (service) => `app:${service}`;
+const accessoryId = (name) => `accessory:${name}`;
+// ---------------------------------------------------------------------------
+// the app's deployment-target source roots.
+/**
+ * The repo-relative source roots the Kamal app deploys. builder.context /
+ * builder.dockerfile are DIRECT signals (preferred); else the image ref is run
+ * through the  resolver. Repo-root resolutions are dropped (never a
+ * catch-all). Pure (the resolver index is injected). Deterministic + sorted.
+ */
+export function kamalAppSourceRoots(config, dockerfileIndex) {
+    const roots = new Set();
+    // 1 + 2 — direct builder signals (a `.`/repo-root context normalizes to '' and
+    // is dropped, falling through to the resolver).
+    const context = config.builder?.context ? normalizeRoot(config.builder.context) : '';
+    if (context)
+        roots.add(context);
+    const dfDir = config.builder?.dockerfile ? dirOfPath(config.builder.dockerfile) : '';
+    if (dfDir)
+        roots.add(dfDir);
+    // 3 — no direct signal → resolve the image to an in-repo Dockerfile context.
+    if (roots.size === 0 && config.image && dockerfileIndex) {
+        for (const r of resolveImageToSourceRoots(config.image, dockerfileIndex))
+            roots.add(r);
+    }
+    return [...roots].sort();
+}
+// ---------------------------------------------------------------------------
+// Pure graph builder. Parsed config + the Dockerfile index injected so it's
+// unit-testable with no real repo (the compose/render split).
+/** Edge verb for an app→accessory dependency, by the accessory's kind. */
+function accessoryVerb(kind) {
+    if (kind === 'datastore')
+        return 'stores-in';
+    if (kind === 'queue')
+        return 'publishes';
+    return 'calls';
+}
+export function buildKamalGraph(args, root) {
+    const { config, configFile, dockerfileIndex } = args;
+    const nodes = [];
+    const edges = [];
+    // The app service → a container (it runs YOUR code, built from a Dockerfile).
+    const appName = config.service ?? 'app';
+    const id = appId(appName);
+    const roots = kamalAppSourceRoots(config, dockerfileIndex);
+    nodes.push({
+        id,
+        label: appName,
+        kind: 'container',
+        provenance: 'declared',
+        metadata: { provider: 'kamal', config: configFile, ...(config.image ? { image: config.image } : {}) },
+        ...(roots.length ? { sourceRoots: roots } : {}),
+    });
+    // Accessories → classified by image role; pulled images run no code → no source.
+    for (const acc of config.accessories) {
+        const kind = acc.image ? classifyImage(acc.image) : 'container';
+        const accId = accessoryId(acc.name);
+        nodes.push({
+            id: accId,
+            label: acc.name,
+            kind,
+            provenance: 'declared',
+            metadata: { provider: 'kamal', config: configFile, ...(acc.image ? { image: acc.image } : {}) },
+        });
+        edges.push({ source: id, target: accId, kind: accessoryVerb(kind), metadata: { via: 'kamal-accessory' } });
+    }
+    return { root, adapter: 'kamal', nodes, edges, classificationsNeeded: [] };
+}
+// ---------------------------------------------------------------------------
+// Adapter.
+function findKamalConfigs(repoDir) {
+    // Match the REPO-RELATIVE path (not the absolute one) so the `config/deploy…`
+    // path-scoping can't be skewed by the repo's checkout location — consistent
+    // with extract()'s KAMAL_BASE_RE.test(rel(f)).
+    return findFiles(repoDir, (abs) => KAMAL_CONFIG_RE.test((relative(repoDir, abs) || abs).split('\\').join('/')), { maxDepth: 5 });
+}
+export const kamalAdapter = {
+    name: 'kamal',
+    async detect(repoDir) {
+        if (existsSync(join(repoDir, 'config', 'deploy.yml')) || existsSync(join(repoDir, 'config', 'deploy.yaml'))) {
+            return true;
+        }
+        if (findKamalConfigs(repoDir).length > 0)
+            return true;
+        // Secondary: the `.kamal/` dir (secrets/hooks) — present in a Kamal repo.
+        return existsSync(join(repoDir, '.kamal'));
+    },
+    async extract(repoDir) {
+        const rel = (abs) => (relative(repoDir, abs) || abs).split('\\').join('/');
+        const files = findKamalConfigs(repoDir);
+        if (files.length === 0) {
+            // detect() may have fired on `.kamal/` alone — nothing to parse.
+            return { root: repoDir, adapter: 'kamal', nodes: [], edges: [], classificationsNeeded: [] };
+        }
+        // Prefer the base config/deploy.yml; env-destination variants override only
+        // servers/env (not the app/accessory topology) — merging them is a v0 deferral.
