@neat.is/core 0.10.1-dev.20260927 → 0.10.1

package/dist/neatd.js

@@ -2,15 +2,15 @@
 import {
   reconcileDaemonRecordSync,
   startDaemon
-} from "./chunk-EJPNEEJA.js";
+} from "./chunk-AWIK6T3G.js";
 import {
   listProjects,
   registryPath
-} from "./chunk-J3VVEB45.js";
+} from "./chunk-E3YFFIHE.js";
 import {
   BindAuthorityError,
   __require
-} from "./chunk-GDGUY4T6.js";
+} from "./chunk-M7CGATVC.js";
 
 // src/neatd.ts
 import { promises as fs } from "fs";

package/dist/{otel-grpc-Y5K4WGWO.js → otel-grpc-CU73Y5WT.js}

@@ -1,10 +1,10 @@
 import {
   reshapeGrpcRequest,
   startOtelGrpcReceiver
-} from "./chunk-ERE47MCR.js";
-import "./chunk-GDGUY4T6.js";
+} from "./chunk-5SJHA5ZH.js";
+import "./chunk-M7CGATVC.js";
 export {
   reshapeGrpcRequest,
   startOtelGrpcReceiver
 };
-//# sourceMappingURL=otel-grpc-Y5K4WGWO.js.map
+//# sourceMappingURL=otel-grpc-CU73Y5WT.js.map

package/dist/server.cjs

@@ -12787,13 +12787,16 @@ function objectKeys(obj) {
 var MODULAR_WRITES = /* @__PURE__ */ new Set(["addDoc", "setDoc", "updateDoc"]);
 var NAMESPACED_WRITES = /* @__PURE__ */ new Set(["add", "set", "update"]);
 var READ_CLAUSES = /* @__PURE__ */ new Set(["where", "orderBy"]);
-function firestoreEndpointsFromFile(file, serviceDir) {
+function firestoreEndpointsFromFile(file, serviceDir, imported) {
   const hasClient = FIRESTORE_CLIENT_IMPORT_RE.test(file.content);
   const hasAdmin = FIRESTORE_ADMIN_IMPORT_RE.test(file.content);
-  if (!hasClient && !hasAdmin) return [];
-  const fileSdk = hasClient && !hasAdmin ? "client" : hasAdmin && !hasClient ? "admin" : null;
+  const importedNames = imported?.names ?? /* @__PURE__ */ new Set();
+  if (!hasClient && !hasAdmin && importedNames.size === 0) return [];
+  const ownSdk = hasClient && !hasAdmin ? "client" : hasAdmin && !hasClient ? "admin" : null;
+  const fileSdk = !hasClient && !hasAdmin ? imported?.sdk ?? null : ownSdk;
   const tree = parseSource3(parserForExt2(import_node_path46.default.extname(file.path)), file.content);
   const clientVars = firestoreClientVars(tree.rootNode);
+  for (const n of importedNames) clientVars.add(n);
   const collLine = /* @__PURE__ */ new Map();
   const writes = /* @__PURE__ */ new Map();
   const reads = /* @__PURE__ */ new Map();
@@ -12904,6 +12907,99 @@ function firestoreEndpointsFromFile(file, serviceDir) {
   }
   return out;
 }
+function exportedFirestoreClients(root) {
+  const out = /* @__PURE__ */ new Set();
+  const collect = (node) => {
+    if (node.type === "variable_declarator") {
+      const name = node.childForFieldName("name");
+      let value = node.childForFieldName("value");
+      if (value?.type === "await_expression") value = namedChildren(value)[0] ?? null;
+      if (name?.type === "identifier" && isFirestoreClientFactory(value)) out.add(name.text);
+    }
+    for (const c of namedChildren(node)) collect(c);
+  };
+  const walk11 = (node) => {
+    if (node.type === "export_statement") collect(node);
+    else for (const c of namedChildren(node)) walk11(c);
+  };
+  walk11(root);
+  return out;
+}
+function namedImportBindings(root) {
+  const out = [];
+  const walk11 = (node) => {
+    if (node.type === "import_statement") {
+      const src = node.childForFieldName("source");
+      const specifier = src ? src.text.slice(1, -1) : "";
+      if (specifier.length > 0) {
+        const stack = [node];
+        while (stack.length > 0) {
+          const n = stack.pop();
+          if (n.type === "import_specifier") {
+            const nameNode = n.childForFieldName("name");
+            const aliasNode = n.childForFieldName("alias");
+            const importedName = nameNode?.text;
+            if (importedName) {
+              out.push({ local: aliasNode?.text ?? importedName, imported: importedName, specifier });
+            }
+            continue;
+          }
+          for (const c of namedChildren(n)) stack.push(c);
+        }
+      }
+    }
+    for (const c of namedChildren(node)) walk11(c);
+  };
+  walk11(root);
+  return out;
+}
+function sdkOf(content) {
+  const hasClient = FIRESTORE_CLIENT_IMPORT_RE.test(content);
+  const hasAdmin = FIRESTORE_ADMIN_IMPORT_RE.test(content);
+  return hasClient && !hasAdmin ? "client" : hasAdmin && !hasClient ? "admin" : null;
+}
+function parseOrNull(file) {
+  const ext = import_node_path46.default.extname(file.path);
+  if (!(ext in GRAMMAR_BY_EXT)) return null;
+  try {
+    return parseSource3(parserForExt2(ext), file.content).rootNode;
+  } catch {
+    return null;
+  }
+}
+async function firestoreCrossFileEndpoints(files, serviceDir) {
+  const registry = /* @__PURE__ */ new Map();
+  for (const f of files) {
+    if (sdkOf(f.content) === null && !FIRESTORE_CLIENT_IMPORT_RE.test(f.content)) continue;
+    const root = parseOrNull(f);
+    if (!root) continue;
+    const names = exportedFirestoreClients(root);
+    if (names.size === 0) continue;
+    registry.set(toPosix(import_node_path46.default.relative(serviceDir, f.path)), { names, sdk: sdkOf(f.content) });
+  }
+  if (registry.size === 0) return [];
+  const out = [];
+  for (const f of files) {
+    const root = parseOrNull(f);
+    if (!root) continue;
+    if (firestoreClientVars(root).size > 0) continue;
+    const bindings = namedImportBindings(root);
+    if (bindings.length === 0) continue;
+    const names = /* @__PURE__ */ new Set();
+    let sdk = null;
+    for (const b of bindings) {
+      const rel = await resolveJsImport(b.specifier, import_node_path46.default.dirname(f.path), serviceDir, null);
+      if (!rel) continue;
+      const entry = registry.get(rel);
+      if (!entry || !entry.names.has(b.imported)) continue;
+      names.add(b.local);
+      sdk ??= entry.sdk;
+    }
+    if (names.size === 0) continue;
+    out.push(...firestoreEndpointsFromFile(f, serviceDir, { names, sdk }));
+  }
+  return out;
+}
 
