@neat.is/core 0.3.3 → 0.3.4

package/dist/index.d.cts

@@ -15,6 +15,18 @@ interface ExtractionError {
     ts: string;
     source: 'extract';
 }
+interface DroppedExtractedEdge {
+    source: string;
+    target: string;
+    type: string;
+    confidence: number;
+    confidenceKind: string;
+    evidence: {
+        file: string;
+        line?: number;
+        snippet?: string;
+    };
+}
 
 interface ExtractResult {
     nodesAdded: number;
@@ -23,6 +35,8 @@ interface ExtractResult {
     extractionErrors: number;
     errorEntries: ExtractionError[];
     ghostsRetired: number;
+    extractedDropped: number;
+    droppedEntries: DroppedExtractedEdge[];
 }
 interface ExtractOptions {
     onPolicyTrigger?: (graph: NeatGraph) => Promise<void> | void;

package/dist/index.d.ts

@@ -15,6 +15,18 @@ interface ExtractionError {
     ts: string;
     source: 'extract';
 }
+interface DroppedExtractedEdge {
+    source: string;
+    target: string;
+    type: string;
+    confidence: number;
+    confidenceKind: string;
+    evidence: {
+        file: string;
+        line?: number;
+        snippet?: string;
+    };
+}
 
 interface ExtractResult {
     nodesAdded: number;
@@ -23,6 +35,8 @@ interface ExtractResult {
     extractionErrors: number;
     errorEntries: ExtractionError[];
     ghostsRetired: number;
+    extractedDropped: number;
+    droppedEntries: DroppedExtractedEdge[];
 }
 interface ExtractOptions {
     onPolicyTrigger?: (graph: NeatGraph) => Promise<void> | void;

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   routeSpanToProject,
   startDaemon
-} from "./chunk-ICFH326H.js";
+} from "./chunk-T3A2GK3X.js";
 import {
   ProjectNameCollisionError,
   addProject,
@@ -37,7 +37,7 @@ import {
   thresholdForEdgeType,
   touchLastSeen,
   writeAtomically
-} from "./chunk-VABXPLDT.js";
+} from "./chunk-33ZZ2ZID.js";
 import {
   startOtelGrpcReceiver
 } from "./chunk-G3PDTGOW.js";

package/dist/neatd.cjs

@@ -100,8 +100,8 @@ function reshapeGrpcRequest(req2) {
   };
 }
 function resolveProtoRoot() {
-  const here = import_node_path33.default.dirname((0, import_node_url.fileURLToPath)(importMetaUrl));
-  return import_node_path33.default.resolve(here, "..", "proto");
+  const here = import_node_path34.default.dirname((0, import_node_url.fileURLToPath)(importMetaUrl));
+  return import_node_path34.default.resolve(here, "..", "proto");
 }
 function loadTraceService() {
   const protoRoot = resolveProtoRoot();
@@ -156,13 +156,13 @@ async function startOtelGrpcReceiver(opts) {
     })
   };
 }
-var import_node_url, import_node_path33, grpc, protoLoader;
+var import_node_url, import_node_path34, grpc, protoLoader;
 var init_otel_grpc = __esm({
   "src/otel-grpc.ts"() {
     "use strict";
     init_cjs_shims();
     import_node_url = require("url");
-    import_node_path33 = __toESM(require("path"), 1);
+    import_node_path34 = __toESM(require("path"), 1);
     grpc = __toESM(require("@grpc/grpc-js"), 1);
     protoLoader = __toESM(require("@grpc/proto-loader"), 1);
     init_otel();
@@ -259,10 +259,10 @@ function parseOtlpRequest(body) {
 }
 function loadProtobufDecoder() {
   if (exportTraceServiceRequestType) return exportTraceServiceRequestType;
-  const here = import_node_path34.default.dirname((0, import_node_url2.fileURLToPath)(importMetaUrl));
-  const protoRoot = import_node_path34.default.resolve(here, "..", "proto");
+  const here = import_node_path35.default.dirname((0, import_node_url2.fileURLToPath)(importMetaUrl));
+  const protoRoot = import_node_path35.default.resolve(here, "..", "proto");
   const root = new import_protobufjs.default.Root();
-  root.resolvePath = (_origin, target) => import_node_path34.default.resolve(protoRoot, target);
+  root.resolvePath = (_origin, target) => import_node_path35.default.resolve(protoRoot, target);
   root.loadSync(