+        const base = files.find((f) => KAMAL_BASE_RE.test(rel(f))) ?? files[0];
+        let config;
+        try {
+            config = parseKamalConfig(readFileSync(base, 'utf8'));
+        }
+        catch (err) {
+            console.warn(`  [kamal] skipping unparseable ${rel(base)}: ${err.message}`);
+            return { root: repoDir, adapter: 'kamal', nodes: [], edges: [], classificationsNeeded: [] };
+        }
+        return buildKamalGraph({ config, configFile: rel(base), dockerfileIndex: buildDockerfileIndex(repoDir) }, repoDir);
+    },
+};
+//# sourceMappingURL=kamal.js.map

package/dist/infra/kamal/kamal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kamal.js","sourceRoot":"","sources":["../../../src/infra/kamal/kamal.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,0EAA0E;AAC1E,yEAAyE;AACzE,EAAE;AACF,iFAAiF;AACjF,mFAAmF;AACnF,8CAA8C;AAC9C,4DAA4D;AAC5D,wDAAwD;AACxD,4DAA4D;AAC5D,EAAE;AACF,4DAA4D;AAC5D,2EAA2E;AAC3E,uDAAuD;AACvD,uEAAuE;AACvE,4EAA4E;AAC5E,gFAAgF;AAChF,oFAAoF;AACpF,iFAAiF;AACjF,EAAE;AACF,uEAAuE;AACvE,+DAA+D;AAC/D,EAAE;AACF,2EAA2E;AAC3E,kFAAkF;AAClF,wEAAwE;AAExE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAwB,MAAM,qBAAqB,CAAC;AAC5G,OAAO,EAAE,gBAAgB,EAAoB,MAAM,kBAAkB,CAAC;AAEtE,mFAAmF;AACnF,+EAA+E;AAC/E,MAAM,eAAe,GAAG,iDAAiD,CAAC;AAC1E,+EAA+E;AAC/E,MAAM,aAAa,GAAG,8BAA8B,CAAC;AAErD,8EAA8E;AAC9E,8EAA8E;AAE9E,SAAS,aAAa,CAAC,CAAS;IAC9B,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC9E,CAAC;AACD,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,8EAA8E;AAC9E,6EAA6E;AAE7E,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,OAAO,EAAE,CAAC;AACpD,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,aAAa,IAAI,EAAE,CAAC;AAE1D,8EAA8E;AAC9E,4CAA4C;AAE5C;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAmB,EAAE,eAAiC;IACxF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhC,+EAA+E;IAC/E,gDAAgD;IAChD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,IAAI,OAAO;QAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,IAAI,KAAK;QAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAE5B,6EAA6E;IAC7E,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC;QACxD,KAAK,MAAM,CAAC,IAAI,yBAAyB,CAAC,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzF,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,8DAA8D;AAE9D,0EAA0E;AAC1E,SAAS,aAAa,CAAC,IAAuB;IAC5C,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,WAAW,CAAC;IAC7C,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,WAAW,CAAC;IACzC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAoF,EACpF,IAAY;IAEZ,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC;IACrD,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAgB,EAAE,CAAC;IAE9B,8EAA8E;IAC9E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC;IACxC,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC3D,KAAK,CAAC,IAAI,CAAC;QACT,EAAE;QACF,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QACrG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC,CAAC;IAEH,iFAAiF;IACjF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QAChE,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,CAAC,IAAI;YACf,IAAI;YACJ,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SAChG,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAAC;AAC7E,CAAC;AAED,8EAA8E;AAC9E,WAAW;AAEX,SAAS,gBAAgB,CAAC,OAAe;IACvC,8EAA8E;IAC9E,4EAA4E;IAC5E,+CAA+C;IAC/C,OAAO,SAAS,CACd,OAAO,EACP,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EACpF,EAAE,QAAQ,EAAE,CAAC,EAAE,CAChB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAiB;IACxC,IAAI,EAAE,OAAO;IAEb,KAAK,CAAC,MAAM,CAAC,OAAe;QAC1B,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;YAC5G,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACtD,0EAA0E;QAC1E,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAe;QAC3B,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,iEAAiE;YACjE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAAC;QAC9F,CAAC;QACD,4EAA4E;QAC5E,gFAAgF;QAChF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QACvE,IAAI,MAAmB,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,kCAAkC,GAAG,CAAC,IAAI,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACvF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAAC;QAC9F,CAAC;QACD,OAAO,eAAe,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACrH,CAAC;CACF,CAAC"}

package/dist/infra/netlify/netlify.d.ts

@@ -0,0 +1,33 @@
+import type { InfraAdapter, InfraGraph } from '../types.js';
+import { type WranglerTree } from '../cloudflare/wrangler-parse.js';
+export interface NetlifyConfig {
+    /** `[build].base` — where the build runs (the frontend source root). */
+    baseDir?: string;
