@neat.is/core 0.4.31-dev.20260718 → 0.5.1-dev.20260719

package/dist/cli.cjs

@@ -1283,7 +1283,7 @@ function databaseRootCauseShape(graph, origin, walk3) {
   for (const id of walk3.path) {
     const owner = resolveOwningService(graph, id);
     if (!owner) continue;
-    const { id: serviceId5, svc } = owner;
+    const { id: serviceId6, svc } = owner;
     const deps = svc.dependencies ?? {};
     for (const pair of candidatePairs) {
       const declared = deps[pair.driver];
@@ -1296,7 +1296,7 @@ function databaseRootCauseShape(graph, origin, walk3) {
       );
       if (!result.compatible) {
         return {
-          rootCauseNode: serviceId5,
+          rootCauseNode: serviceId6,
           rootCauseReason: result.reason ?? "incompatible driver",
           ...result.minDriverVersion ? {
             fixRecommendation: `Upgrade ${svc.name} ${pair.driver} driver to >= ${result.minDriverVersion}`
@@ -1311,7 +1311,7 @@ function serviceRootCauseShape(graph, _origin, walk3) {
   for (const id of walk3.path) {
     const owner = resolveOwningService(graph, id);
     if (!owner) continue;
-    const { id: serviceId5, svc } = owner;
+    const { id: serviceId6, svc } = owner;
     const deps = svc.dependencies ?? {};
     const serviceNodeEngine = svc.nodeEngine;
     for (const constraint of nodeEngineConstraints()) {
@@ -1320,7 +1320,7 @@ function serviceRootCauseShape(graph, _origin, walk3) {
       const result = checkNodeEngineConstraint(constraint, declared, serviceNodeEngine);
       if (!result.compatible && result.reason) {
         return {
-          rootCauseNode: serviceId5,
+          rootCauseNode: serviceId6,
           rootCauseReason: result.reason,
           ...result.requiredNodeVersion ? {
             fixRecommendation: `Bump ${svc.name}'s engines.node to >= ${result.requiredNodeVersion}`
@@ -1335,7 +1335,7 @@ function serviceRootCauseShape(graph, _origin, walk3) {
       const result = checkPackageConflict(conflict, declared, requiredDeclared);
       if (!result.compatible && result.reason) {
         return {
-          rootCauseNode: serviceId5,
+          rootCauseNode: serviceId6,
           rootCauseReason: result.reason,
           fixRecommendation: `Upgrade ${svc.name}'s ${conflict.requires.name} to >= ${conflict.requires.minVersion}`
         };
@@ -1426,9 +1426,9 @@ function rootCauseFromIncidents(nodeId, incidents, errorEvent) {
 function isFailingCallEdge(e) {
   return e.type === import_types.EdgeType.CALLS && (e.signal?.errorCount ?? 0) > 0;
 }
-function callSourcesForService(graph, serviceId5) {
-  const ids = [serviceId5];
-  for (const edgeId of graph.outboundEdges(serviceId5)) {
+function callSourcesForService(graph, serviceId6) {
+  const ids = [serviceId6];
+  for (const edgeId of graph.outboundEdges(serviceId6)) {
     const e = graph.getEdgeAttributes(edgeId);
     if (e.type !== import_types.EdgeType.CONTAINS) continue;
     const tgt = graph.getNodeAttributes(e.target);
@@ -1445,9 +1445,9 @@ function failingCallDominates(e, id, curEdge, curId) {