     "opentelemetry/proto/collector/trace/v1/trace_service.proto",
     { keepCase: true }
@@ -354,12 +354,12 @@ async function buildOtelReceiver(opts) {
   };
   return decorated;
 }
-var import_node_path34, import_node_url2, import_fastify2, import_protobufjs, exportTraceServiceRequestType;
+var import_node_path35, import_node_url2, import_fastify2, import_protobufjs, exportTraceServiceRequestType;
 var init_otel = __esm({
   "src/otel.ts"() {
     "use strict";
     init_cjs_shims();
-    import_node_path34 = __toESM(require("path"), 1);
+    import_node_path35 = __toESM(require("path"), 1);
     import_node_url2 = require("url");
     import_fastify2 = __toESM(require("fastify"), 1);
     import_protobufjs = __toESM(require("protobufjs"), 1);
@@ -370,12 +370,12 @@ var init_otel = __esm({
 // src/neatd.ts
 init_cjs_shims();
 var import_node_fs22 = require("fs");
-var import_node_path37 = __toESM(require("path"), 1);
+var import_node_path38 = __toESM(require("path"), 1);
 
 // src/daemon.ts
 init_cjs_shims();
 var import_node_fs21 = require("fs");
-var import_node_path35 = __toESM(require("path"), 1);
+var import_node_path36 = __toESM(require("path"), 1);
 
 // src/graph.ts
 init_cjs_shims();
@@ -831,19 +831,19 @@ function confidenceFromMix(edges, now = Date.now()) {
 function longestIncomingWalk(graph, start, maxDepth) {
   let best = { path: [start], edges: [] };
   const visited = /* @__PURE__ */ new Set([start]);
-  function step(node, path38, edges) {
-    if (path38.length > best.path.length) {
-      best = { path: [...path38], edges: [...edges] };
+  function step(node, path39, edges) {
+    if (path39.length > best.path.length) {
+      best = { path: [...path39], edges: [...edges] };
     }
-    if (path38.length - 1 >= maxDepth) return;
+    if (path39.length - 1 >= maxDepth) return;
     const incoming = bestEdgeBySource(graph, graph.inboundEdges(node));
     for (const [srcId, edge] of incoming) {
       if (visited.has(srcId)) continue;
       visited.add(srcId);
-      path38.push(srcId);
+      path39.push(srcId);
       edges.push(edge);
-      step(srcId, path38, edges);
-      path38.pop();
+      step(srcId, path39, edges);
+      path39.pop();
       edges.pop();
       visited.delete(srcId);
     }
@@ -1510,35 +1510,37 @@ function upsertObservedEdge(graph, type, source, target, ts, isError = false) {
     const existing = graph.getEdgeAttributes(id);
     const newSpanCount = (existing.signal?.spanCount ?? existing.callCount ?? 0) + 1;
     const newErrorCount = (existing.signal?.errorCount ?? 0) + (isError ? 1 : 0);
+    const newSignal = {
+      spanCount: newSpanCount,
+      errorCount: newErrorCount,
+      lastObservedAgeMs: 0
+    };
     const updated = {
       ...existing,
       provenance: import_types3.Provenance.OBSERVED,
       lastObserved: ts,
       callCount: newSpanCount,
-      signal: {
-        spanCount: newSpanCount,
-        errorCount: newErrorCount,
-        lastObservedAgeMs: 0
-      },
-      confidence: 1
+      signal: newSignal,
+      confidence: (0, import_types3.confidenceForObservedSignal)(newSignal)
     };
     graph.replaceEdgeAttributes(id, updated);
     return { edge: updated, created: false };
   }
+  const signal = {
+    spanCount: 1,
+    errorCount: isError ? 1 : 0,
+    lastObservedAgeMs: 0
+  };
   const edge = {
     id,
     source,
     target,
     type,
     provenance: import_types3.Provenance.OBSERVED,
-    confidence: 1,
+    confidence: (0, import_types3.confidenceForObservedSignal)(signal),
     lastObserved: ts,
     callCount: 1,
-    signal: {
-      spanCount: 1,
-      errorCount: isError ? 1 : 0,
-      lastObservedAgeMs: 0
-    }
+    signal
   };
   graph.addEdgeWithKey(id, source, target, edge);
   return { edge, created: true };
@@ -2092,6 +2094,23 @@ async function writeExtractionErrors(errors, errorsPath) {