+    /** `[build].publish` — the build output dir (metadata only). */
+    publishDir?: string;
+    /** `[functions].directory` or `[build].functions` — the Functions source dir. */
+    functionsDir?: string;
+    /** True iff `[[edge_functions]]` blocks are declared. */
+    hasEdgeFunctionsDeclared: boolean;
+}
+/** Pure: parsed netlify.toml tree → the typed NetlifyConfig. */
+export declare function parseNetlifyConfig(tree: WranglerTree): NetlifyConfig;
+export interface BuildNetlifyOpts {
+    /** Repo-relative dir of the netlify.toml ('' = repo root). */
+    configDir: string;
+    /** Site node label/id name (package.json name or repo dir). */
+    siteName: string;
+    /** Does `<configDir>/src` exist? (the site source-root fallback when no base) */
+    srcExists: boolean;
+    /** Does `<configDir>/netlify/functions` exist? (default Functions dir) */
+    defaultFunctionsDirExists: boolean;
+    /** Does `<configDir>/netlify/edge-functions` exist? (default Edge Functions dir) */
+    edgeDirExists: boolean;
+}
+export declare function buildNetlifyGraph(configs: Array<{
+    config: NetlifyConfig;
+    opts: BuildNetlifyOpts;
+    configFile: string;
+}>, root: string): InfraGraph;
+export declare const netlifyAdapter: InfraAdapter;
+//# sourceMappingURL=netlify.d.ts.map

package/dist/infra/netlify/netlify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"netlify.d.ts","sourceRoot":"","sources":["../../../src/infra/netlify/netlify.ts"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EAAE,YAAY,EAAa,UAAU,EAAa,MAAM,aAAa,CAAC;AAClF,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAqCrF,MAAM,WAAW,aAAa;IAC5B,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yDAAyD;IACzD,wBAAwB,EAAE,OAAO,CAAC;CACnC;AAED,gEAAgE;AAChE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,YAAY,GAAG,aAAa,CAapE;AAgBD,MAAM,WAAW,gBAAgB;IAC/B,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,SAAS,EAAE,OAAO,CAAC;IACnB,0EAA0E;IAC1E,yBAAyB,EAAE,OAAO,CAAC;IACnC,oFAAoF;IACpF,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,KAAK,CAAC;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,EACrF,IAAI,EAAE,MAAM,GACX,UAAU,CA2EZ;AA6BD,eAAO,MAAM,cAAc,EAAE,YA2D5B,CAAC"}

package/dist/infra/netlify/netlify.js

@@ -0,0 +1,247 @@
+// the Netlify InfraAdapter.
+//
+// Netlify is the only one of the three AI-builder default frontends (Vercel /
+// Netlify / Cloudflare) we didn't cover — a top-3 frontend host + the default
+// export target for Lovable / Bolt / v0. This surfaces a Netlify deployment from
+// `netlify.toml` (+ the `netlify/functions` / `netlify/edge-functions` conventions):
+// the static site, its Functions, and its Edge Functions.
+//
+// Entirely `declared`/`inferred` provenance — netlify.toml names the build base +
+// functions dir; the default function dirs are a convention (inferred). No LLM
+// (classificationsNeeded: []).
+//
+// Kind mapping (locked 8-kind InfraModuleKind enum — map onto it, never weaken):
+//   the site                       → static-site
+//   Netlify Functions (dir)        → worker  (serverless functions)
+//   Netlify Edge Functions (dir)   → worker  (Deno edge runtime)
+//
+// sourceRoots:
+//   * site  → `[build].base` (where the build runs = the frontend source). When
+//     absent, fall back to `src/` IF it exists (the SPA convention, mirroring the
+//     Cloudflare Vite-SPA rule) — never the repo root (no catch-all that swallows
+//     the functions). A base that resolves to the repo root yields no source root.
+//   * functions / edge functions → their directory (clean per-unit attribution).
+//
+// Zone label: "Netlify" (PROVIDER_ZONE_LABEL['netlify'] in zones.ts).
+//
+// Disambiguation ( precedence seam): the Vercel adapter detects bare
+// `next.config.*`, and Next.js deploys to Netlify too — so a Next-on-Netlify repo
+// trips BOTH adapters. That's fine: netlify.toml is the explicit, stronger Netlify
+// signal and it emits `sourceRoots`, whereas the Vercel `next.config` path emits
+// none today — so code attributes to Netlify by 's source-root rule, and
+// `next.config` alone never outranks `netlify.toml`. (Both still render their zone.)
+import { existsSync, readFileSync } from 'node:fs';
+import { join, relative } from 'node:path';
+import { parseTomlSubset } from '../cloudflare/wrangler-parse.js';
+import { findFiles } from '../walk.js';
+const CONFIG_NAME = 'netlify.toml';
+const DEFAULT_FUNCTIONS_DIR = 'netlify/functions';
+const DEFAULT_EDGE_FUNCTIONS_DIR = 'netlify/edge-functions';
+// ---------------------------------------------------------------------------
+// Path helpers (repo-relative, normalized).
