@neat.is/core 0.5.0 → 0.5.1-dev.20260719

package/dist/neatd.js

@@ -2,11 +2,11 @@
 import {
   reconcileDaemonRecordSync,
   startDaemon
-} from "./chunk-5MGHWP6R.js";
+} from "./chunk-O4PCNQFG.js";
 import {
   listProjects,
   registryPath
-} from "./chunk-QQDZSIY3.js";
+} from "./chunk-BI3XKGVG.js";
 import {
   BindAuthorityError,
   __require

package/dist/server.cjs

@@ -3166,6 +3166,7 @@ function ensureFrontierNode(graph, host, ts) {
 }
 function upsertObservedEdge(graph, type, source, target, ts, isError = false, evidence) {
   if (!graph.hasNode(source) || !graph.hasNode(target)) return null;
+  const grain = source.startsWith("file:") ? "file" : "service";
   const id = makeObservedEdgeId(type, source, target);
   if (graph.hasEdge(id)) {
     const existing = graph.getEdgeAttributes(id);
@@ -3182,7 +3183,9 @@ function upsertObservedEdge(graph, type, source, target, ts, isError = false, ev
       lastObserved: ts,
       callCount: newSpanCount,
       signal: newSignal,
-      confidence: (0, import_types4.confidenceForObservedSignal)(newSignal)
+      confidence: (0, import_types4.confidenceForObservedSignal)(newSignal),
+      grain
+      // backfills legacy edges that predate ADR-142
     };
     graph.replaceEdgeAttributes(id, updated);
     return { edge: updated, created: false };
@@ -3202,6 +3205,7 @@ function upsertObservedEdge(graph, type, source, target, ts, isError = false, ev
     lastObserved: ts,
     callCount: 1,
     signal,
+    grain,
     // Call-site evidence from span code.* semconv (file-awareness.md §4 + §6).
     // Only set when code.filepath was present on the span — never fabricated.
     ...evidence ? { evidence } : {}
@@ -5263,6 +5267,15 @@ async function parse4(serviceDir) {
     const config = parseConnectionString(urlMatch[1]);
     if (config) return [{ ...config, sourceFile: filePath }];
   }
+  const urlEnvMatch = content.match(
+    /(?:url|connectionString)\s*:\s*process\.env(?:\.([A-Za-z_$][\w$]*)|\[\s*['"]([^'"]+)['"]\s*\])/
+  );
+  if (urlEnvMatch) {
+    const varName = urlEnvMatch[1] ?? urlEnvMatch[2];
+    const resolved = varName ? await resolveEnvVar(serviceDir, varName) : null;
+    const config = resolved ? parseConnectionString(resolved) : null;
+    if (config) return [{ ...config, sourceFile: filePath }];
+  }
   const hostMatch = content.match(/host\s*:\s*['"`]([^'"`]+)['"`]/);
   if (hostMatch) {
     const portMatch = content.match(/port\s*:\s*(\d+)/);
@@ -5316,6 +5329,15 @@ async function parse5(serviceDir) {
     const config = parseConnectionString(urlMatch[1]);
     if (config) return [{ ...config, sourceFile: filePath }];
   }
+  const urlEnvMatch = content.match(
+    /connection\s*:\s*process\.env(?:\.([A-Za-z_$][\w$]*)|\[\s*['"]([^'"]+)['"]\s*\])/
+  );
+  if (urlEnvMatch) {
+    const varName = urlEnvMatch[1] ?? urlEnvMatch[2];
+    const resolved = varName ? await resolveEnvVar(serviceDir, varName) : null;
+    const config = resolved ? parseConnectionString(resolved) : null;
+    if (config) return [{ ...config, sourceFile: filePath }];
+  }
   const host = content.match(/host\s*:\s*['"`]([^'"`]+)['"`]/)?.[1];
   if (host) {
     const port = content.match(/port\s*:\s*(\d+)/)?.[1];
@@ -6864,6 +6886,16 @@ function constructorMatchesImport(name, ctx) {
   if (name === "createClient") return ctx.hasSupabaseJs;
   return ctx.hasSupabaseSsr;
 }
+var SUPABASE_CLIENT_ASSIGN_RE = /(?:const|let|var)\s+(\w+)\s*=\s*(?:await\s+)?(createClient|createServerClient|createBrowserClient)\s*\(/g;
+function supabaseClientVars(content, ctx) {
+  const vars = /* @__PURE__ */ new Set();
+  SUPABASE_CLIENT_ASSIGN_RE.lastIndex = 0;
+  let m;
+  while ((m = SUPABASE_CLIENT_ASSIGN_RE.exec(content)) !== null) {
+    if (constructorMatchesImport(m[2], ctx)) vars.add(m[1]);
+  }
+  return vars;
+}
 function supabaseEndpointsFromFile(file, serviceDir) {
   const ctx = readImports2(file.content);
   if (!ctx.hasSupabaseJs && !ctx.hasSupabaseSsr) return [];
@@ -6896,6 +6928,34 @@ function supabaseEndpointsFromFile(file, serviceDir) {
       }
     });
   }
+  const clientVars = supabaseClientVars(file.content, ctx);
+  for (const clientVar of clientVars) {
+    const accessRe = new RegExp(
+      `\\b${clientVar}\\s*\\.\\s*(from|rpc)\\s*\\(\\s*['"\`]([\\w.-]+)['"\`]`,
+      "g"
+    );
+    let am;
+    while ((am = accessRe.exec(file.content)) !== null) {
+      const kind = am[1] === "rpc" ? "supabase-rpc" : "supabase-table";
+      const resource = am[2];
+      const key = `${kind}/${resource}`;
+      if (seen.has(key)) continue;
+      seen.add(key);
+      const line = lineOf(file.content, am[0]);
+      out.push({
+        infraId: (0, import_types20.infraId)(kind, resource),
+        name: resource,
+        kind,
+        edgeType: "CALLS",
+        confidenceKind: "verified-call-site",
+        evidence: {
+          file: import_node_path32.default.relative(serviceDir, file.path),
+          line,
+          snippet: snippet(file.content, line)
+        }
+      });
+    }
+  }
   return out;
 }