   }
   return id < curId;
 }
-function dominantFailingCall(graph, serviceId5, visited) {
+function dominantFailingCall(graph, serviceId6, visited) {
   let best = null;
-  for (const src of callSourcesForService(graph, serviceId5)) {
+  for (const src of callSourcesForService(graph, serviceId6)) {
     for (const edgeId of graph.outboundEdges(src)) {
       const e = graph.getEdgeAttributes(edgeId);
       if (!isFailingCallEdge(e)) continue;
@@ -2616,6 +2616,27 @@ function ensureLocalDatabaseNode(graph, serviceName, name, engine) {
   graph.addNode(id, node);
   return id;
 }
+function findDeclaredDatabaseForService(graph, serviceNodeId, engine) {
+  if (!graph.hasNode(serviceNodeId)) return null;
+  const sources = [serviceNodeId];
+  for (const edgeId of graph.outboundEdges(serviceNodeId)) {
+    const e = graph.getEdgeAttributes(edgeId);
+    if (e.type === import_types3.EdgeType.CONTAINS) sources.push(e.target);
+  }
+  const matches = /* @__PURE__ */ new Set();
+  for (const src of sources) {
+    if (!graph.hasNode(src)) continue;
+    for (const edgeId of graph.outboundEdges(src)) {
+      const edge = graph.getEdgeAttributes(edgeId);
+      if (edge.type !== import_types3.EdgeType.CONNECTS_TO || edge.provenance !== import_types3.Provenance.EXTRACTED) continue;
+      if (!graph.hasNode(edge.target)) continue;
+      const target = graph.getNodeAttributes(edge.target);
+      if (target.type !== import_types3.NodeType.DatabaseNode || target.engine !== engine) continue;
+      matches.add(edge.target);
+    }
+  }
+  return matches.size === 1 ? [...matches][0] : null;
+}
 function ensureFrontierNode(graph, host, ts) {
   const id = frontierIdFor(host);
   if (graph.hasNode(id)) {
@@ -2636,6 +2657,7 @@ function ensureFrontierNode(graph, host, ts) {
 }
 function upsertObservedEdge(graph, type, source, target, ts, isError = false, evidence) {
   if (!graph.hasNode(source) || !graph.hasNode(target)) return null;
+  const grain = source.startsWith("file:") ? "file" : "service";
   const id = makeObservedEdgeId(type, source, target);
   if (graph.hasEdge(id)) {
     const existing = graph.getEdgeAttributes(id);
@@ -2652,7 +2674,9 @@ function upsertObservedEdge(graph, type, source, target, ts, isError = false, ev
       lastObserved: ts,
       callCount: newSpanCount,
       signal: newSignal,
-      confidence: (0, import_types3.confidenceForObservedSignal)(newSignal)
+      confidence: (0, import_types3.confidenceForObservedSignal)(newSignal),
+      grain
+      // backfills legacy edges that predate ADR-142
     };
     graph.replaceEdgeAttributes(id, updated);
     return { edge: updated, created: false };
@@ -2672,6 +2696,7 @@ function upsertObservedEdge(graph, type, source, target, ts, isError = false, ev
     lastObserved: ts,
     callCount: 1,
     signal,
+    grain,
     // Call-site evidence from span code.* semconv (file-awareness.md §4 + §6).
     // Only set when code.filepath was present on the span — never fabricated.