   const lines = errors.map((e) => JSON.stringify(e)).join("\n") + "\n";
   await import_node_fs7.promises.appendFile(errorsPath, lines, "utf8");
 }
+var droppedSink = [];
+function noteExtractedDropped(edge) {
+  droppedSink.push(edge);
+}
+function drainDroppedExtracted() {
+  return droppedSink.splice(0, droppedSink.length);
+}
+function isRejectedLogEnabled() {
+  const raw = process.env.NEAT_EXTRACTED_REJECTED_LOG;
+  return raw === "1" || raw === "true";
+}
+async function writeRejectedExtracted(drops, rejectedPath) {
+  if (drops.length === 0) return;
+  await import_node_fs7.promises.mkdir(import_node_path7.default.dirname(rejectedPath), { recursive: true });
+  const lines = drops.map((d) => JSON.stringify({ ...d, ts: (/* @__PURE__ */ new Date()).toISOString() })).join("\n") + "\n";
+  await import_node_fs7.promises.appendFile(rejectedPath, lines, "utf8");
+}
 
 // src/extract/services.ts
 var DEFAULT_SCAN_DEPTH = 5;
@@ -3030,6 +3049,7 @@ async function addDatabasesAndCompat(graph, services, scanPath) {
         target: dbNode.id,
         type: import_types7.EdgeType.CONNECTS_TO,
         provenance: import_types7.Provenance.EXTRACTED,
+        confidence: (0, import_types7.confidenceForExtracted)("structural"),
         // ADR-032 / #140 — every EXTRACTED edge carries evidence.file.
         // Ghost-edge cleanup keys retirement on this; the conditional
         // sourceFile spread that used to live here was a v0.1.x leftover.
@@ -3104,6 +3124,7 @@ async function addConfigNodes(graph, services, scanPath) {
         target: node.id,
         type: import_types8.EdgeType.CONFIGURED_BY,
         provenance: import_types8.Provenance.EXTRACTED,
+        confidence: (0, import_types8.confidenceForExtracted)("structural"),
         evidence: { file: relPath.split(import_node_path18.default.sep).join("/") }
       };
       if (!graph.hasEdge(edge.id)) {
@@ -3258,17 +3279,32 @@ async function addHttpCallEdges(graph, services) {
     for (const [targetId, evidenceFile] of seenTargets) {
       const fileContent = files.find((f) => f.path === evidenceFile.file)?.content ?? "";
       const line = lineOf(fileContent, `//${evidenceFile.host}`);
+      const confidence = (0, import_types9.confidenceForExtracted)("hostname-shape-match");
+      const ev = {
+        file: import_node_path20.default.relative(service.dir, evidenceFile.file),
+        line,
+        snippet: snippet(fileContent, line)
+      };
+      const edgeId = (0, import_types4.extractedEdgeId)(service.node.id, targetId, import_types9.EdgeType.CALLS);
+      if (!(0, import_types9.passesExtractedFloor)(confidence)) {
+        noteExtractedDropped({
+          source: service.node.id,
+          target: targetId,
+          type: import_types9.EdgeType.CALLS,
+          confidence,
+          confidenceKind: "hostname-shape-match",
+          evidence: ev
+        });
+        continue;
+      }
       const edge = {
-        id: (0, import_types4.extractedEdgeId)(service.node.id, targetId, import_types9.EdgeType.CALLS),
+        id: edgeId,
         source: service.node.id,
         target: targetId,
         type: import_types9.EdgeType.CALLS,
         provenance: import_types9.Provenance.EXTRACTED,
-        evidence: {
-          file: import_node_path20.default.relative(service.dir, evidenceFile.file),
-          line,
-          snippet: snippet(fileContent, line)
-        }
+        confidence,
+        evidence: ev
       };
       if (!graph.hasEdge(edge.id)) {
         graph.addEdgeWithKey(edge.id, edge.source, edge.target, edge);
@@ -3307,6 +3343,10 @@ function kafkaEndpointsFromFile(file, serviceDir) {
       name: topic,
       kind: "kafka-topic",
       edgeType,
+      // `producer.send({topic: 'x'})` / `consumer.subscribe({topic: 'x'})` —
+      // framework-aware (kafkajs / node-rdkafka shape). Verified-call-site
+      // tier (ADR-066).