+function dirOf(relPath) {
+    const i = relPath.lastIndexOf('/');
+    return i === -1 ? '' : relPath.slice(0, i);
+}
+function resolveRel(baseDir, rel) {
+    const parts = (baseDir ? baseDir.split('/') : []).concat(rel.split('/'));
+    const out = [];
+    for (const p of parts) {
+        if (p === '' || p === '.')
+            continue;
+        if (p === '..')
+            out.pop();
+        else
+            out.push(p);
+    }
+    return out.join('/');
+}
+function str(v) {
+    return typeof v === 'string' && v ? v : undefined;
+}
+function rec(v) {
+    return v && typeof v === 'object' && !Array.isArray(v) ? v : undefined;
+}
+/** Pure: parsed netlify.toml tree → the typed NetlifyConfig. */
+export function parseNetlifyConfig(tree) {
+    const build = rec(tree.build);
+    const functions = rec(tree.functions);
+    const cfg = {
+        hasEdgeFunctionsDeclared: Array.isArray(tree.edge_functions) && tree.edge_functions.length > 0,
+    };
+    const baseDir = str(build?.base);
+    if (baseDir)
+        cfg.baseDir = baseDir;
+    const publishDir = str(build?.publish);
+    if (publishDir)
+        cfg.publishDir = publishDir;
+    const functionsDir = str(functions?.directory) ?? str(build?.functions);
+    if (functionsDir)
+        cfg.functionsDir = functionsDir;
+    return cfg;
+}
+// ---------------------------------------------------------------------------
+// Node-id helpers (adapter-local; registry prefixes `netlify:`).
+const siteId = (name) => `site:${name}`;
+// Scoped by site name so a monorepo with multiple netlify.toml files (apps/web +
+// apps/admin) doesn't collide its function units onto one shared id (which would
+// silently drop the second site's functions at the first-wins dedup).
+const functionsId = (site) => `function:${site}:functions`;
+const edgeId = (site) => `function:${site}:edge`;
+export function buildNetlifyGraph(configs, root) {
+    const nodes = new Map();
+    const edges = [];
+    const addNode = (n) => {
+        if (!nodes.has(n.id))
+            nodes.set(n.id, n);
+    };
+    for (const { config, opts, configFile } of configs) {
+        const { configDir, siteName } = opts;
+        // --- the static site -----------------------------------------------------
+        // sourceRoots: base if set; else src/ if it exists; else none (never repo root).
+        let siteRoots = [];
+        if (config.baseDir) {
+            const r = resolveRel(configDir, config.baseDir);
+            if (r)
+                siteRoots = [r];
+        }
+        else if (opts.srcExists) {
+            const r = resolveRel(configDir, 'src');
+            if (r)
+                siteRoots = [r];
+        }
+        const site = {
+            id: siteId(siteName),
+            label: siteName,
+            kind: 'static-site',
+            provenance: 'declared',
+            metadata: {
+                provider: 'netlify',
+                config: configFile,
+                ...(config.publishDir ? { publish: config.publishDir } : {}),
+            },
+            ...(siteRoots.length ? { sourceRoots: siteRoots } : {}),
+        };
+        addNode(site);
+        // --- Netlify Functions ---------------------------------------------------
+        // Explicit `[functions].directory` (declared) or the default dir (inferred).
+        const funcDir = config.functionsDir ?? (opts.defaultFunctionsDirExists ? DEFAULT_FUNCTIONS_DIR : undefined);
+        if (funcDir) {
+            const r = resolveRel(configDir, funcDir);
+            const id = functionsId(siteName);
+            addNode({
+                id,
+                label: 'Netlify Functions',
+                kind: 'worker',
+                provenance: config.functionsDir ? 'declared' : 'inferred',
+                metadata: { provider: 'netlify', config: configFile, directory: funcDir },
+                ...(r ? { sourceRoots: [r] } : {}),
+            });
+            edges.push({ source: site.id, target: id, kind: 'calls', metadata: { config: configFile } });
+        }
+        // --- Netlify Edge Functions ----------------------------------------------
+        // Declared via `[[edge_functions]]` or the default `netlify/edge-functions` dir.
+        if (config.hasEdgeFunctionsDeclared || opts.edgeDirExists) {
+            const r = resolveRel(configDir, DEFAULT_EDGE_FUNCTIONS_DIR);
+            const id = edgeId(siteName);
+            addNode({
+                id,
+                label: 'Netlify Edge Functions',
+                kind: 'worker',
+                provenance: config.hasEdgeFunctionsDeclared ? 'declared' : 'inferred',
+                metadata: { provider: 'netlify', config: configFile, directory: DEFAULT_EDGE_FUNCTIONS_DIR },
+                ...(r ? { sourceRoots: [r] } : {}),
+            });
+            edges.push({ source: site.id, target: id, kind: 'calls', metadata: { config: configFile } });
+        }
+    }
+    return {
+        root,
+        adapter: 'netlify',
+        nodes: [...nodes.values()],
+        edges,
+        classificationsNeeded: [],
+    };
+}
+// ---------------------------------------------------------------------------
+// fs helpers for extract().