     ...evidence ? { evidence } : {}
@@ -2874,13 +2899,18 @@ async function handleSpan(ctx, span) {
         ensureDatabaseNode(ctx.graph, host, span.dbSystem);
         targetId = (0, import_types3.databaseId)(host);
       } else {
-        const localName = span.dbName ?? span.dbSystem;
-        targetId = ensureLocalDatabaseNode(
-          ctx.graph,
-          span.service,
-          localName,
-          span.dbSystem
-        );
+        const declared = findDeclaredDatabaseForService(ctx.graph, sourceId, span.dbSystem);
+        if (declared) {
+          targetId = declared;
+        } else {
+          const localName = span.dbName ?? span.dbSystem;
+          targetId = ensureLocalDatabaseNode(
+            ctx.graph,
+            span.service,
+            localName,
+            span.dbSystem
+          );
+        }
       }
       const result = upsertObservedEdge(
         ctx.graph,
@@ -3064,29 +3094,29 @@ function promoteFrontierNodes(graph, opts = {}) {
     toPromote.push({ frontierId: id, serviceId: target });
   });
   let promoted = 0;
-  for (const { frontierId: frontierId2, serviceId: serviceId5 } of toPromote) {
+  for (const { frontierId: frontierId2, serviceId: serviceId6 } of toPromote) {
     if (opts.policies && opts.policies.length > 0 && opts.policyCtx) {
       const gate = canPromoteFrontier(graph, frontierId2, opts.policies, opts.policyCtx);
       if (!gate.allowed) {
         continue;
       }
     }
-    rewireFrontierEdges(graph, frontierId2, serviceId5);
+    rewireFrontierEdges(graph, frontierId2, serviceId6);
     graph.dropNode(frontierId2);
     promoted++;
   }
   return promoted;
 }
-function rewireFrontierEdges(graph, frontierId2, serviceId5) {
+function rewireFrontierEdges(graph, frontierId2, serviceId6) {
   const inbound = [...graph.inboundEdges(frontierId2)];
   const outbound = [...graph.outboundEdges(frontierId2)];
   for (const edgeId of inbound) {
     const edge = graph.getEdgeAttributes(edgeId);
-    rebuildEdge(graph, edge, edge.source, serviceId5, edgeId);
+    rebuildEdge(graph, edge, edge.source, serviceId6, edgeId);
   }
   for (const edgeId of outbound) {
     const edge = graph.getEdgeAttributes(edgeId);
-    rebuildEdge(graph, edge, serviceId5, edge.target, edgeId);
+    rebuildEdge(graph, edge, serviceId6, edge.target, edgeId);
   }
 }
 function rebuildEdge(graph, edge, newSource, newTarget, oldEdgeId) {
@@ -3894,9 +3924,9 @@ var K8S_KINDS_WITH_HOSTNAMES = /* @__PURE__ */ new Set([
   "StatefulSet",
   "DaemonSet"
 ]);
-function addAliases(graph, serviceId5, candidates) {
-  if (!graph.hasNode(serviceId5)) return;
-  const node = graph.getNodeAttributes(serviceId5);
+function addAliases(graph, serviceId6, candidates) {
+  if (!graph.hasNode(serviceId6)) return;
+  const node = graph.getNodeAttributes(serviceId6);
   if (node.type !== import_types6.NodeType.ServiceNode) return;
   const set = new Set(node.aliases ?? []);
   for (const c of candidates) {
@@ -3906,7 +3936,7 @@ function addAliases(graph, serviceId5, candidates) {
   }
   if (set.size === 0) return;
   const updated = { ...node, aliases: [...set].sort() };
-  graph.replaceNodeAttributes(serviceId5, updated);
+  graph.replaceNodeAttributes(serviceId6, updated);
 }
 function indexServicesByName(services) {
   const map = /* @__PURE__ */ new Map();
@@ -3939,12 +3969,12 @@ async function collectComposeAliases(graph, scanPath, serviceIndex) {
   }
   if (!compose?.services) return;
   for (const [composeName, svc] of Object.entries(compose.services)) {
-    const serviceId5 = serviceIndex.get(composeName);
-    if (!serviceId5) continue;
+    const serviceId6 = serviceIndex.get(composeName);