+      confidenceKind: "verified-call-site",
       evidence: {
         file: import_node_path21.default.relative(serviceDir, file.path),
         line,
@@ -3339,6 +3379,10 @@ function redisEndpointsFromFile(file, serviceDir) {
       name: host,
       kind: "redis",
       edgeType: "CALLS",
+      // `redis://host` URL literal — the scheme is structural support, but no
+      // call expression is verified to wire it through. URL-with-structural-
+      // support tier (ADR-066).
+      confidenceKind: "url-with-structural-support",
       evidence: {
         file: import_node_path22.default.relative(serviceDir, file.path),
         line,
@@ -3380,6 +3424,10 @@ function awsEndpointsFromFile(file, serviceDir) {
       name,
       kind,
       edgeType: "CALLS",
+      // SDK marker (S3Client, GetCommand, etc.) plus a Bucket/TableName
+      // literal — framework-aware recognizer, verified-call-site tier
+      // (ADR-066).
+      confidenceKind: "verified-call-site",
       evidence: {
         file: import_node_path23.default.relative(serviceDir, file.path),
         line,
@@ -3459,6 +3507,10 @@ function grpcEndpointsFromFile(file, serviceDir) {
       name,
       kind,
       edgeType: "CALLS",
+      // `new <Name>Client(...)` with @aws-sdk/* or @grpc/grpc-js import
+      // context — import-aware classification per #238. Verified-call-site
+      // tier (ADR-066).
+      confidenceKind: "verified-call-site",
       evidence: {
         file: import_node_path24.default.relative(serviceDir, file.path),
         line,
@@ -3519,6 +3571,18 @@ async function addExternalEndpointEdges(graph, services) {
       const edgeId = (0, import_types4.extractedEdgeId)(service.node.id, ep.infraId, edgeType);
       if (seenEdges.has(edgeId)) continue;
       seenEdges.add(edgeId);
+      const confidence = (0, import_types14.confidenceForExtracted)(ep.confidenceKind);
+      if (!(0, import_types14.passesExtractedFloor)(confidence)) {
+        noteExtractedDropped({
+          source: service.node.id,
+          target: ep.infraId,
+          type: edgeType,
+          confidence,
+          confidenceKind: ep.confidenceKind,
+          evidence: ep.evidence
+        });
+        continue;
+      }
       if (!graph.hasEdge(edgeId)) {
         const edge = {
           id: edgeId,
@@ -3526,6 +3590,7 @@ async function addExternalEndpointEdges(graph, services) {
           target: ep.infraId,
           type: edgeType,
           provenance: import_types14.Provenance.EXTRACTED,
+          confidence,
           evidence: ep.evidence
         };
         graph.addEdgeWithKey(edgeId, edge.source, edge.target, edge);
@@ -3645,6 +3710,7 @@ async function addComposeInfra(graph, scanPath, services) {
         target: targetId,
         type: import_types16.EdgeType.DEPENDS_ON,
         provenance: import_types16.Provenance.EXTRACTED,
+        confidence: (0, import_types16.confidenceForExtracted)("structural"),
         evidence: { file: evidenceFile }
       };
       graph.addEdgeWithKey(edgeId, edge.source, edge.target, edge);
@@ -3705,6 +3771,7 @@ async function addDockerfileRuntimes(graph, services, scanPath) {
         target: node.id,
         type: import_types17.EdgeType.RUNS_ON,
         provenance: import_types17.Provenance.EXTRACTED,
+        confidence: (0, import_types17.confidenceForExtracted)("structural"),
         evidence: {
           file: import_node_path26.default.relative(scanPath, dockerfilePath).split(import_node_path26.default.sep).join("/")
