@neat.is/core 0.5.0 → 0.5.1-dev.20260719

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   routeSpanToProject,
   startDaemon
-} from "./chunk-5MGHWP6R.js";
+} from "./chunk-O4PCNQFG.js";
 import {
   ProjectNameCollisionError,
   addProject,
@@ -37,7 +37,7 @@ import {
   thresholdForEdgeType,
   touchLastSeen,
   writeAtomically
-} from "./chunk-QQDZSIY3.js";
+} from "./chunk-BI3XKGVG.js";
 import {
   startOtelGrpcReceiver
 } from "./chunk-I72HTUOG.js";

package/dist/neatd.cjs

@@ -2627,6 +2627,7 @@ function ensureFrontierNode(graph, host, ts) {
 }
 function upsertObservedEdge(graph, type, source, target, ts, isError = false, evidence) {
   if (!graph.hasNode(source) || !graph.hasNode(target)) return null;
+  const grain = source.startsWith("file:") ? "file" : "service";
   const id = makeObservedEdgeId(type, source, target);
   if (graph.hasEdge(id)) {
     const existing = graph.getEdgeAttributes(id);
@@ -2643,7 +2644,9 @@ function upsertObservedEdge(graph, type, source, target, ts, isError = false, ev
       lastObserved: ts,
       callCount: newSpanCount,
       signal: newSignal,
-      confidence: (0, import_types3.confidenceForObservedSignal)(newSignal)
+      confidence: (0, import_types3.confidenceForObservedSignal)(newSignal),
+      grain
+      // backfills legacy edges that predate ADR-142
     };
     graph.replaceEdgeAttributes(id, updated);
     return { edge: updated, created: false };
@@ -2663,6 +2666,7 @@ function upsertObservedEdge(graph, type, source, target, ts, isError = false, ev
     lastObserved: ts,
     callCount: 1,
     signal,
+    grain,
     // Call-site evidence from span code.* semconv (file-awareness.md §4 + §6).
     // Only set when code.filepath was present on the span — never fabricated.
     ...evidence ? { evidence } : {}
@@ -4746,6 +4750,15 @@ async function parse4(serviceDir) {
     const config = parseConnectionString(urlMatch[1]);
     if (config) return [{ ...config, sourceFile: filePath }];
   }
+  const urlEnvMatch = content.match(
+    /(?:url|connectionString)\s*:\s*process\.env(?:\.([A-Za-z_$][\w$]*)|\[\s*['"]([^'"]+)['"]\s*\])/
+  );
+  if (urlEnvMatch) {
+    const varName = urlEnvMatch[1] ?? urlEnvMatch[2];
+    const resolved = varName ? await resolveEnvVar(serviceDir, varName) : null;
+    const config = resolved ? parseConnectionString(resolved) : null;
+    if (config) return [{ ...config, sourceFile: filePath }];
+  }
   const hostMatch = content.match(/host\s*:\s*['"`]([^'"`]+)['"`]/);
   if (hostMatch) {
     const portMatch = content.match(/port\s*:\s*(\d+)/);
@@ -4799,6 +4812,15 @@ async function parse5(serviceDir) {
     const config = parseConnectionString(urlMatch[1]);
     if (config) return [{ ...config, sourceFile: filePath }];
   }
+  const urlEnvMatch = content.match(
+    /connection\s*:\s*process\.env(?:\.([A-Za-z_$][\w$]*)|\[\s*['"]([^'"]+)['"]\s*\])/
+  );
+  if (urlEnvMatch) {
+    const varName = urlEnvMatch[1] ?? urlEnvMatch[2];
+    const resolved = varName ? await resolveEnvVar(serviceDir, varName) : null;
+    const config = resolved ? parseConnectionString(resolved) : null;
+    if (config) return [{ ...config, sourceFile: filePath }];
+  }
   const host = content.match(/host\s*:\s*['"`]([^'"`]+)['"`]/)?.[1];
   if (host) {
     const port = content.match(/port\s*:\s*(\d+)/)?.[1];
@@ -6347,6 +6369,16 @@ function constructorMatchesImport(name, ctx) {
   if (name === "createClient") return ctx.hasSupabaseJs;
   return ctx.hasSupabaseSsr;
 }
+var SUPABASE_CLIENT_ASSIGN_RE = /(?:const|let|var)\s+(\w+)\s*=\s*(?:await\s+)?(createClient|createServerClient|createBrowserClient)\s*\(/g;
+function supabaseClientVars(content, ctx) {
+  const vars = /* @__PURE__ */ new Set();
+  SUPABASE_CLIENT_ASSIGN_RE.lastIndex = 0;
+  let m;
+  while ((m = SUPABASE_CLIENT_ASSIGN_RE.exec(content)) !== null) {
+    if (constructorMatchesImport(m[2], ctx)) vars.add(m[1]);
+  }
+  return vars;
+}
 function supabaseEndpointsFromFile(file, serviceDir) {
   const ctx = readImports2(file.content);
   if (!ctx.hasSupabaseJs && !ctx.hasSupabaseSsr) return [];
@@ -6379,6 +6411,34 @@ function supabaseEndpointsFromFile(file, serviceDir) {
       }
     });
   }
+  const clientVars = supabaseClientVars(file.content, ctx);
+  for (const clientVar of clientVars) {
+    const accessRe = new RegExp(
+      `\\b${clientVar}\\s*\\.\\s*(from|rpc)\\s*\\(\\s*['"\`]([\\w.-]+)['"\`]`,
+      "g"
+    );
+    let am;
+    while ((am = accessRe.exec(file.content)) !== null) {
+      const kind = am[1] === "rpc" ? "supabase-rpc" : "supabase-table";
+      const resource = am[2];
+      const key = `${kind}/${resource}`;
+      if (seen.has(key)) continue;
+      seen.add(key);
+      const line = lineOf(file.content, am[0]);
+      out.push({
+        infraId: (0, import_types19.infraId)(kind, resource),
+        name: resource,
+        kind,
+        edgeType: "CALLS",
+        confidenceKind: "verified-call-site",
+        evidence: {
+          file: import_node_path30.default.relative(serviceDir, file.path),
+          line,
+          snippet: snippet(file.content, line)
+        }
+      });
+    }
+  }
   return out;
 }
 