+    if (!serviceId6) continue;
     const aliases = /* @__PURE__ */ new Set([composeName]);
     if (svc.container_name) aliases.add(svc.container_name);
     if (svc.hostname) aliases.add(svc.hostname);
-    addAliases(graph, serviceId5, aliases);
+    addAliases(graph, serviceId6, aliases);
   }
 }
 var LABEL_KEYS = /* @__PURE__ */ new Set([
@@ -4594,6 +4624,29 @@ async function readIfExists(filePath) {
     return null;
   }
 }
+async function resolveEnvVar(serviceDir, name) {
+  const entries = await import_node_fs13.promises.readdir(serviceDir, { withFileTypes: true }).catch(() => []);
+  const envNames = entries.filter((e) => e.isFile() && (e.name === ".env" || e.name.startsWith(".env."))).map((e) => e.name);
+  const rank = (n) => n === ".env.local" ? 0 : n === ".env" ? 1 : 2;
+  envNames.sort((a, b) => rank(a) - rank(b) || a.localeCompare(b));
+  for (const fileName of envNames) {
+    const content = await readIfExists(import_node_path15.default.join(serviceDir, fileName));
+    if (!content) continue;
+    for (const line of content.split("\n")) {
+      const trimmed = line.trim();
+      if (!trimmed || trimmed.startsWith("#")) continue;
+      const eq = trimmed.indexOf("=");
+      if (eq < 0) continue;
+      if (trimmed.slice(0, eq).trim() !== name) continue;
+      let value = trimmed.slice(eq + 1).trim();
+      if (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'")) {
+        value = value.slice(1, -1);
+      }
+      return value || null;
+    }
+  }
+  return null;
+}
 async function findFirst(serviceDir, candidates) {
   for (const rel of candidates) {
     const abs = import_node_path15.default.join(serviceDir, rel);
@@ -4691,6 +4744,14 @@ async function parse3(serviceDir) {
     const config = parseConnectionString(urlMatch[1]);
     if (config) return [{ ...config, sourceFile: schemaPath }];
   }
+  const envMatch = body.match(/url\s*=\s*env\(\s*"([^"]+)"\s*\)/);
+  if (envMatch) {
+    const resolved = await resolveEnvVar(serviceDir, envMatch[1]);
+    if (resolved) {
+      const config = parseConnectionString(resolved);
+      if (config) return [{ ...config, sourceFile: schemaPath }];
+    }
+  }
   return [
     {
       host: `${engine}-prisma`,
@@ -4734,6 +4795,15 @@ async function parse4(serviceDir) {
     const config = parseConnectionString(urlMatch[1]);
     if (config) return [{ ...config, sourceFile: filePath }];
   }
+  const urlEnvMatch = content.match(
+    /(?:url|connectionString)\s*:\s*process\.env(?:\.([A-Za-z_$][\w$]*)|\[\s*['"]([^'"]+)['"]\s*\])/
+  );
+  if (urlEnvMatch) {
+    const varName = urlEnvMatch[1] ?? urlEnvMatch[2];
+    const resolved = varName ? await resolveEnvVar(serviceDir, varName) : null;
+    const config = resolved ? parseConnectionString(resolved) : null;
+    if (config) return [{ ...config, sourceFile: filePath }];
+  }
   const hostMatch = content.match(/host\s*:\s*['"`]([^'"`]+)['"`]/);
   if (hostMatch) {
     const portMatch = content.match(/port\s*:\s*(\d+)/);
@@ -4787,6 +4857,15 @@ async function parse5(serviceDir) {
     const config = parseConnectionString(urlMatch[1]);
     if (config) return [{ ...config, sourceFile: filePath }];
   }
+  const urlEnvMatch = content.match(
+    /connection\s*:\s*process\.env(?:\.([A-Za-z_$][\w$]*)|\[\s*['"]([^'"]+)['"]\s*\])/
+  );
+  if (urlEnvMatch) {
+    const varName = urlEnvMatch[1] ?? urlEnvMatch[2];
+    const resolved = varName ? await resolveEnvVar(serviceDir, varName) : null;
+    const config = resolved ? parseConnectionString(resolved) : null;
+    if (config) return [{ ...config, sourceFile: filePath }];
+  }
   const host = content.match(/host\s*:\s*['"`]([^'"`]+)['"`]/)?.[1];