         }
@@ -3821,6 +3888,9 @@ async function addInfra(graph, scanPath, services) {
   };
 }
 
+// src/extract/index.ts
+var import_node_path30 = __toESM(require("path"), 1);
+
 // src/extract/retire.ts
 init_cjs_shims();
 var import_node_fs17 = require("fs");
@@ -3873,13 +3943,26 @@ async function extractFromDirectory(graph, scanPath, opts = {}) {
       );
     }
   }
+  const droppedEntries = drainDroppedExtracted();
+  if (isRejectedLogEnabled() && opts.errorsPath && droppedEntries.length > 0) {
+    const rejectedPath = import_node_path30.default.join(import_node_path30.default.dirname(opts.errorsPath), "rejected.ndjson");
+    try {
+      await writeRejectedExtracted(droppedEntries, rejectedPath);
+    } catch (err) {
+      console.warn(
+        `[neat] failed to write rejected extracted edges to ${rejectedPath}: ${err.message}`
+      );
+    }
+  }
   const result = {
     nodesAdded: phase1Nodes + phase2.nodesAdded + phase3.nodesAdded + phase4.nodesAdded + phase5.nodesAdded,
     edgesAdded: phase2.edgesAdded + phase3.edgesAdded + phase4.edgesAdded + phase5.edgesAdded,
     frontiersPromoted,
     extractionErrors: errorEntries.length,
     errorEntries,
-    ghostsRetired
+    ghostsRetired,
+    extractedDropped: droppedEntries.length,
+    droppedEntries
   };
   emitNeatEvent({
     type: "extraction-complete",
@@ -3897,7 +3980,7 @@ async function extractFromDirectory(graph, scanPath, opts = {}) {
 // src/persist.ts
 init_cjs_shims();
 var import_node_fs18 = require("fs");
-var import_node_path30 = __toESM(require("path"), 1);
+var import_node_path31 = __toESM(require("path"), 1);
 var SCHEMA_VERSION = 2;
 function migrateV1ToV2(payload) {
   const nodes = payload.graph.nodes;
@@ -3911,7 +3994,7 @@ function migrateV1ToV2(payload) {
   return { ...payload, schemaVersion: 2 };
 }
 async function ensureDir(filePath) {
-  await import_node_fs18.promises.mkdir(import_node_path30.default.dirname(filePath), { recursive: true });
+  await import_node_fs18.promises.mkdir(import_node_path31.default.dirname(filePath), { recursive: true });
 }
 async function saveGraphToDisk(graph, outPath) {
   await ensureDir(outPath);
@@ -3980,23 +4063,23 @@ function startPersistLoop(graph, outPath, intervalMs = 6e4) {
 
 // src/projects.ts
 init_cjs_shims();
-var import_node_path31 = __toESM(require("path"), 1);
+var import_node_path32 = __toESM(require("path"), 1);
 function pathsForProject(project, baseDir) {
   if (project === DEFAULT_PROJECT) {
     return {
-      snapshotPath: import_node_path31.default.join(baseDir, "graph.json"),
-      errorsPath: import_node_path31.default.join(baseDir, "errors.ndjson"),
-      staleEventsPath: import_node_path31.default.join(baseDir, "stale-events.ndjson"),
-      embeddingsCachePath: import_node_path31.default.join(baseDir, "embeddings.json"),
-      policyViolationsPath: import_node_path31.default.join(baseDir, "policy-violations.ndjson")
+      snapshotPath: import_node_path32.default.join(baseDir, "graph.json"),
+      errorsPath: import_node_path32.default.join(baseDir, "errors.ndjson"),
+      staleEventsPath: import_node_path32.default.join(baseDir, "stale-events.ndjson"),
+      embeddingsCachePath: import_node_path32.default.join(baseDir, "embeddings.json"),
+      policyViolationsPath: import_node_path32.default.join(baseDir, "policy-violations.ndjson")
     };
   }
   return {
-    snapshotPath: import_node_path31.default.join(baseDir, `${project}.json`),