@@ -9558,7 +9618,30 @@ init_otel();
 
 // src/connectors/index.ts
 init_cjs_shims();
+var import_types34 = require("@neat.is/types");
 var NO_ENV = "unknown";
+function staticCallSiteFor(graph, serviceName, targetNodeId) {
+  if (!graph.hasNode(targetNodeId)) return void 0;
+  const sites = [];
+  for (const edgeId of graph.inboundEdges(targetNodeId)) {
+    const edge = graph.getEdgeAttributes(edgeId);
+    if (edge.provenance !== import_types34.Provenance.EXTRACTED) continue;
+    const parsed = (0, import_types34.parseFileId)(edge.source);
+    if (!parsed || parsed.service !== serviceName || !edge.evidence) continue;
+    const site = { relPath: edge.evidence.file };
+    if (edge.evidence.line !== void 0) site.line = edge.evidence.line;
+    sites.push(site);
+  }
+  return sites.length === 1 ? sites[0] : void 0;
+}
+function routeCallSiteFor(graph, targetNodeId) {
+  if (!graph.hasNode(targetNodeId)) return void 0;
+  const attrs = graph.getNodeAttributes(targetNodeId);
+  if (attrs.type !== import_types34.NodeType.RouteNode || !attrs.path) return void 0;
+  const site = { relPath: attrs.path };
+  if (attrs.line !== void 0) site.line = attrs.line;
+  return site;
+}
 async function runConnectorPoll(connector, ctx, graph, resolveTarget) {
   const signals = await connector.poll(ctx);
   let edgesCreated = 0;
@@ -9575,7 +9658,7 @@ async function runConnectorPoll(connector, ctx, graph, resolveTarget) {
       ensureInfraNode(graph, kind, name, provider);
     }
     const serviceNodeId = ensureServiceNode(graph, resolved.serviceName, NO_ENV);
-    const callSite = signal.callSite ? { relPath: signal.callSite.file, line: signal.callSite.line } : void 0;
+    const callSite = signal.callSite ? { relPath: signal.callSite.file, line: signal.callSite.line } : routeCallSiteFor(graph, resolved.targetNodeId) ?? staticCallSiteFor(graph, resolved.serviceName, resolved.targetNodeId);
     const sourceId = callSite ? ensureObservedFileNode(graph, resolved.serviceName, serviceNodeId, callSite) : serviceNodeId;
     const evidence = callSite ? {
       file: reconcileObservedRelPath(graph, resolved.serviceName, callSite.relPath),
@@ -10126,19 +10209,23 @@ async function fetchPgStatStatements(connectionString, limit = DEFAULT_STATEMENT
 