   if (host) {
     const port = content.match(/port\s*:\s*(\d+)/)?.[1];
@@ -6335,6 +6414,16 @@ function constructorMatchesImport(name, ctx) {
   if (name === "createClient") return ctx.hasSupabaseJs;
   return ctx.hasSupabaseSsr;
 }
+var SUPABASE_CLIENT_ASSIGN_RE = /(?:const|let|var)\s+(\w+)\s*=\s*(?:await\s+)?(createClient|createServerClient|createBrowserClient)\s*\(/g;
+function supabaseClientVars(content, ctx) {
+  const vars = /* @__PURE__ */ new Set();
+  SUPABASE_CLIENT_ASSIGN_RE.lastIndex = 0;
+  let m;
+  while ((m = SUPABASE_CLIENT_ASSIGN_RE.exec(content)) !== null) {
+    if (constructorMatchesImport(m[2], ctx)) vars.add(m[1]);
+  }
+  return vars;
+}
 function supabaseEndpointsFromFile(file, serviceDir) {
   const ctx = readImports2(file.content);
   if (!ctx.hasSupabaseJs && !ctx.hasSupabaseSsr) return [];
@@ -6367,6 +6456,34 @@ function supabaseEndpointsFromFile(file, serviceDir) {
       }
     });
   }
+  const clientVars = supabaseClientVars(file.content, ctx);
+  for (const clientVar of clientVars) {
+    const accessRe = new RegExp(
+      `\\b${clientVar}\\s*\\.\\s*(from|rpc)\\s*\\(\\s*['"\`]([\\w.-]+)['"\`]`,
+      "g"
+    );
+    let am;
+    while ((am = accessRe.exec(file.content)) !== null) {
+      const kind = am[1] === "rpc" ? "supabase-rpc" : "supabase-table";
+      const resource = am[2];
+      const key = `${kind}/${resource}`;
+      if (seen.has(key)) continue;
+      seen.add(key);
+      const line = lineOf(file.content, am[0]);
+      out.push({
+        infraId: (0, import_types19.infraId)(kind, resource),
+        name: resource,
+        kind,
+        edgeType: "CALLS",
+        confidenceKind: "verified-call-site",
+        evidence: {
+          file: import_node_path31.default.relative(serviceDir, file.path),
+          line,
+          snippet: snippet(file.content, line)
+        }
+      });
+    }
+  }
   return out;
 }
 
@@ -7448,14 +7565,23 @@ var import_types30 = require("@neat.is/types");
 function bucketKey(source, target, type) {
   return `${type}|${source}|${target}`;
 }
+function bucketSourceFor(graph, edge) {
+  if (edge.type !== import_types30.EdgeType.CONNECTS_TO) return edge.source;
+  const parsed = (0, import_types30.parseFileId)(edge.source);
+  if (!parsed || !graph.hasNode(edge.target)) return edge.source;
+  const target = graph.getNodeAttributes(edge.target);
+  if (target.type !== import_types30.NodeType.DatabaseNode) return edge.source;
+  return (0, import_types30.serviceId)(parsed.service);
+}
 function bucketEdges(graph) {
   const buckets2 = /* @__PURE__ */ new Map();
   graph.forEachEdge((id, attrs) => {
     const e = attrs;
     const parsed = (0, import_types30.parseEdgeId)(id);
     const provenance = parsed?.provenance ?? e.provenance;
-    const key = bucketKey(e.source, e.target, e.type);
-    const cur = buckets2.get(key) ?? { source: e.source, target: e.target, type: e.type };
+    const source = bucketSourceFor(graph, e);
+    const key = bucketKey(source, e.target, e.type);
+    const cur = buckets2.get(key) ?? { source, target: e.target, type: e.type };
     switch (provenance) {
       case import_types30.Provenance.EXTRACTED:
         cur.extracted = e;
@@ -9955,6 +10081,7 @@ init_otel();
 
 // src/connectors/index.ts
 init_cjs_shims();
+var import_types35 = require("@neat.is/types");
 
 // src/connectors/registry.ts
 init_cjs_shims();
@@ -10430,19 +10557,23 @@ async function fetchPgStatStatements(connectionString, limit = DEFAULT_STATEMENT
 
 // src/connectors/supabase/resolve.ts
 init_cjs_shims();
-var import_types36 = require("@neat.is/types");
+var import_types37 = require("@neat.is/types");