-    errorsPath: import_node_path31.default.join(baseDir, `errors.${project}.ndjson`),
-    staleEventsPath: import_node_path31.default.join(baseDir, `stale-events.${project}.ndjson`),
-    embeddingsCachePath: import_node_path31.default.join(baseDir, `embeddings.${project}.json`),
-    policyViolationsPath: import_node_path31.default.join(baseDir, `policy-violations.${project}.ndjson`)
+    snapshotPath: import_node_path32.default.join(baseDir, `${project}.json`),
+    errorsPath: import_node_path32.default.join(baseDir, `errors.${project}.ndjson`),
+    staleEventsPath: import_node_path32.default.join(baseDir, `stale-events.${project}.ndjson`),
+    embeddingsCachePath: import_node_path32.default.join(baseDir, `embeddings.${project}.json`),
+    policyViolationsPath: import_node_path32.default.join(baseDir, `policy-violations.${project}.ndjson`)
   };
 }
 var Projects = class {
@@ -4075,14 +4158,6 @@ function nodeIsFrontier(graph, nodeId) {
   const attrs = graph.getNodeAttributes(nodeId);
   return attrs.type === import_types19.NodeType.FrontierNode;
 }
-function hasAnyObservedFromSource(graph, sourceId) {
-  if (!graph.hasNode(sourceId)) return false;
-  for (const edgeId of graph.outboundEdges(sourceId)) {
-    const e = graph.getEdgeAttributes(edgeId);
-    if (e.provenance === import_types19.Provenance.OBSERVED) return true;
-  }
-  return false;
-}
 function clampConfidence(n) {
   if (!Number.isFinite(n)) return 0;
   return Math.max(0, Math.min(1, n));
@@ -4096,32 +4171,34 @@ function reasonForMissingExtracted(source, target, type) {
 var RECOMMENDATION_MISSING_OBSERVED = "Verify the code path is exercised in production; check feature flags or conditional branches that might gate the call.";
 var RECOMMENDATION_MISSING_EXTRACTED = "Likely dynamic dispatch, reflection, or a coverage gap in tree-sitter extraction. Consider an `aliases` entry on the source service or file an extractor issue.";
 var RECOMMENDATION_HOST_MISMATCH = "Check environment-specific config overrides \u2014 the runtime host differs from what static configuration declares.";
+function gradedConfidence(edge) {
+  if (typeof edge.confidence === "number") return clampConfidence(edge.confidence);
+  return clampConfidence(confidenceForEdge(edge));
+}
 function detectMissingDivergences(graph, bucket) {
   const out = [];
   if (bucket.extracted && !bucket.observed) {
     if (!nodeIsFrontier(graph, bucket.target)) {
-      const sourceHasTraffic = hasAnyObservedFromSource(graph, bucket.source);
       out.push({
         type: "missing-observed",
         source: bucket.source,
         target: bucket.target,
         edgeType: bucket.type,
         extracted: bucket.extracted,
-        confidence: sourceHasTraffic ? 1 : 0.5,
+        confidence: gradedConfidence(bucket.extracted),
         reason: reasonForMissingObserved(bucket.source, bucket.target, bucket.type),
         recommendation: RECOMMENDATION_MISSING_OBSERVED
       });
     }
   }
   if (bucket.observed && !bucket.extracted) {
-    const cascaded = clampConfidence(confidenceForEdge(bucket.observed));
     out.push({
       type: "missing-extracted",
       source: bucket.source,
       target: bucket.target,
       edgeType: bucket.type,
       observed: bucket.observed,
-      confidence: cascaded,
+      confidence: gradedConfidence(bucket.observed),
       reason: reasonForMissingExtracted(bucket.source, bucket.target, bucket.type),