+function findNetlifyConfigs(repoDir) {
+    return findFiles(repoDir, (_abs, e) => e.name === CONFIG_NAME, { maxDepth: 5 });
+}
+/** Derive a site name from the configDir's package.json, else its basename, else repo. */
+function deriveSiteName(repoDir, configDir) {
+    const dir = configDir ? join(repoDir, configDir) : repoDir;
+    try {
+        const pkg = JSON.parse(readFileSync(join(dir, 'package.json'), 'utf8'));
+        if (pkg.name)
+            return pkg.name.replace(/^@[^/]+\//, '');
+    }
+    catch {
+        /* no/invalid package.json — fall through */
+    }
+    const base = (configDir ? configDir.split('/').pop() : repoDir.split('/').filter(Boolean).pop()) ?? 'site';
+    return base;
+}
+function dirExists(repoDir, configDir, sub) {
+    return existsSync(join(repoDir, configDir, sub));
+}
+// ---------------------------------------------------------------------------
+// Adapter.
+export const netlifyAdapter = {
+    name: 'netlify',
+    async detect(repoDir) {
+        if (findNetlifyConfigs(repoDir).length > 0)
+            return true;
+        // Secondary: the unambiguous Netlify function-dir conventions (a repo can
+        // ship functions without a netlify.toml). `_redirects` is NOT used — it's
+        // shared with Cloudflare Pages, so it's not a Netlify-specific signal.
+        return (existsSync(join(repoDir, DEFAULT_FUNCTIONS_DIR)) ||
+            existsSync(join(repoDir, DEFAULT_EDGE_FUNCTIONS_DIR)));
+    },
+    async extract(repoDir) {
+        const files = findNetlifyConfigs(repoDir);
+        const configs = [];
+        if (files.length > 0) {
+            for (const file of files) {
+                const configFile = (relative(repoDir, file) || file).split('\\').join('/');
+                const configDir = dirOf(configFile);
+                let config;
+                try {
+                    config = parseNetlifyConfig(parseTomlSubset(readFileSync(file, 'utf8')));
+                }
+                catch (err) {
+                    console.warn(`  [netlify] skipping unparseable ${file}: ${err.message}`);
+                    continue;
+                }
+                configs.push({
+                    config,
+                    configFile,
+                    opts: {
+                        configDir,
+                        siteName: deriveSiteName(repoDir, configDir),
+                        srcExists: dirExists(repoDir, configDir, 'src'),
+                        defaultFunctionsDirExists: dirExists(repoDir, configDir, DEFAULT_FUNCTIONS_DIR),
+                        edgeDirExists: dirExists(repoDir, configDir, DEFAULT_EDGE_FUNCTIONS_DIR),
+                    },
+                });
+            }
+        }
+        else {
+            // No netlify.toml, but a function-dir convention tripped detect() — model a
+            // root site + the functions it found.
+            configs.push({
+                config: { hasEdgeFunctionsDeclared: false },
+                configFile: '(netlify convention)',
+                opts: {
+                    configDir: '',
+                    siteName: deriveSiteName(repoDir, ''),
+                    srcExists: dirExists(repoDir, '', 'src'),
+                    defaultFunctionsDirExists: dirExists(repoDir, '', DEFAULT_FUNCTIONS_DIR),
+                    edgeDirExists: dirExists(repoDir, '', DEFAULT_EDGE_FUNCTIONS_DIR),
+                },
+            });
+        }
+        return buildNetlifyGraph(configs, repoDir);
+    },
+};
+//# sourceMappingURL=netlify.js.map

package/dist/infra/netlify/netlify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"netlify.js","sourceRoot":"","sources":["../../../src/infra/netlify/netlify.ts"],"names":[],"mappings":"AAAA,4BAA4B;AAC5B,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,iFAAiF;AACjF,qFAAqF;AACrF,0DAA0D;AAC1D,EAAE;AACF,kFAAkF;AAClF,+EAA+E;AAC/E,+BAA+B;AAC/B,EAAE;AACF,iFAAiF;AACjF,iDAAiD;AACjD,oEAAoE;AACpE,iEAAiE;AACjE,EAAE;AACF,eAAe;AACf,gFAAgF;AAChF,kFAAkF;AAClF,kFAAkF;AAClF,mFAAmF;AACnF,iFAAiF;AACjF,EAAE;AACF,sEAAsE;AACtE,EAAE;AACF,qEAAqE;AACrE,kFAAkF;AAClF,mFAAmF;AACnF,iFAAiF;AACjF,yEAAyE;AACzE,qFAAqF;AAErF,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAqB,MAAM,iCAAiC,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,MAAM,WAAW,GAAG,cAAc,CAAC;AACnC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAClD,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AAE5D,8EAA8E;AAC9E,4CAA4C;AAE5C,SAAS,KAAK,CAAC,OAAe;IAC5B,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,GAAW;IAC9C,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACzE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG;YAAE,SAAS;QACpC,IAAI,CAAC,KAAK,IAAI;YAAE,GAAG,CAAC,GAAG,EAAE,CAAC;;YACrB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3F,CAAC;AAgBD,gEAAgE;AAChE,MAAM,UAAU,kBAAkB,CAAC,IAAkB;IACnD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,GAAG,GAAkB;QACzB,wBAAwB,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;KAC/F,CAAC;IACF,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,IAAI,OAAO;QAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;IACnC,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACvC,IAAI,UAAU;QAAE,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;IAC5C,MAAM,YAAY,GAAG,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACxE,IAAI,YAAY;QAAE,GAAG,CAAC,YAAY,GAAG,YAAY,CAAC;IAClD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,iEAAiE;AAEjE