 function createSupabaseResolveTarget(graph, config) {
   return (signal, _ctx) => {
     if (signal.targetKind !== SUPABASE_TABLE_TARGET_KIND && signal.targetKind !== SUPABASE_RPC_TARGET_KIND) {
       return null;
     }
-    const subResourceId = (0, import_types36.infraId)(signal.targetKind, `${config.nodeRef}/${signal.targetName}`);
+    const subResourceId = (0, import_types37.infraId)(signal.targetKind, `${config.nodeRef}/${signal.targetName}`);
     if (graph.hasNode(subResourceId)) {
-      return { targetNodeId: subResourceId, serviceName: config.serviceName, edgeType: import_types36.EdgeType.CALLS };
+      return { targetNodeId: subResourceId, serviceName: config.serviceName, edgeType: import_types37.EdgeType.CALLS };
     }
-    const projectLevelId = (0, import_types36.infraId)("supabase", config.nodeRef);
+    const bareResourceId = (0, import_types37.infraId)(signal.targetKind, signal.targetName);
+    if (graph.hasNode(bareResourceId)) {
+      return { targetNodeId: bareResourceId, serviceName: config.serviceName, edgeType: import_types37.EdgeType.CALLS };
+    }
+    const projectLevelId = (0, import_types37.infraId)("supabase", config.nodeRef);
     if (graph.hasNode(projectLevelId)) {
-      return { targetNodeId: projectLevelId, serviceName: config.serviceName, edgeType: import_types36.EdgeType.CALLS };
+      return { targetNodeId: projectLevelId, serviceName: config.serviceName, edgeType: import_types37.EdgeType.CALLS };
     }
     return null;
   };
@@ -10535,7 +10666,7 @@ function createSupabaseConnector(graph, config, deps = {}) {
 
 // src/connectors/railway/index.ts
 init_cjs_shims();
-var import_types40 = require("@neat.is/types");
+var import_types41 = require("@neat.is/types");
 
 // src/connectors/railway/client.ts
 init_cjs_shims();
@@ -10661,7 +10792,7 @@ function buildRailwayRouteIndex(graph, serviceName) {
   const out = [];
   graph.forEachNode((_id, attrs) => {
     const node = attrs;
-    if (node.type !== import_types40.NodeType.RouteNode) return;
+    if (node.type !== import_types41.NodeType.RouteNode) return;
     const route = attrs;
     if (route.service !== serviceName) return;
     out.push({
@@ -10757,12 +10888,12 @@ function createRailwayResolveTarget(config) {
     const serviceName = config.serviceNameById[config.serviceId];
     if (!serviceName) return null;
     if (signal.targetKind === ROUTE_TARGET_KIND) {
-      return { targetNodeId: signal.targetName, serviceName, edgeType: import_types40.EdgeType.CALLS };
+      return { targetNodeId: signal.targetName, serviceName, edgeType: import_types41.EdgeType.CALLS };
     }
     if (signal.targetKind === PEER_SERVICE_TARGET_KIND) {
       const peerName = config.serviceNameById[signal.targetName];
       if (!peerName) return null;
-      return { targetNodeId: (0, import_types40.serviceId)(peerName), serviceName, edgeType: import_types40.EdgeType.CONNECTS_TO };
+      return { targetNodeId: (0, import_types41.serviceId)(peerName), serviceName, edgeType: import_types41.EdgeType.CONNECTS_TO };
     }
     return null;
   };
@@ -10949,7 +11080,7 @@ function mapLogEntriesToSignals(entries) {
 
 // src/connectors/firebase/resolve.ts
 init_cjs_shims();
-var import_types41 = require("@neat.is/types");
+var import_types42 = require("@neat.is/types");
 function neatServiceNameFor(resourceType, resourceName, serviceMap) {
   switch (resourceType) {
     case "cloud_function":
@@ -10964,7 +11095,7 @@ function routeEntriesFor(graph, serviceName) {
   const entries = [];
   graph.forEachNode((_id, attrs) => {
     const node = attrs;
-    if (node.type !== import_types41.NodeType.RouteNode) return;