 // src/extract/calls/mongoose.ts
 init_cjs_shims();
@@ -15713,6 +15809,7 @@ async function addExternalEndpointEdges(graph, services) {
         recordExtractionError("python socket call extraction", file.path, err);
       }
     }
+    endpoints.push(...await firestoreCrossFileEndpoints(maskedFiles, service.dir));
     endpoints.push(...await mongooseCrossFileEndpoints(maskedFiles, service.dir));
     endpoints.push(...pythonOrmCrossFileEndpoints(maskedFiles, service.dir));
     endpoints.push(...await prismaColumnEndpoints(service.dir));
@@ -17008,6 +17105,9 @@ function stripComments(src) {
 function segmentsFromMatchPath(pathToken) {
   return pathToken.split("/").filter((s) => s.length > 0);
 }
+function isRecursiveWildcard(seg) {
+  return /^\{[^}]*=\s*\*\*\}$/.test(seg);
+}
 function collectionKeyFromSegments(segments) {
   let segs = segments;
   if (segs.length >= 3 && segs[0] === "databases" && /^\{.*\}$/.test(segs[1]) && segs[2] === "documents") {
@@ -17020,10 +17120,11 @@ function collectionKeyFromName(name) {
 }
 function fieldsFromCondition(cond) {
   const out = [];
-  const callRe = /\b(?:hasAll|hasOnly|hasAny)\s*\(\s*\[([^\]]*)\]\s*\)/g;
+  const callRe = /(!\s*)?\b(?:hasAll|hasOnly|hasAny)\s*\(\s*\[([^\]]*)\]\s*\)/g;
   let m;
   while ((m = callRe.exec(cond)) !== null) {
-    const inner = m[1];
+    if (m[1] !== void 0 || isNegatedAt(cond, m.index)) continue;
+    const inner = m[2];
     const litRe = /'([^']*)'|"([^"]*)"/g;
     let lm;
     while ((lm = litRe.exec(inner)) !== null) {
@@ -17033,6 +17134,28 @@ function fieldsFromCondition(cond) {
   }
   return out;
 }
+function isNegatedAt(cond, idx) {
+  let i = idx - 1;
+  while (i >= 0) {
+    const ch = cond[i];
+    if (ch === ")") {
+      let depth = 1;
+      i--;
+      while (i >= 0 && depth > 0) {
+        if (cond[i] === ")") depth++;
+        else if (cond[i] === "(") depth--;
+        i--;
+      }
+      continue;
+    }
+    if (/[A-Za-z0-9_$.\]['"]/.test(ch) || ch === " ") {
+      i--;
+      continue;
+    }
+    return ch === "!";
+  }
+  return false;
+}
 function parseFirestoreRules(content) {
   const src = stripComments(content);
   const tokenRe = /match\s+((?:\/(?:\{[^}]*\}|[^\s/{}]+))+)\s*\{|allow\b([^;{}]*);|(\{)|(\})/g;
@@ -17045,7 +17168,8 @@ function parseFirestoreRules(content) {
   while ((m = tokenRe.exec(src)) !== null) {
     if (m[1] !== void 0) {
       depth++;
-      matchStack.push({ depth, segs: segmentsFromMatchPath(m[1]) });
+      const segs = segmentsFromMatchPath(m[1]);
+      matchStack.push({ depth, segs, recursive: segs.some(isRecursiveWildcard) });
       continue;
     }
     if (m[2] !== void 0) {
@@ -17056,6 +17180,10 @@ function parseFirestoreRules(content) {
       if (!methods.some((mm) => WRITE_METHODS.has(mm))) continue;
       const key = currentKey();
       if (key.length === 0) continue;
+      if (matchStack.some((f) => f.recursive)) {
+        indeterminate.add(key);
+        continue;
+      }
       const cond = colon === -1 ? "" : body.slice(colon + 1);
       const fields = fieldsFromCondition(cond);
       if (fields.length > 0) {