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC;AAChD,iFAAiF;AACjF,iFAAiF;AACjF,sEAAsE;AACtE,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,YAAY,IAAI,YAAY,CAAC;AACnE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,YAAY,IAAI,OAAO,CAAC;AAmBzD,MAAM,UAAU,iBAAiB,CAC/B,OAAqF,EACrF,IAAY;IAEZ,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC3C,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,CAAC,CAAY,EAAE,EAAE;QAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,OAAO,EAAE,CAAC;QACnD,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;QAErC,4EAA4E;QAC5E,iFAAiF;QACjF,IAAI,SAAS,GAAa,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,CAAC,GAAG,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,CAAC;gBAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;aAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACvC,IAAI,CAAC;gBAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,IAAI,GAAc;YACtB,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC;YACpB,KAAK,EAAE,QAAQ;YACf,IAAI,EAAE,aAAa;YACnB,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE;gBACR,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE,UAAU;gBAClB,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7D;YACD,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC;QAEd,4EAA4E;QAC5E,6EAA6E;QAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5G,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,GAAG,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACzC,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;YACjC,OAAO,CAAC;gBACN,EAAE;gBACF,KAAK,EAAE,mBAAmB;gBAC1B,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;gBACzD,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE;gBACzE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnC,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,4EAA4E;QAC5E,iFAAiF;QACjF,IAAI,MAAM,CAAC,wBAAwB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1D,MAAM,CAAC,GAAG,UAAU,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;YAC5D,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5B,OAAO,CAAC;gBACN,EAAE;gBACF,KAAK,EAAE,wBAAwB;gBAC/B,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;gBACrE,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,0BAA0B,EAAE;gBAC5F,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnC,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,SAAS;QAClB,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC1B,KAAK;QACL,qBAAqB,EAAE,EAAE;KAC1B,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,4BAA4B;AAE5B,SAAS,kBAAkB,CAAC,OAAe;IACzC,OAAO,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,0FAA0F;AAC1F,SAAS,cAAc,CAAC,OAAe,EAAE,SAAiB;IACxD,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAsB,CAAC;QAC7F,IAAI,GAAG,CAAC,IAAI;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;IAC9C,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,MAAM,CAAC;IAC3G,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,OAAe,EAAE,SAAiB,EAAE,GAAW;IAChE,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,8EAA8E;AAC9E,WAAW;AAEX,MAAM,CAAC,MAAM,cAAc,GAAiB;IAC1C,IAAI,EAAE,SAAS;IAEf,KAAK,CAAC,MAAM,CAAC,OAAe;QAC1B,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACxD,0EAA0E;QAC1E,0EAA0E;QAC1E,uEAAuE;QACvE,OAAO,CACL,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;YAChD,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC,CACtD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAe;QAC3B,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAiF,EAAE,CAAC;QAEjG,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC3E,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;gBACpC,IAAI,MAAqB,CAAC;gBAC1B,IAAI,CAAC;oBACH,MAAM,GAAG,kBAAkB,CAAC,eAAe,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC3E,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,IAAI,CAAC,oCAAoC,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;oBACpF,SAAS;gBACX,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM;oBACN,UAAU;oBACV,IAAI,EAAE;wBACJ,SAAS;wBACT,QAAQ,EAAE,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC;wBAC5C,SAAS,EAAE,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC;wBAC/C,yBAAyB,EAAE,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,qBAAqB,CAAC;wBAC/E,aAAa,EAAE,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,0BAA0B,CAAC;qBACzE;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,4EAA4E;YAC5E,sCAAsC;YACtC,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,EAAE,wBAAwB,EAAE,KAAK,EAAE;gBAC3C,UAAU,EAAE,sBAAsB;gBAClC,IAAI,EAAE;oBACJ,SAAS,EAAE,EAAE;oBACb,QAAQ,EAAE,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;oBACrC,SAAS,EAAE,SAAS,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC;oBACxC,yBAAyB,EAAE,SAAS,CAAC,OAAO,EAAE,EAAE,EAAE,qBAAqB,CAAC;oBACxE,aAAa,EAAE,SAAS,CAAC,OAAO,EAAE,EAAE,EAAE,0BAA0B,CAAC;iBAClE;aACF,CAAC,CAAC;QACL,CAAC;QAED,OAAO,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;CACF,CAAC"}

package/dist/infra/opentofu/opentofu.d.ts

@@ -0,0 +1,3 @@
+import type { InfraAdapter } from '../types.js';
+export declare const opentofuAdapter: InfraAdapter;
+//# sourceMappingURL=opentofu.d.ts.map

package/dist/infra/opentofu/opentofu.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opentofu.d.ts","sourceRoot":"","sources":["../../../src/infra/opentofu/opentofu.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,YAAY,EAAc,MAAM,aAAa,CAAC;AAuE5D,eAAO,MAAM,eAAe,EAAE,YA0E7B,CAAC"}

package/dist/infra/opentofu/opentofu.js

@@ -0,0 +1,157 @@
+// the OpenTofu InfraAdapter.
