@neat.is/core 0.5.0 → 0.5.1-dev.20260719

package/dist/cli.cjs

@@ -2657,6 +2657,7 @@ function ensureFrontierNode(graph, host, ts) {
 }
 function upsertObservedEdge(graph, type, source, target, ts, isError = false, evidence) {
   if (!graph.hasNode(source) || !graph.hasNode(target)) return null;
+  const grain = source.startsWith("file:") ? "file" : "service";
   const id = makeObservedEdgeId(type, source, target);
   if (graph.hasEdge(id)) {
     const existing = graph.getEdgeAttributes(id);
@@ -2673,7 +2674,9 @@ function upsertObservedEdge(graph, type, source, target, ts, isError = false, ev
       lastObserved: ts,
       callCount: newSpanCount,
       signal: newSignal,
-      confidence: (0, import_types3.confidenceForObservedSignal)(newSignal)
+      confidence: (0, import_types3.confidenceForObservedSignal)(newSignal),
+      grain
+      // backfills legacy edges that predate ADR-142
     };
     graph.replaceEdgeAttributes(id, updated);
     return { edge: updated, created: false };
@@ -2693,6 +2696,7 @@ function upsertObservedEdge(graph, type, source, target, ts, isError = false, ev
     lastObserved: ts,
     callCount: 1,
     signal,
+    grain,
     // Call-site evidence from span code.* semconv (file-awareness.md §4 + §6).
     // Only set when code.filepath was present on the span — never fabricated.
     ...evidence ? { evidence } : {}
@@ -4791,6 +4795,15 @@ async function parse4(serviceDir) {
     const config = parseConnectionString(urlMatch[1]);
     if (config) return [{ ...config, sourceFile: filePath }];
   }
+  const urlEnvMatch = content.match(
+    /(?:url|connectionString)\s*:\s*process\.env(?:\.([A-Za-z_$][\w$]*)|\[\s*['"]([^'"]+)['"]\s*\])/
+  );
+  if (urlEnvMatch) {
+    const varName = urlEnvMatch[1] ?? urlEnvMatch[2];
+    const resolved = varName ? await resolveEnvVar(serviceDir, varName) : null;
+    const config = resolved ? parseConnectionString(resolved) : null;
+    if (config) return [{ ...config, sourceFile: filePath }];
+  }
   const hostMatch = content.match(/host\s*:\s*['"`]([^'"`]+)['"`]/);
   if (hostMatch) {
     const portMatch = content.match(/port\s*:\s*(\d+)/);
@@ -4844,6 +4857,15 @@ async function parse5(serviceDir) {
     const config = parseConnectionString(urlMatch[1]);
     if (config) return [{ ...config, sourceFile: filePath }];
   }
+  const urlEnvMatch = content.match(
+    /connection\s*:\s*process\.env(?:\.([A-Za-z_$][\w$]*)|\[\s*['"]([^'"]+)['"]\s*\])/
+  );
+  if (urlEnvMatch) {
+    const varName = urlEnvMatch[1] ?? urlEnvMatch[2];
+    const resolved = varName ? await resolveEnvVar(serviceDir, varName) : null;
+    const config = resolved ? parseConnectionString(resolved) : null;
+    if (config) return [{ ...config, sourceFile: filePath }];
+  }
   const host = content.match(/host\s*:\s*['"`]([^'"`]+)['"`]/)?.[1];
   if (host) {
     const port = content.match(/port\s*:\s*(\d+)/)?.[1];
@@ -6392,6 +6414,16 @@ function constructorMatchesImport(name, ctx) {
   if (name === "createClient") return ctx.hasSupabaseJs;
   return ctx.hasSupabaseSsr;
 }
+var SUPABASE_CLIENT_ASSIGN_RE = /(?:const|let|var)\s+(\w+)\s*=\s*(?:await\s+)?(createClient|createServerClient|createBrowserClient)\s*\(/g;
+function supabaseClientVars(content, ctx) {
+  const vars = /* @__PURE__ */ new Set();
+  SUPABASE_CLIENT_ASSIGN_RE.lastIndex = 0;
+  let m;
+  while ((m = SUPABASE_CLIENT_ASSIGN_RE.exec(content)) !== null) {
+    if (constructorMatchesImport(m[2], ctx)) vars.add(m[1]);
+  }
+  return vars;
+}
 function supabaseEndpointsFromFile(file, serviceDir) {
   const ctx = readImports2(file.content);
   if (!ctx.hasSupabaseJs && !ctx.hasSupabaseSsr) return [];
@@ -6424,6 +6456,34 @@ function supabaseEndpointsFromFile(file, serviceDir) {
       }
     });
   }
+  const clientVars = supabaseClientVars(file.content, ctx);
+  for (const clientVar of clientVars) {
+    const accessRe = new RegExp(
+      `\\b${clientVar}\\s*\\.\\s*(from|rpc)\\s*\\(\\s*['"\`]([\\w.-]+)['"\`]`,
+      "g"
+    );
+    let am;
+    while ((am = accessRe.exec(file.content)) !== null) {
+      const kind = am[1] === "rpc" ? "supabase-rpc" : "supabase-table";
+      const resource = am[2];
+      const key = `${kind}/${resource}`;
+      if (seen.has(key)) continue;
+      seen.add(key);
+      const line = lineOf(file.content, am[0]);
+      out.push({
+        infraId: (0, import_types19.infraId)(kind, resource),
+        name: resource,
+        kind,
+        edgeType: "CALLS",
+        confidenceKind: "verified-call-site",
+        evidence: {
+          file: import_node_path31.default.relative(serviceDir, file.path),
+          line,
+          snippet: snippet(file.content, line)
+        }
+      });
+    }
+  }
   return out;
 }
 
