@neat.is/core 0.5.1 → 0.5.3

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   routeSpanToProject,
   startDaemon
-} from "./chunk-DPEPI2N6.js";
+} from "./chunk-X2AMX3QZ.js";
 import {
   ProjectNameCollisionError,
   addProject,
@@ -37,7 +37,7 @@ import {
   thresholdForEdgeType,
   touchLastSeen,
   writeAtomically
-} from "./chunk-BI3XKGVG.js";
+} from "./chunk-GJHEZC5K.js";
 import {
   startOtelGrpcReceiver
 } from "./chunk-I72HTUOG.js";

package/dist/neatd.cjs

@@ -4633,14 +4633,21 @@ function engineFromImage(image) {
 // src/extract/databases/dotenv.ts
 var CONNECTION_KEYS = /* @__PURE__ */ new Set([
   "DATABASE_URL",
+  "DATABASE_URI",
   "DB_URL",
+  "DB_URI",
   "POSTGRES_URL",
+  "POSTGRES_URI",
   "POSTGRESQL_URL",
+  "POSTGRESQL_URI",
   "MYSQL_URL",
+  "MYSQL_URI",
+  "MONGODB_URL",
   "MONGODB_URI",
   "MONGO_URL",
   "MONGO_URI",
-  "REDIS_URL"
+  "REDIS_URL",
+  "REDIS_URI"
 ]);
 function parseDotenvLine(line) {
   const trimmed = line.trim();
@@ -7778,11 +7785,42 @@ async function readPackageJson(scanPath) {
   const raw = await import_node_fs26.promises.readFile(pkgPath, "utf8");
   return JSON.parse(raw);
 }
+var HOOK_WALK_SKIP_DIRS = /* @__PURE__ */ new Set([
+  "node_modules",
+  "dist",
+  "build",
+  "out",
+  "coverage",
+  "neat-out"
+]);
 async function findHookFiles(scanPath) {
-  const entries = await import_node_fs26.promises.readdir(scanPath);
-  return entries.filter(
-    (e) => (e.startsWith("instrumentation") || e.startsWith("otel-init")) && /\.(ts|js)$/.test(e)
-  ).sort();
+  const found = [];
+  const walk3 = async (dir) => {
+    const entries = await import_node_fs26.promises.readdir(dir, { withFileTypes: true }).catch(() => []);
+    for (const entry2 of entries) {
+      if (entry2.isDirectory()) {
+        if (entry2.name.startsWith(".") || HOOK_WALK_SKIP_DIRS.has(entry2.name)) continue;
+        await walk3(import_node_path44.default.join(dir, entry2.name));
+      } else if (entry2.isFile()) {
+        if ((entry2.name.startsWith("instrumentation") || entry2.name.startsWith("otel-init")) && /\.(ts|js|cjs|mjs)$/.test(entry2.name)) {
+          const rel = import_node_path44.default.relative(scanPath, import_node_path44.default.join(dir, entry2.name));
+          found.push(rel.split(import_node_path44.default.sep).join("/"));
+        }
+      }
+    }
+  };
+  await walk3(scanPath);
+  return found.sort();
+}
+async function pickPrimaryHookFile(scanPath, hookFiles, snippet2) {
+  let fallback = null;
+  for (const file of hookFiles) {
+    const content = await import_node_fs26.promises.readFile(import_node_path44.default.join(scanPath, file), "utf8");
+    const patched = splicedContent(content, snippet2);
+    if (patched !== null) return { file, content, patched };
+    if (fallback === null) fallback = { file, content };
+  }
+  return { file: fallback.file, content: fallback.content, patched: null };
 }
 function extendLogPath() {
   return process.env.NEAT_EXTEND_LOG ?? import_node_path44.default.join(import_node_os2.default.homedir(), ".neat", "extend-log.ndjson");
@@ -7875,7 +7913,13 @@ async function applyExtension(ctx, args, options) {
       return { library: args.library, filesTouched: [], depsAdded: [], installOutput: "", alreadyApplied: true };
     }
   }
-  const primaryFile = hookFiles[0];
+  const primary = await pickPrimaryHookFile(ctx.scanPath, hookFiles, args.registration_snippet);
+  if (primary.patched === null) {
+    throw new Error(