+//
+// OpenTofu is a Terraform fork with identical HCL syntax and the same provider
+// model (registry.terraform.io namespace is shared; `tofu` CLI is a drop-in
+// replacement). This adapter REUSES buildTerraformGraph and parseHcl entirely —
+// no new taxonomy, no new classify provider strings. The LLM cache entries
+// created by the Terraform adapter are reused verbatim here (the
+// `resource_type_classifications` row for `provider = 'terraform/aws'` applies
+// to both `*.tf` and `*.tofu` files).
+//
+// DETECT GUARD — the critical contract:
+// detect() returns TRUE only when an OpenTofu-SPECIFIC signal exists: a `*.tofu`
+// file, a `*.tofu.json` file, or a `tofu.tfvars` file. A repo with ONLY `*.tf`
+// files falls through to the Terraform adapter — this adapter NEVER fires on
+// plain Terraform repos, preventing double-counting of nodes.
+//
+// FILE SCOPE — extract() collects BOTH `*.tofu` AND `*.tf` files, because an
+// OpenTofu repo may mix both extensions (providers declared in `providers.tf`,
+// resources in `main.tofu` is a common migration pattern). The Terraform adapter
+// is NOT run additionally on OpenTofu repos — the registry registers the more
+// specific adapter first, and a repo matched by OpenTofu is NOT re-matched by
+// Terraform.
+//
+// DEFERRED: `*.tofu.json` parsing. parseHcl is an HCL text parser; JSON-HCL is
+// a structurally different encoding (same semantics, different surface syntax).
+// detect() recognises `*.tofu.json` as an OpenTofu signal so the repo is
+// claimed by this adapter, but the JSON bodies are skipped in extract() with a
+// console.warn. JSON-HCL support is tracked under .
+import { readFileSync } from 'node:fs';
+import { relative } from 'node:path';
+import { walkRepo } from '../walk.js';
+import { buildDockerfileIndex } from '../image-resolve.js';
+import { parseHcl } from '../terraform/hcl-parse.js';
+import { buildTerraformGraph } from '../terraform/terraform.js';
+/** Repo-relative dir of a file path ('' = repo root). */
+function dirOfRel(repoDir, file) {
+    const rel = (relative(repoDir, file) || file).split('\\').join('/');
+    const i = rel.lastIndexOf('/');
+    return i === -1 ? '' : rel.slice(0, i);
+}
+// Same skip-set as the Terraform adapter (OpenTofu shares its `.terraform` noise dir).
+const TOFU_SKIP_DIRS = ['node_modules', '.git', 'dist', '.wrangler', '.terraform', '.next', 'build'];
+/**
+ * Walk the repo collecting OpenTofu-relevant files (bounded, skips noise dirs).
+ * Returns both the files to parse (hclFiles) and the OpenTofu-specific signals
+ * (tofuJsonFiles, tofuTfvarsFiles) separately so detect() can check the latter
+ * without needing any HCL content.
+ */
+function scanTofuFiles(repoDir) {
+    const hclFiles = [];
+    const tofuJsonFiles = [];
+    const tofuTfvarsFiles = [];
+    walkRepo(repoDir, {
+        skipDirs: TOFU_SKIP_DIRS,
+        onFile: (abs, e) => {
+            // ORDER IS LOAD-BEARING — compound suffixes (.tofu.json, .tofu.tfvars) must
+            // be checked BEFORE the bare-suffix arms (.tofu, .tf).  A name like
+            // "override.tofu.json" ends with both ".tofu.json" AND ".tofu"; testing
+            // the bare arm first would mis-classify it as HCL.  Do NOT reorder.
+            if (e.name.endsWith('.tofu.json')) {
+                // JSON-HCL: OpenTofu-specific signal; parsing deferred (see module comment).