@@ -10021,6 +10081,7 @@ init_otel();
 
 // src/connectors/index.ts
 init_cjs_shims();
+var import_types35 = require("@neat.is/types");
 
 // src/connectors/registry.ts
 init_cjs_shims();
@@ -10496,19 +10557,23 @@ async function fetchPgStatStatements(connectionString, limit = DEFAULT_STATEMENT
 
 // src/connectors/supabase/resolve.ts
 init_cjs_shims();
-var import_types36 = require("@neat.is/types");
+var import_types37 = require("@neat.is/types");
 function createSupabaseResolveTarget(graph, config) {
   return (signal, _ctx) => {
     if (signal.targetKind !== SUPABASE_TABLE_TARGET_KIND && signal.targetKind !== SUPABASE_RPC_TARGET_KIND) {
       return null;
     }
-    const subResourceId = (0, import_types36.infraId)(signal.targetKind, `${config.nodeRef}/${signal.targetName}`);
+    const subResourceId = (0, import_types37.infraId)(signal.targetKind, `${config.nodeRef}/${signal.targetName}`);
     if (graph.hasNode(subResourceId)) {
-      return { targetNodeId: subResourceId, serviceName: config.serviceName, edgeType: import_types36.EdgeType.CALLS };
+      return { targetNodeId: subResourceId, serviceName: config.serviceName, edgeType: import_types37.EdgeType.CALLS };
+    }
+    const bareResourceId = (0, import_types37.infraId)(signal.targetKind, signal.targetName);
+    if (graph.hasNode(bareResourceId)) {
+      return { targetNodeId: bareResourceId, serviceName: config.serviceName, edgeType: import_types37.EdgeType.CALLS };
     }
-    const projectLevelId = (0, import_types36.infraId)("supabase", config.nodeRef);
+    const projectLevelId = (0, import_types37.infraId)("supabase", config.nodeRef);
     if (graph.hasNode(projectLevelId)) {
-      return { targetNodeId: projectLevelId, serviceName: config.serviceName, edgeType: import_types36.EdgeType.CALLS };
+      return { targetNodeId: projectLevelId, serviceName: config.serviceName, edgeType: import_types37.EdgeType.CALLS };
     }
     return null;
   };
@@ -10601,7 +10666,7 @@ function createSupabaseConnector(graph, config, deps = {}) {
 
 // src/connectors/railway/index.ts
 init_cjs_shims();
-var import_types40 = require("@neat.is/types");
+var import_types41 = require("@neat.is/types");
 
 // src/connectors/railway/client.ts
 init_cjs_shims();
@@ -10727,7 +10792,7 @@ function buildRailwayRouteIndex(graph, serviceName) {
   const out = [];
   graph.forEachNode((_id, attrs) => {
     const node = attrs;
-    if (node.type !== import_types40.NodeType.RouteNode) return;
+    if (node.type !== import_types41.NodeType.RouteNode) return;
     const route = attrs;
     if (route.service !== serviceName) return;
     out.push({
@@ -10823,12 +10888,12 @@ function createRailwayResolveTarget(config) {
     const serviceName = config.serviceNameById[config.serviceId];
     if (!serviceName) return null;
     if (signal.targetKind === ROUTE_TARGET_KIND) {
-      return { targetNodeId: signal.targetName, serviceName, edgeType: import_types40.EdgeType.CALLS };
+      return { targetNodeId: signal.targetName, serviceName, edgeType: import_types41.EdgeType.CALLS };
     }
     if (signal.targetKind === PEER_SERVICE_TARGET_KIND) {
       const peerName = config.serviceNameById[signal.targetName];
       if (!peerName) return null;
-      return { targetNodeId: (0, import_types40.serviceId)(peerName), serviceName, edgeType: import_types40.EdgeType.CONNECTS_TO };
+      return { targetNodeId: (0, import_types41.serviceId)(peerName), serviceName, edgeType: import_types41.EdgeType.CONNECTS_TO };
     }
     return null;
   };
@@ -11015,7 +11080,7 @@ function mapLogEntriesToSignals(entries) {
 