+    if (node.type !== import_types42.NodeType.RouteNode) return;
     const route = attrs;
     if (route.service !== serviceName) return;
     entries.push({
@@ -10996,7 +11127,7 @@ function createFirebaseResolveTarget(graph, serviceMap) {
     return {
       targetNodeId: match.routeNodeId,
       serviceName,
-      edgeType: import_types41.EdgeType.CALLS
+      edgeType: import_types42.EdgeType.CALLS
     };
   };
 }
@@ -11023,7 +11154,7 @@ init_cjs_shims();
 
 // src/connectors/cloudflare/connector.ts
 init_cjs_shims();
-var import_types43 = require("@neat.is/types");
+var import_types44 = require("@neat.is/types");
 
 // src/connectors/cloudflare/client.ts
 init_cjs_shims();
@@ -11184,7 +11315,7 @@ function findTaggedWorkerFileNode(graph, workerName) {
   graph.forEachNode((id, attrs) => {
     if (found) return;
     const a = attrs;
-    if (a.type === import_types43.NodeType.FileNode && a.platform === "cloudflare" && a.platformName === workerName) {
+    if (a.type === import_types44.NodeType.FileNode && a.platform === "cloudflare" && a.platformName === workerName) {
       found = id;
     }
   });
@@ -11196,7 +11327,7 @@ function findMatchingRouteNode(graph, serviceName, method, path61) {
   graph.forEachNode((id, attrs) => {
     if (found) return;
     const a = attrs;
-    if (a.type !== import_types43.NodeType.RouteNode || a.service !== serviceName) return;
+    if (a.type !== import_types44.NodeType.RouteNode || a.service !== serviceName) return;
     if (!a.pathTemplate || normalizePathTemplate(a.pathTemplate) !== normalizedPath) return;
     const routeMethod = (a.method ?? "").toUpperCase();
     if (routeMethod !== "ALL" && routeMethod !== method) return;
@@ -11215,11 +11346,11 @@ function createCloudflareResolveTarget(config, graph) {
     };
     const mapping = config.workers?.[scriptName];
     if (mapping) {
-      const wholeFileId = (0, import_types43.fileId)(mapping.service, mapping.entryFile);
+      const wholeFileId = (0, import_types44.fileId)(mapping.service, mapping.entryFile);
       return {
         targetNodeId: resolveRouteGrain(mapping.service, wholeFileId),
         serviceName: mapping.service,
-        edgeType: import_types43.EdgeType.CALLS
+        edgeType: import_types44.EdgeType.CALLS
       };
     }
     const taggedFileId = findTaggedWorkerFileNode(graph, scriptName);
@@ -11228,13 +11359,13 @@ function createCloudflareResolveTarget(config, graph) {
       return {
         targetNodeId: resolveRouteGrain(fileNode.service, taggedFileId),
         serviceName: fileNode.service,
-        edgeType: import_types43.EdgeType.CALLS
+        edgeType: import_types44.EdgeType.CALLS
       };
     }
     return {
-      targetNodeId: (0, import_types43.infraId)("cloudflare-worker", scriptName),
+      targetNodeId: (0, import_types44.infraId)("cloudflare-worker", scriptName),
       serviceName: scriptName,
-      edgeType: import_types43.EdgeType.CALLS,
+      edgeType: import_types44.EdgeType.CALLS,
       ensureInfraNode: { kind: "cloudflare-worker", name: scriptName, provider: "cloudflare" }
     };
   };
@@ -11448,7 +11579,7 @@ var import_node_fs32 = require("fs");
 var import_node_path51 = __toESM(require("path"), 1);
 
 // src/daemon.ts
-var import_types46 = require("@neat.is/types");
+var import_types47 = require("@neat.is/types");
 function daemonJsonPath(scanPath) {
   return import_node_path52.default.join(scanPath, "neat-out", "daemon.json");
 }
@@ -15444,7 +15575,7 @@ var import_node_path59 = __toESM(require("path"), 1);
 
 // src/cli-client.ts
 init_cjs_shims();
-var import_types47 = require("@neat.is/types");
+var import_types48 = require("@neat.is/types");