+      `Could not find instrumentation insertion point in ${hookFiles.join(", ")}. Expected __INSTRUMENTATION_BLOCK__, instrumentations.push(, or new NodeSDK(.`
+    );
+  }
+  const primaryFile = primary.file;
   const primaryPath = import_node_path44.default.join(ctx.scanPath, primaryFile);
   const filesTouched = [];
   const depsAdded = [];
@@ -7887,14 +7931,7 @@ async function applyExtension(ctx, args, options) {
     filesTouched.push("package.json");
     depsAdded.push(`${args.instrumentation_package}@${args.version}`);
   }
-  const hookContent = await import_node_fs26.promises.readFile(primaryPath, "utf8");
-  const patched = splicedContent(hookContent, args.registration_snippet);
-  if (!patched) {
-    throw new Error(
-      `Could not find instrumentation insertion point in ${primaryFile}. Expected __INSTRUMENTATION_BLOCK__, instrumentations.push(, or new NodeSDK(.`
-    );
-  }
-  await import_node_fs26.promises.writeFile(primaryPath, patched, "utf8");
+  await import_node_fs26.promises.writeFile(primaryPath, primary.patched, "utf8");
   filesTouched.push(primaryFile);
   const cmd = await detectPackageManager(ctx.scanPath);
   const installer = options?.runInstall ?? runPackageManagerInstall;
@@ -7936,7 +7973,7 @@ async function dryRunExtension(ctx, args) {
       };
     }
   }
-  const primaryFile = hookFiles[0];
+  const primary = await pickPrimaryHookFile(ctx.scanPath, hookFiles, args.registration_snippet);
   const filesTouched = [];
   const depsToAdd = [];
   let packageJsonPatch = {};
@@ -7947,10 +7984,8 @@ async function dryRunExtension(ctx, args) {
     depsToAdd.push(`${args.instrumentation_package}@${args.version}`);
     filesTouched.push("package.json");
   }
-  const hookContent = await import_node_fs26.promises.readFile(import_node_path44.default.join(ctx.scanPath, primaryFile), "utf8");
-  const patched = splicedContent(hookContent, args.registration_snippet);
-  if (patched) {
-    filesTouched.push(primaryFile);
+  if (primary.patched !== null) {
+    filesTouched.push(primary.file);
     templatePatch = `+ ${args.registration_snippet}`;
   } else {
     templatePatch = "Could not find insertion point in hook file.";
@@ -9488,7 +9523,7 @@ function registerRoutes(scope, ctx) {
   });
 }
 async function buildApi(opts) {
-  const app = (0, import_fastify.default)({ logger: false });
+  const app = (0, import_fastify.default)({ logger: false, routerOptions: { maxParamLength: 1024 } });
   await app.register(import_cors.default, { origin: true });
   const env = readAuthEnv();
   const authToken = opts.authToken ?? env.authToken;
@@ -9665,8 +9700,8 @@ async function runConnectorPoll(connector, ctx, graph, resolveTarget) {
       line: callSite.line
     } : void 0;
     const calls = Math.trunc(signal.callCount);
-    if (calls < 1) continue;
-    const errors = Math.min(Math.max(Math.trunc(signal.errorCount), 0), calls);
+    if (!Number.isFinite(calls) || calls < 1) continue;
+    const errors = Number.isFinite(signal.errorCount) ? Math.min(Math.max(Math.trunc(signal.errorCount), 0), calls) : 0;
     let created = false;
     let ok = true;
     for (let i = 0; i < calls; i++) {
@@ -10113,7 +10148,10 @@ function targetFromRestPath(path53) {
 var ERROR_STATUS_THRESHOLD = 500;
 function mapEdgeLogRowsToSignals(rows) {
   const buckets2 = /* @__PURE__ */ new Map();
+  if (!Array.isArray(rows)) return [];
   for (const row of rows) {
+    if (!row || typeof row !== "object") continue;