 // src/connectors/firebase/resolve.ts
 init_cjs_shims();
-var import_types41 = require("@neat.is/types");
+var import_types42 = require("@neat.is/types");
 function neatServiceNameFor(resourceType, resourceName, serviceMap) {
   switch (resourceType) {
     case "cloud_function":
@@ -11030,7 +11095,7 @@ function routeEntriesFor(graph, serviceName) {
   const entries = [];
   graph.forEachNode((_id, attrs) => {
     const node = attrs;
-    if (node.type !== import_types41.NodeType.RouteNode) return;
+    if (node.type !== import_types42.NodeType.RouteNode) return;
     const route = attrs;
     if (route.service !== serviceName) return;
     entries.push({
@@ -11062,7 +11127,7 @@ function createFirebaseResolveTarget(graph, serviceMap) {
     return {
       targetNodeId: match.routeNodeId,
       serviceName,
-      edgeType: import_types41.EdgeType.CALLS
+      edgeType: import_types42.EdgeType.CALLS
     };
   };
 }
@@ -11089,7 +11154,7 @@ init_cjs_shims();
 
 // src/connectors/cloudflare/connector.ts
 init_cjs_shims();
-var import_types43 = require("@neat.is/types");
+var import_types44 = require("@neat.is/types");
 
 // src/connectors/cloudflare/client.ts
 init_cjs_shims();
@@ -11250,7 +11315,7 @@ function findTaggedWorkerFileNode(graph, workerName) {
   graph.forEachNode((id, attrs) => {
     if (found) return;
     const a = attrs;
-    if (a.type === import_types43.NodeType.FileNode && a.platform === "cloudflare" && a.platformName === workerName) {
+    if (a.type === import_types44.NodeType.FileNode && a.platform === "cloudflare" && a.platformName === workerName) {
       found = id;
     }
   });
@@ -11262,7 +11327,7 @@ function findMatchingRouteNode(graph, serviceName, method, path61) {
   graph.forEachNode((id, attrs) => {
     if (found) return;
     const a = attrs;
-    if (a.type !== import_types43.NodeType.RouteNode || a.service !== serviceName) return;
+    if (a.type !== import_types44.NodeType.RouteNode || a.service !== serviceName) return;
     if (!a.pathTemplate || normalizePathTemplate(a.pathTemplate) !== normalizedPath) return;
     const routeMethod = (a.method ?? "").toUpperCase();
     if (routeMethod !== "ALL" && routeMethod !== method) return;
@@ -11281,11 +11346,11 @@ function createCloudflareResolveTarget(config, graph) {
     };
     const mapping = config.workers?.[scriptName];
     if (mapping) {
-      const wholeFileId = (0, import_types43.fileId)(mapping.service, mapping.entryFile);
+      const wholeFileId = (0, import_types44.fileId)(mapping.service, mapping.entryFile);
       return {
         targetNodeId: resolveRouteGrain(mapping.service, wholeFileId),
         serviceName: mapping.service,
-        edgeType: import_types43.EdgeType.CALLS
+        edgeType: import_types44.EdgeType.CALLS
       };
     }
     const taggedFileId = findTaggedWorkerFileNode(graph, scriptName);
@@ -11294,13 +11359,13 @@ function createCloudflareResolveTarget(config, graph) {
       return {
         targetNodeId: resolveRouteGrain(fileNode.service, taggedFileId),
         serviceName: fileNode.service,
-        edgeType: import_types43.EdgeType.CALLS
+        edgeType: import_types44.EdgeType.CALLS
       };
     }
     return {
-      targetNodeId: (0, import_types43.infraId)("cloudflare-worker", scriptName),
+      targetNodeId: (0, import_types44.infraId)("cloudflare-worker", scriptName),
       serviceName: scriptName,
-      edgeType: import_types43.EdgeType.CALLS,
+      edgeType: import_types44.EdgeType.CALLS,
       ensureInfraNode: { kind: "cloudflare-worker", name: scriptName, provider: "cloudflare" }
     };
   };
@@ -11514,7 +11579,7 @@ var import_node_fs32 = require("fs");
 var import_node_path51 = __toESM(require("path"), 1);
 