+                tofuJsonFiles.push(abs);
+            }
+            else if (e.name === 'tofu.tfvars' || e.name.endsWith('.tofu.tfvars')) {
+                // tofu.tfvars / *.tofu.tfvars: OpenTofu-native variables file.
+                tofuTfvarsFiles.push(abs);
+            }
+            else if (e.name.endsWith('.tofu')) {
+                // `.tofu` = OpenTofu-native HCL file; also counts as HCL for parsing.
+                // Checked AFTER the compound-suffix arms above (see ORDER note).
+                hclFiles.push(abs);
+            }
+            else if (e.name.endsWith('.tf')) {
+                // Plain Terraform HCL: collect for parsing when the repo has other
+                // OpenTofu signals (so we get the full topology, not just *.tofu files).
+                hclFiles.push(abs);
+            }
+        },
+    });
+    hclFiles.sort();
+    return { hclFiles, tofuJsonFiles, tofuTfvarsFiles };
+}
+/** True iff the repo has at least one OpenTofu-SPECIFIC file. */
+function hasOpentofuSignal(scan) {
+    const tofuHcl = scan.hclFiles.some((f) => f.endsWith('.tofu'));
+    return tofuHcl || scan.tofuJsonFiles.length > 0 || scan.tofuTfvarsFiles.length > 0;
+}
+export const opentofuAdapter = {
+    name: 'opentofu',
+    /**
+     * Detect an OpenTofu repo by the presence of at least one OpenTofu-specific
+     * file: `*.tofu`, `*.tofu.json`, or `tofu.tfvars` / `*.tofu.tfvars`.
+     *
+     * A repo with ONLY `*.tf` files is NOT detected here — that is the Terraform
+     * adapter's jurisdiction. This is the primary regression guard: registering
+     * both adapters and having only `*.tf` files will fire Terraform, never
+     * OpenTofu.
+     */
+    async detect(repoDir) {
+        const scan = scanTofuFiles(repoDir);
+        return hasOpentofuSignal(scan);
+    },
+    /**
+     * Extract the infrastructure graph from an OpenTofu repo.
+     *
+     * Parses all `*.tofu` + `*.tf` files (which may coexist in the same OpenTofu
+     * project) via parseHcl, then delegates to buildTerraformGraph for the
+     * identical resource-type taxonomy, heuristic kind assignment, and cross-
+     * resource edge detection. Returns the graph with `adapter: 'opentofu'` so
+     * the registry prefixes nodes as `opentofu:*` (distinct from `terraform:*`).
+     *
+     * `*.tofu.json` files are noted but skipped — JSON-HCL parsing is deferred.
+     */
+    async extract(repoDir) {
+        const scan = scanTofuFiles(repoDir);
+        // Warn about deferred JSON-HCL files so operators know topology may be
+        // incomplete (not an error — the HCL files still yield a useful graph).
+        // JSON-HCL is a structurally different encoding that needs its own parser;
+        // support is tracked under .
+        if (scan.tofuJsonFiles.length > 0) {
+            const names = scan.tofuJsonFiles.map((f) => relative(repoDir, f)).join(', ');
+            console.warn(`  [opentofu] skipping ${scan.tofuJsonFiles.length} .tofu.json file(s) — ` +
+                `JSON-HCL parsing is not yet supported (tracked: ). ` +
+                `Skipped: ${names}`);
+        }
+        const blocks = [];
+        for (const file of scan.hclFiles) {
+            const dir = dirOfRel(repoDir, file);
+            try {
+                for (const b of parseHcl(readFileSync(file, 'utf8'))) {
+                    b.dir = dir; // module dir for source-path resolution
+                    blocks.push(b);
+                }
+            }
+            catch (err) {
+                console.warn(`  [opentofu] skipping unparseable ${relative(repoDir, file)}: ${err.message}`);
+            }
+        }
+        // buildTerraformGraph is pure: it takes blocks + root and returns an
+        // InfraGraph. We override `adapter` so downstream namespacing is correct.
+        //
+        // MIXED-REPO NAMESPACING (intended behaviour): a repo that contains both
+        // `*.tf` and `*.tofu` files will be claimed by this adapter (detect-positive)
+        // AND also by the Terraform adapter if both are registered and run
+        // independently.  In that scenario, shared `*.tf` resources appear under
+        // BOTH `opentofu:resource:*` and `terraform:resource:*` ids — they are NOT
+        // deduplicated at the adapter level.  This is intentional: namespacing by
+        // adapter is the design (pure-TF repos get `terraform:*` ids; this adapter
+        // owns the full graph for OpenTofu repos including any co-located `.tf`
+        // files).  Mixed repos are rare in practice; deduplication is the
+        // orchestrator's concern if it ever runs both adapters on the same repo.
+        // same Dockerfile-index resolver path as Terraform.
+        const graph = buildTerraformGraph(blocks, repoDir, buildDockerfileIndex(repoDir));
+        return { ...graph, adapter: 'opentofu' };
+    },
+};
+//# sourceMappingURL=opentofu.js.map