 // src/connectors/supabase/resolve.ts
 init_cjs_shims();
-var import_types35 = require("@neat.is/types");
+var import_types36 = require("@neat.is/types");
 function createSupabaseResolveTarget(graph, config) {
   return (signal, _ctx) => {
     if (signal.targetKind !== SUPABASE_TABLE_TARGET_KIND && signal.targetKind !== SUPABASE_RPC_TARGET_KIND) {
       return null;
     }
-    const subResourceId = (0, import_types35.infraId)(signal.targetKind, `${config.nodeRef}/${signal.targetName}`);
+    const subResourceId = (0, import_types36.infraId)(signal.targetKind, `${config.nodeRef}/${signal.targetName}`);
     if (graph.hasNode(subResourceId)) {
-      return { targetNodeId: subResourceId, serviceName: config.serviceName, edgeType: import_types35.EdgeType.CALLS };
+      return { targetNodeId: subResourceId, serviceName: config.serviceName, edgeType: import_types36.EdgeType.CALLS };
+    }
+    const bareResourceId = (0, import_types36.infraId)(signal.targetKind, signal.targetName);
+    if (graph.hasNode(bareResourceId)) {
+      return { targetNodeId: bareResourceId, serviceName: config.serviceName, edgeType: import_types36.EdgeType.CALLS };
     }
-    const projectLevelId = (0, import_types35.infraId)("supabase", config.nodeRef);
+    const projectLevelId = (0, import_types36.infraId)("supabase", config.nodeRef);
     if (graph.hasNode(projectLevelId)) {
-      return { targetNodeId: projectLevelId, serviceName: config.serviceName, edgeType: import_types35.EdgeType.CALLS };
+      return { targetNodeId: projectLevelId, serviceName: config.serviceName, edgeType: import_types36.EdgeType.CALLS };
     }
     return null;
   };
@@ -10231,7 +10318,7 @@ function createSupabaseConnector(graph, config, deps = {}) {
 
 // src/connectors/railway/index.ts
 init_cjs_shims();
-var import_types39 = require("@neat.is/types");
+var import_types40 = require("@neat.is/types");
 
 // src/connectors/railway/client.ts
 init_cjs_shims();
@@ -10357,7 +10444,7 @@ function buildRailwayRouteIndex(graph, serviceName) {
   const out = [];
   graph.forEachNode((_id, attrs) => {
     const node = attrs;
-    if (node.type !== import_types39.NodeType.RouteNode) return;
+    if (node.type !== import_types40.NodeType.RouteNode) return;
     const route = attrs;
     if (route.service !== serviceName) return;
     out.push({
@@ -10453,12 +10540,12 @@ function createRailwayResolveTarget(config) {
     const serviceName = config.serviceNameById[config.serviceId];
     if (!serviceName) return null;
     if (signal.targetKind === ROUTE_TARGET_KIND) {
-      return { targetNodeId: signal.targetName, serviceName, edgeType: import_types39.EdgeType.CALLS };
+      return { targetNodeId: signal.targetName, serviceName, edgeType: import_types40.EdgeType.CALLS };
     }
     if (signal.targetKind === PEER_SERVICE_TARGET_KIND) {
       const peerName = config.serviceNameById[signal.targetName];
       if (!peerName) return null;
-      return { targetNodeId: (0, import_types39.serviceId)(peerName), serviceName, edgeType: import_types39.EdgeType.CONNECTS_TO };
+      return { targetNodeId: (0, import_types40.serviceId)(peerName), serviceName, edgeType: import_types40.EdgeType.CONNECTS_TO };
     }
     return null;
   };
@@ -10645,7 +10732,7 @@ function mapLogEntriesToSignals(entries) {
 