 // src/daemon.ts
-var import_types46 = require("@neat.is/types");
+var import_types47 = require("@neat.is/types");
 function daemonJsonPath(scanPath) {
   return import_node_path52.default.join(scanPath, "neat-out", "daemon.json");
 }
@@ -15510,7 +15575,7 @@ var import_node_path59 = __toESM(require("path"), 1);
 
 // src/cli-client.ts
 init_cjs_shims();
-var import_types47 = require("@neat.is/types");
+var import_types48 = require("@neat.is/types");
 var HttpError = class extends Error {
   constructor(status2, message, responseBody = "") {
     super(message);
@@ -15652,7 +15717,7 @@ async function runBlastRadius(client, input) {
   }
 }
 function formatBlastEntry(n) {
-  const tag = n.edgeProvenance === import_types47.Provenance.STALE ? " [STALE \u2014 last seen too long ago]" : "";
+  const tag = n.edgeProvenance === import_types48.Provenance.STALE ? " [STALE \u2014 last seen too long ago]" : "";
   return `  \u2022 ${n.nodeId} (distance ${n.distance}, ${n.edgeProvenance})${tag}`;
 }
 async function runDependencies(client, input) {
@@ -15709,7 +15774,7 @@ async function runObservedDependencies(client, input) {
       if (result.observed) {
         return {
           summary: `${input.nodeId} makes no outbound runtime calls, but OTel has observed it receiving traffic on ${result.inboundObservedCount} inbound call path${result.inboundObservedCount === 1 ? "" : "s"} \u2014 it's a pure receiver.`,
-          provenance: import_types47.Provenance.OBSERVED
+          provenance: import_types48.Provenance.OBSERVED
         };
       }
       const note = result.hasExtractedOutbound ? " Static (EXTRACTED) dependencies exist but no runtime traffic has been seen \u2014 is OTel running?" : "";
@@ -15719,7 +15784,7 @@ async function runObservedDependencies(client, input) {
     return {
       summary: `${input.nodeId} has ${result.dependencies.length} runtime dependenc${result.dependencies.length === 1 ? "y" : "ies"} confirmed by OTel.`,
       block: blockLines.join("\n"),
-      provenance: import_types47.Provenance.OBSERVED
+      provenance: import_types48.Provenance.OBSERVED
     };
   } catch (err) {
     if (err instanceof HttpError && err.status === 404) {
@@ -15773,7 +15838,7 @@ async function runIncidents(client, input) {
     return {
       summary: `${target} has ${body.total} recorded incident${body.total === 1 ? "" : "s"}; showing the ${ordered.length} most recent.`,
       block: blockLines.join("\n"),
-      provenance: import_types47.Provenance.OBSERVED
+      provenance: import_types48.Provenance.OBSERVED
     };
   } catch (err) {
     if (err instanceof HttpError && err.status === 404) {
@@ -15882,7 +15947,7 @@ async function runStaleEdges(client, input) {
   return {
     summary: `${events.length} stale-edge transition${events.length === 1 ? "" : "s"} recorded${input.edgeType ? ` for ${input.edgeType}` : ""}.`,
     block: blockLines.join("\n"),
-    provenance: import_types47.Provenance.STALE
+    provenance: import_types48.Provenance.STALE
   };
 }
 async function runPolicies(client, input) {
@@ -16199,7 +16264,7 @@ async function runSync(opts) {
 }
 
 // src/cli.ts
-var import_types48 = require("@neat.is/types");
+var import_types49 = require("@neat.is/types");
 function isNpxInvocation() {
   if (process.env.npm_command === "exec") return true;
   const execpath = process.env.npm_execpath ?? "";
@@ -17136,10 +17201,10 @@ async function runQueryVerb(cmd, parsed) {
         const parts = parsed.type.split(",").map((s) => s.trim()).filter((s) => s.length > 0);
         const out = [];
         for (const p of parts) {
-          const r = import_types48.DivergenceTypeSchema.safeParse(p);
+          const r = import_types49.DivergenceTypeSchema.safeParse(p);
           if (!r.success) {
             console.error(
-              `neat divergences: unknown --type "${p}". allowed: ${import_types48.DivergenceTypeSchema.options.join(", ")}`
+              `neat divergences: unknown --type "${p}". allowed: ${import_types49.DivergenceTypeSchema.options.join(", ")}`
             );
             return 2;
           }