       recommendation: RECOMMENDATION_MISSING_EXTRACTED
     });
@@ -4260,8 +4337,17 @@ function computeDivergences(graph, opts = {}) {
     const target = opts.node;
     filtered = filtered.filter((d) => involvesNode(d, target));
   }
+  const TYPE_LEADERSHIP = {
+    "missing-extracted": 0,
+    "missing-observed": 1,
+    "version-mismatch": 2,
+    "host-mismatch": 3,
+    "compat-violation": 4
+  };
   filtered.sort((a, b) => {
     if (b.confidence !== a.confidence) return b.confidence - a.confidence;
+    const lead = TYPE_LEADERSHIP[a.type] - TYPE_LEADERSHIP[b.type];
+    if (lead !== 0) return lead;
     if (a.type !== b.type) return a.type.localeCompare(b.type);
     if (a.source !== b.source) return a.source.localeCompare(b.source);
     return a.target.localeCompare(b.target);
@@ -4354,23 +4440,23 @@ function canonicalJson(value) {
 init_cjs_shims();
 var import_node_fs20 = require("fs");
 var import_node_os2 = __toESM(require("os"), 1);
-var import_node_path32 = __toESM(require("path"), 1);
+var import_node_path33 = __toESM(require("path"), 1);
 var import_types20 = require("@neat.is/types");
 var LOCK_TIMEOUT_MS = 5e3;
 var LOCK_RETRY_MS = 50;
 function neatHome() {
   const override = process.env.NEAT_HOME;
-  if (override && override.length > 0) return import_node_path32.default.resolve(override);
-  return import_node_path32.default.join(import_node_os2.default.homedir(), ".neat");
+  if (override && override.length > 0) return import_node_path33.default.resolve(override);
+  return import_node_path33.default.join(import_node_os2.default.homedir(), ".neat");
 }
 function registryPath() {
-  return import_node_path32.default.join(neatHome(), "projects.json");
+  return import_node_path33.default.join(neatHome(), "projects.json");
 }
 function registryLockPath() {
-  return import_node_path32.default.join(neatHome(), "projects.json.lock");
+  return import_node_path33.default.join(neatHome(), "projects.json.lock");
 }
 async function writeAtomically(target, contents) {
-  await import_node_fs20.promises.mkdir(import_node_path32.default.dirname(target), { recursive: true });
+  await import_node_fs20.promises.mkdir(import_node_path33.default.dirname(target), { recursive: true });
   const tmp = `${target}.${process.pid}.${Date.now()}.${Math.random().toString(36).slice(2, 8)}.tmp`;
   const fd = await import_node_fs20.promises.open(tmp, "w");
   try {
@@ -4383,7 +4469,7 @@ async function writeAtomically(target, contents) {
 }
 async function acquireLock(lockPath, timeoutMs = LOCK_TIMEOUT_MS) {
   const deadline = Date.now() + timeoutMs;
-  await import_node_fs20.promises.mkdir(import_node_path32.default.dirname(lockPath), { recursive: true });
+  await import_node_fs20.promises.mkdir(import_node_path33.default.dirname(lockPath), { recursive: true });
   while (true) {
     try {
       const fd = await import_node_fs20.promises.open(lockPath, "wx");
@@ -4945,11 +5031,11 @@ async function buildApi(opts) {
 // src/daemon.ts
 init_otel();
 function neatHomeFor(opts) {
-  if (opts.neatHome && opts.neatHome.length > 0) return import_node_path35.default.resolve(opts.neatHome);
+  if (opts.neatHome && opts.neatHome.length > 0) return import_node_path36.default.resolve(opts.neatHome);
   const env = process.env.NEAT_HOME;
-  if (env && env.length > 0) return import_node_path35.default.resolve(env);
+  if (env && env.length > 0) return import_node_path36.default.resolve(env);
   const home = process.env.HOME ?? process.env.USERPROFILE ?? "";
