@neat.is/core 0.4.7 → 0.4.9

package/dist/cli.d.cts

@@ -41,6 +41,7 @@ interface ParsedArgs {
 declare function parseArgs(rest: string[]): ParsedArgs;
 
 declare function readPackageVersion(): string;
+declare function printBanner(): void;
 declare function runInit(opts: InitOptions): Promise<InitResult>;
 declare const CLAUDE_SKILL_CONFIG: {
     mcpServers: {
@@ -64,4 +65,4 @@ declare function runSkill(opts: SkillOptions): Promise<{
 declare const QUERY_VERBS: Set<string>;
 declare function runQueryVerb(cmd: string, parsed: ParsedArgs): Promise<number>;
 
-export { CLAUDE_SKILL_CONFIG, type InitOptions, type InitResult, QUERY_VERBS, type SkillOptions, parseArgs, readPackageVersion, runInit, runQueryVerb, runSkill };
+export { CLAUDE_SKILL_CONFIG, type InitOptions, type InitResult, QUERY_VERBS, type SkillOptions, parseArgs, printBanner, readPackageVersion, runInit, runQueryVerb, runSkill };

package/dist/cli.d.ts

@@ -41,6 +41,7 @@ interface ParsedArgs {
 declare function parseArgs(rest: string[]): ParsedArgs;
 
 declare function readPackageVersion(): string;
+declare function printBanner(): void;
 declare function runInit(opts: InitOptions): Promise<InitResult>;
 declare const CLAUDE_SKILL_CONFIG: {
     mcpServers: {
@@ -64,4 +65,4 @@ declare function runSkill(opts: SkillOptions): Promise<{
 declare const QUERY_VERBS: Set<string>;
 declare function runQueryVerb(cmd: string, parsed: ParsedArgs): Promise<number>;
 
-export { CLAUDE_SKILL_CONFIG, type InitOptions, type InitResult, QUERY_VERBS, type SkillOptions, parseArgs, readPackageVersion, runInit, runQueryVerb, runSkill };
+export { CLAUDE_SKILL_CONFIG, type InitOptions, type InitResult, QUERY_VERBS, type SkillOptions, parseArgs, printBanner, readPackageVersion, runInit, runQueryVerb, runSkill };

package/dist/cli.js

@@ -41,14 +41,16 @@ import {
   setStatus,
   startPersistLoop,
   startStalenessLoop
-} from "./chunk-7FTK47JQ.js";
+} from "./chunk-J5CEKCTR.js";
 import {
   startOtelGrpcReceiver
 } from "./chunk-3QCRUEQD.js";
 import {
   __dirname,
   __require,
-  buildOtelReceiver
+  assertBindAuthority,
+  buildOtelReceiver,
+  readAuthEnv
 } from "./chunk-HVF4S7J3.js";
 
 // src/cli.ts
@@ -383,7 +385,9 @@ async function startWatch(graph, opts) {
     project: projectName,
     onPolicyTrigger
   });
-  const host = opts.host ?? "0.0.0.0";
+  const auth = readAuthEnv();
+  const host = opts.host ?? (auth.authToken ? "0.0.0.0" : "127.0.0.1");
+  assertBindAuthority(host, auth.authToken);
   const port = opts.port ?? 8080;
   const otelPort = opts.otelPort ?? 4318;
   const cachePath = opts.embeddingsCachePath ?? path2.join(path2.dirname(opts.outPath), "embeddings.json");
@@ -693,7 +697,8 @@ import path4 from "path";
 
 // src/installers/templates.ts
 var OTEL_INIT_HEADER = "// Generated by `neat init --apply` (ADR-069). OpenTelemetry auto-instrumentation hook.";
-var OTEL_INIT_STAMP = "// neat-template-version: 2 \u2014 file-first call-site capture (ADR-089).";
+var OTEL_INIT_STAMP = "// neat-template-version: 3 \u2014 file-first call-site capture (ADR-089) + OTLP bearer auth (#410).";
+var OTEL_OTLP_HEADERS_JS = "if (process.env.NEAT_OTEL_TOKEN) process.env.OTEL_EXPORTER_OTLP_HEADERS ||= 'Authorization=Bearer ' + process.env.NEAT_OTEL_TOKEN";
 function neatCallsiteProcessorSource(ts) {
   const stackT = ts ? ": string" : "";
   const spanT = ts ? ": any" : "";
@@ -760,6 +765,7 @@ var OTEL_INIT_CJS = `${OTEL_INIT_HEADER}
 ${OTEL_INIT_STAMP}
 process.env.OTEL_SERVICE_NAME ||= '__SERVICE_NAME__'
 process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT ||= 'http://localhost:4318/projects/__PROJECT__/v1/traces'
+${OTEL_OTLP_HEADERS_JS}
 
 const { NodeSDK } = require('@opentelemetry/sdk-node')
 const { getNodeAutoInstrumentations } = require('@opentelemetry/auto-instrumentations-node')
@@ -777,6 +783,7 @@ var OTEL_INIT_ESM = `${OTEL_INIT_HEADER}
 ${OTEL_INIT_STAMP}
 process.env.OTEL_SERVICE_NAME ||= '__SERVICE_NAME__'
 process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT ||= 'http://localhost:4318/projects/__PROJECT__/v1/traces'
+${OTEL_OTLP_HEADERS_JS}
 
 import { NodeSDK } from '@opentelemetry/sdk-node'
 import { getNodeAutoInstrumentations } from '@opentelemetry/auto-instrumentations-node'
@@ -794,6 +801,7 @@ var OTEL_INIT_TS = `${OTEL_INIT_HEADER}
 ${OTEL_INIT_STAMP}
 process.env.OTEL_SERVICE_NAME ||= '__SERVICE_NAME__'
 process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT ||= 'http://localhost:4318/projects/__PROJECT__/v1/traces'
+${OTEL_OTLP_HEADERS_JS}
 