 var HttpError = class extends Error {
   constructor(status2, message, responseBody = "") {
     super(message);
@@ -15586,7 +15717,7 @@ async function runBlastRadius(client, input) {
   }
 }
 function formatBlastEntry(n) {
-  const tag = n.edgeProvenance === import_types47.Provenance.STALE ? " [STALE \u2014 last seen too long ago]" : "";
+  const tag = n.edgeProvenance === import_types48.Provenance.STALE ? " [STALE \u2014 last seen too long ago]" : "";
   return `  \u2022 ${n.nodeId} (distance ${n.distance}, ${n.edgeProvenance})${tag}`;
 }
 async function runDependencies(client, input) {
@@ -15643,7 +15774,7 @@ async function runObservedDependencies(client, input) {
       if (result.observed) {
         return {
           summary: `${input.nodeId} makes no outbound runtime calls, but OTel has observed it receiving traffic on ${result.inboundObservedCount} inbound call path${result.inboundObservedCount === 1 ? "" : "s"} \u2014 it's a pure receiver.`,
-          provenance: import_types47.Provenance.OBSERVED
+          provenance: import_types48.Provenance.OBSERVED
         };
       }
       const note = result.hasExtractedOutbound ? " Static (EXTRACTED) dependencies exist but no runtime traffic has been seen \u2014 is OTel running?" : "";
@@ -15653,7 +15784,7 @@ async function runObservedDependencies(client, input) {
     return {
       summary: `${input.nodeId} has ${result.dependencies.length} runtime dependenc${result.dependencies.length === 1 ? "y" : "ies"} confirmed by OTel.`,
       block: blockLines.join("\n"),
-      provenance: import_types47.Provenance.OBSERVED
+      provenance: import_types48.Provenance.OBSERVED
     };
   } catch (err) {
     if (err instanceof HttpError && err.status === 404) {
@@ -15707,7 +15838,7 @@ async function runIncidents(client, input) {
     return {
       summary: `${target} has ${body.total} recorded incident${body.total === 1 ? "" : "s"}; showing the ${ordered.length} most recent.`,
       block: blockLines.join("\n"),
-      provenance: import_types47.Provenance.OBSERVED
+      provenance: import_types48.Provenance.OBSERVED
     };
   } catch (err) {
     if (err instanceof HttpError && err.status === 404) {
@@ -15816,7 +15947,7 @@ async function runStaleEdges(client, input) {
   return {
     summary: `${events.length} stale-edge transition${events.length === 1 ? "" : "s"} recorded${input.edgeType ? ` for ${input.edgeType}` : ""}.`,
     block: blockLines.join("\n"),
-    provenance: import_types47.Provenance.STALE
+    provenance: import_types48.Provenance.STALE
   };
 }
 async function runPolicies(client, input) {
@@ -16133,7 +16264,7 @@ async function runSync(opts) {
 }
 
 // src/cli.ts
-var import_types48 = require("@neat.is/types");
+var import_types49 = require("@neat.is/types");
 function isNpxInvocation() {
   if (process.env.npm_command === "exec") return true;
   const execpath = process.env.npm_execpath ?? "";
@@ -17070,10 +17201,10 @@ async function runQueryVerb(cmd, parsed) {
         const parts = parsed.type.split(",").map((s) => s.trim()).filter((s) => s.length > 0);
         const out = [];
         for (const p of parts) {
-          const r = import_types48.DivergenceTypeSchema.safeParse(p);
+          const r = import_types49.DivergenceTypeSchema.safeParse(p);
           if (!r.success) {
             console.error(
-              `neat divergences: unknown --type "${p}". allowed: ${import_types48.DivergenceTypeSchema.options.join(", ")}`
+              `neat divergences: unknown --type "${p}". allowed: ${import_types49.DivergenceTypeSchema.options.join(", ")}`
             );
             return 2;
           }