-  return import_node_path35.default.join(home, ".neat");
+  return import_node_path36.default.join(home, ".neat");
 }
 function routeSpanToProject(serviceName, projects) {
   if (!serviceName) return DEFAULT_PROJECT;
@@ -4962,7 +5048,7 @@ function routeSpanToProject(serviceName, projects) {
   return DEFAULT_PROJECT;
 }
 async function bootstrapProject(entry2) {
-  const paths = pathsForProject(entry2.name, import_node_path35.default.join(entry2.path, "neat-out"));
+  const paths = pathsForProject(entry2.name, import_node_path36.default.join(entry2.path, "neat-out"));
   try {
     const stat = await import_node_fs21.promises.stat(entry2.path);
     if (!stat.isDirectory()) {
@@ -5035,7 +5121,7 @@ async function startDaemon(opts = {}) {
       `neatd: registry not found at ${regPath}. Run \`neat init <path>\` to register a project before starting the daemon.`
     );
   }
-  const pidPath = import_node_path35.default.join(home, "neatd.pid");
+  const pidPath = import_node_path36.default.join(home, "neatd.pid");
   await writeAtomically(pidPath, `${process.pid}
 `);
   const slots = /* @__PURE__ */ new Map();
@@ -5199,7 +5285,7 @@ async function startDaemon(opts = {}) {
 init_cjs_shims();
 var import_node_child_process = require("child_process");
 var import_node_net = __toESM(require("net"), 1);
-var import_node_path36 = __toESM(require("path"), 1);
+var import_node_path37 = __toESM(require("path"), 1);
 var DEFAULT_WEB_PORT = 6328;
 async function assertPortFree(port) {
   await new Promise((resolve, reject) => {
@@ -5227,10 +5313,10 @@ function resolveWebPackageDir() {
     eval("require")
   );
   const pkgJsonPath = req.resolve("@neat.is/web/package.json");
-  return import_node_path36.default.dirname(pkgJsonPath);
+  return import_node_path37.default.dirname(pkgJsonPath);
 }
 function resolveStandaloneServerEntry(webDir) {
-  return import_node_path36.default.join(webDir, ".next/standalone/packages/web/server.js");
+  return import_node_path37.default.join(webDir, ".next/standalone/packages/web/server.js");
 }
 async function spawnWebUI(restPort) {
   const portRaw = process.env.NEAT_WEB_PORT;
@@ -5255,7 +5341,7 @@ async function spawnWebUI(restPort) {
     NEAT_API_URL: process.env.NEAT_API_URL ?? `http://localhost:${restPort}`
   };
   const child = (0, import_node_child_process.spawn)(process.execPath, [serverEntry], {
-    cwd: import_node_path36.default.dirname(serverEntry),
+    cwd: import_node_path37.default.dirname(serverEntry),
     env,
     stdio: ["ignore", "inherit", "inherit"],
     detached: false
@@ -5292,14 +5378,14 @@ async function spawnWebUI(restPort) {
 // src/neatd.ts
 function neatHome2() {
   if (process.env.NEAT_HOME && process.env.NEAT_HOME.length > 0) {
-    return import_node_path37.default.resolve(process.env.NEAT_HOME);
+    return import_node_path38.default.resolve(process.env.NEAT_HOME);
   }
   const home = process.env.HOME ?? process.env.USERPROFILE ?? "";
-  return import_node_path37.default.join(home, ".neat");
+  return import_node_path38.default.join(home, ".neat");
 }
 async function readPid() {
   try {
-    const raw = await import_node_fs22.promises.readFile(import_node_path37.default.join(neatHome2(), "neatd.pid"), "utf8");
+    const raw = await import_node_fs22.promises.readFile(import_node_path38.default.join(neatHome2(), "neatd.pid"), "utf8");
     const n = Number.parseInt(raw.trim(), 10);
     return Number.isFinite(n) ? n : null;
   } catch {