 import { NodeSDK } from '@opentelemetry/sdk-node'
 import { getNodeAutoInstrumentations } from '@opentelemetry/auto-instrumentations-node'
@@ -818,6 +826,8 @@ function renderEnvNeat(serviceName, projectName) {
     "# Generated by `neat init --apply` (ADR-069).",
     `OTEL_SERVICE_NAME=${serviceName}`,
     `OTEL_EXPORTER_OTLP_TRACES_ENDPOINT=http://localhost:4318/projects/${projectName}/v1/traces`,
+    "# Set NEAT_OTEL_TOKEN to the daemon's OTLP secret to authenticate exported spans (#410).",
+    "# NEAT_OTEL_TOKEN=",
     ""
   ].join("\n");
 }
@@ -839,6 +849,7 @@ export async function register() {
 var NEXT_INSTRUMENTATION_NODE_TS = `${NEXT_INSTRUMENTATION_HEADER}
 process.env.OTEL_SERVICE_NAME ||= '__SERVICE_NAME__'
 process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT ||= 'http://localhost:4318/projects/__PROJECT__/v1/traces'
+${OTEL_OTLP_HEADERS_JS}
 
 import { NodeSDK } from '@opentelemetry/sdk-node'
 import { getNodeAutoInstrumentations } from '@opentelemetry/auto-instrumentations-node'
@@ -850,6 +861,7 @@ new NodeSDK({ instrumentations }).start()
 var NEXT_INSTRUMENTATION_NODE_JS = `${NEXT_INSTRUMENTATION_HEADER}
 process.env.OTEL_SERVICE_NAME ||= '__SERVICE_NAME__'
 process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT ||= 'http://localhost:4318/projects/__PROJECT__/v1/traces'
+${OTEL_OTLP_HEADERS_JS}
 
 const { NodeSDK } = require('@opentelemetry/sdk-node')
 const { getNodeAutoInstrumentations } = require('@opentelemetry/auto-instrumentations-node')
@@ -868,6 +880,7 @@ var FRAMEWORK_OTEL_INIT_HEADER = "// Generated by `neat init --apply` (ADR-074).
 var FRAMEWORK_OTEL_INIT_TS_BODY = `${FRAMEWORK_OTEL_INIT_HEADER}
 process.env.OTEL_SERVICE_NAME ||= '__SERVICE_NAME__'
 process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT ||= 'http://localhost:4318/projects/__PROJECT__/v1/traces'
+${OTEL_OTLP_HEADERS_JS}
 
 import { NodeSDK } from '@opentelemetry/sdk-node'
 import { getNodeAutoInstrumentations } from '@opentelemetry/auto-instrumentations-node'
@@ -881,6 +894,7 @@ sdk.start()
 var FRAMEWORK_OTEL_INIT_JS_BODY = `${FRAMEWORK_OTEL_INIT_HEADER}
 process.env.OTEL_SERVICE_NAME ||= '__SERVICE_NAME__'
 process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT ||= 'http://localhost:4318/projects/__PROJECT__/v1/traces'
+${OTEL_OTLP_HEADERS_JS}
 
 const { NodeSDK } = require('@opentelemetry/sdk-node')
 const { getNodeAutoInstrumentations } = require('@opentelemetry/auto-instrumentations-node')
@@ -2834,6 +2848,10 @@ var TransportError = class extends Error {
     this.name = "TransportError";
   }
 };
+function resolveAuthToken(env = process.env) {
+  const t = env.NEAT_AUTH_TOKEN;
+  return t && t.length > 0 ? t : void 0;
+}
 function createHttpClient(baseUrl, bearerToken) {
   const root = baseUrl.replace(/\/$/, "");
   const authHeader = bearerToken && bearerToken.length > 0 ? { authorization: `Bearer ${bearerToken}` } : {};
@@ -3450,7 +3468,7 @@ async function runSync(opts) {
         try {
           await pushSnapshotToRemote({
             baseUrl: daemonUrl,
-            token: process.env.NEAT_AUTH_TOKEN,
+            token: resolveAuthToken(),
             project: entry2.name,
             snapshot
           });
@@ -3728,7 +3746,7 @@ function printBanner() {
   console.log("\u255A\u2550\u255D  \u255A\u2550\u2550\u2550\u255D\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u255D  \u255A\u2550\u255D   \u255A\u2550\u255D   ");
   console.log("");
   console.log("  Network Expressive Architecting Tool");
-  console.log("  neat.is  \xB7  v0.4.0  \xB7  Apache 2.0");
+  console.log(`  neat.is  \xB7  v${readPackageVersion()}  \xB7  Apache 2.0`);
   console.log("");
 }
 function printDiscoveryReport(opts, services) {
@@ -4203,7 +4221,7 @@ function resolveProjectFlag(parsed) {
 }
 async function runQueryVerb(cmd, parsed) {
   const baseUrl = process.env.NEAT_API_URL ?? "http://localhost:8080";
-  const client = createHttpClient(baseUrl);
+  const client = createHttpClient(baseUrl, resolveAuthToken());
   const project = resolveProjectFlag(parsed);
   const positional = parsed.positional;
   let work;
@@ -4372,6 +4390,7 @@ export {
   CLAUDE_SKILL_CONFIG,
   QUERY_VERBS,
   parseArgs,
+  printBanner,
   readPackageVersion,
   runInit,
   runQueryVerb,