 // src/connectors/firebase/resolve.ts
 init_cjs_shims();
-var import_types40 = require("@neat.is/types");
+var import_types41 = require("@neat.is/types");
 function neatServiceNameFor(resourceType, resourceName, serviceMap) {
   switch (resourceType) {
     case "cloud_function":
@@ -10660,7 +10747,7 @@ function routeEntriesFor(graph, serviceName) {
   const entries = [];
   graph.forEachNode((_id, attrs) => {
     const node = attrs;
-    if (node.type !== import_types40.NodeType.RouteNode) return;
+    if (node.type !== import_types41.NodeType.RouteNode) return;
     const route = attrs;
     if (route.service !== serviceName) return;
     entries.push({
@@ -10692,7 +10779,7 @@ function createFirebaseResolveTarget(graph, serviceMap) {
     return {
       targetNodeId: match.routeNodeId,
       serviceName,
-      edgeType: import_types40.EdgeType.CALLS
+      edgeType: import_types41.EdgeType.CALLS
     };
   };
 }
@@ -10719,7 +10806,7 @@ init_cjs_shims();
 
 // src/connectors/cloudflare/connector.ts
 init_cjs_shims();
-var import_types42 = require("@neat.is/types");
+var import_types43 = require("@neat.is/types");
 
 // src/connectors/cloudflare/client.ts
 init_cjs_shims();
@@ -10880,7 +10967,7 @@ function findTaggedWorkerFileNode(graph, workerName) {
   graph.forEachNode((id, attrs) => {
     if (found) return;
     const a = attrs;
-    if (a.type === import_types42.NodeType.FileNode && a.platform === "cloudflare" && a.platformName === workerName) {
+    if (a.type === import_types43.NodeType.FileNode && a.platform === "cloudflare" && a.platformName === workerName) {
       found = id;
     }
   });
@@ -10892,7 +10979,7 @@ function findMatchingRouteNode(graph, serviceName, method, path53) {
   graph.forEachNode((id, attrs) => {
     if (found) return;
     const a = attrs;
-    if (a.type !== import_types42.NodeType.RouteNode || a.service !== serviceName) return;
+    if (a.type !== import_types43.NodeType.RouteNode || a.service !== serviceName) return;
     if (!a.pathTemplate || normalizePathTemplate(a.pathTemplate) !== normalizedPath) return;
     const routeMethod = (a.method ?? "").toUpperCase();
     if (routeMethod !== "ALL" && routeMethod !== method) return;
@@ -10911,11 +10998,11 @@ function createCloudflareResolveTarget(config, graph) {
     };
     const mapping = config.workers?.[scriptName];
     if (mapping) {
-      const wholeFileId = (0, import_types42.fileId)(mapping.service, mapping.entryFile);
+      const wholeFileId = (0, import_types43.fileId)(mapping.service, mapping.entryFile);
       return {
         targetNodeId: resolveRouteGrain(mapping.service, wholeFileId),
         serviceName: mapping.service,
-        edgeType: import_types42.EdgeType.CALLS
+        edgeType: import_types43.EdgeType.CALLS
       };
     }
     const taggedFileId = findTaggedWorkerFileNode(graph, scriptName);
@@ -10924,13 +11011,13 @@ function createCloudflareResolveTarget(config, graph) {
       return {
         targetNodeId: resolveRouteGrain(fileNode.service, taggedFileId),
         serviceName: fileNode.service,
-        edgeType: import_types42.EdgeType.CALLS
+        edgeType: import_types43.EdgeType.CALLS
       };
     }
     return {
-      targetNodeId: (0, import_types42.infraId)("cloudflare-worker", scriptName),
+      targetNodeId: (0, import_types43.infraId)("cloudflare-worker", scriptName),
       serviceName: scriptName,
-      edgeType: import_types42.EdgeType.CALLS,
+      edgeType: import_types43.EdgeType.CALLS,
       ensureInfraNode: { kind: "cloudflare-worker", name: scriptName, provider: "cloudflare" }
     };
   };
@@ -11189,7 +11276,7 @@ function unroutedErrorsPath(neatHome4) {
 }
 
 // src/daemon.ts
-var import_types45 = require("@neat.is/types");
+var import_types46 = require("@neat.is/types");
 function daemonJsonPath(scanPath) {
   return import_node_path50.default.join(scanPath, "neat-out", "daemon.json");
 }
@@ -11324,7 +11411,7 @@ function spanBelongsToSingleProject(graph, project, serviceName) {
   if (!serviceName) return true;
   if (serviceNameMatchesProject(serviceName, project)) return true;
   return graph.someNode(
-    (_id, attrs) => attrs.type === import_types45.NodeType.ServiceNode && attrs.name === serviceName
+    (_id, attrs) => attrs.type === import_types46.NodeType.ServiceNode && attrs.name === serviceName
   );
 }
 async function bootstrapProject(entry2, connectors = [], neatHome4) {