+    if (typeof row.path !== "string" || typeof row.timestamp !== "string") continue;
     const target = targetFromRestPath(row.path);
     if (!target) continue;
     const key = `${target.targetKind}:${target.name}`;
@@ -10154,9 +10192,12 @@ function tableNameFromQueryText(query) {
 function diffPgStatStatementsToSignals(rows, previous, nowIso2) {
   const signals = [];
   const seen = /* @__PURE__ */ new Set();
+  if (!Array.isArray(rows)) return signals;
   for (const row of rows) {
-    seen.add(row.queryid);
+    if (!row || typeof row !== "object" || typeof row.queryid !== "string") continue;
     const calls = Number(row.calls);
+    if (!Number.isFinite(calls)) continue;
+    seen.add(row.queryid);
     const prior = previous.get(row.queryid);
     previous.set(row.queryid, { calls });
     if (!prior || calls < prior.calls) continue;
@@ -10480,7 +10521,12 @@ function upsertBucket(buckets2, key, isError, timestamp, build) {
 }
 function mapRailwayHttpLogsToSignals(entries, routeIndex) {
   const buckets2 = /* @__PURE__ */ new Map();
+  if (!Array.isArray(entries)) return [];
   for (const entry2 of entries) {
+    if (!entry2 || typeof entry2 !== "object") continue;
+    if (typeof entry2.method !== "string" || typeof entry2.path !== "string" || typeof entry2.timestamp !== "string") {
+      continue;
+    }
     const method = entry2.method.toUpperCase();
     const normalizedPath = normalizePathTemplate(entry2.path);
     const match = findRailwayRoute(routeIndex, method, normalizedPath);
@@ -10519,8 +10565,11 @@ function mapRailwayHttpLogsToSignals(entries, routeIndex) {
 }
 function mapRailwayNetworkFlowLogsToSignals(entries) {
   const buckets2 = /* @__PURE__ */ new Map();
+  if (!Array.isArray(entries)) return [];
   for (const entry2 of entries) {
-    if (!entry2.peerServiceId) continue;
+    if (!entry2 || typeof entry2 !== "object") continue;
+    if (typeof entry2.peerServiceId !== "string" || entry2.peerServiceId.length === 0) continue;
+    if (typeof entry2.timestamp !== "string") continue;
     const isError = entry2.dropCause !== null && entry2.dropCause !== "";
     upsertBucket(buckets2, entry2.peerServiceId, isError, entry2.timestamp, () => ({
       targetKind: PEER_SERVICE_TARGET_KIND,
@@ -10648,7 +10697,7 @@ async function fetchHttpRequestLogEntries(creds, sinceIso) {
       throw new Error(`Cloud Logging entries.list failed: ${res.status} ${res.statusText}`);
     }
     const json = await res.json();
-    out.push(...json.entries ?? []);
+    if (Array.isArray(json.entries)) out.push(...json.entries);
     if (!json.nextPageToken) break;
     pageToken = json.nextPageToken;
   }
@@ -10685,7 +10734,7 @@ function resourceNameFor(type, labels) {
   }
 }
 function pathFromRequestUrl(requestUrl) {
-  if (!requestUrl) return null;
+  if (typeof requestUrl !== "string" || requestUrl.length === 0) return null;
   if (requestUrl.startsWith("/")) {
     const withoutQuery = requestUrl.split("?")[0];
     return withoutQuery && withoutQuery.length > 0 ? withoutQuery : "/";
@@ -10700,18 +10749,19 @@ function pathFromRequestUrl(requestUrl) {
 }
 var ERROR_STATUS_THRESHOLD2 = 500;
 function mapLogEntryToSignal(entry2) {
+  if (!entry2 || typeof entry2 !== "object") return null;
   const resourceType = entry2.resource?.type;
   if (!resourceType || !isFirebaseResourceType(resourceType)) return null;
   const resourceName = resourceNameFor(resourceType, entry2.resource?.labels);
   if (!resourceName) return null;
   const req2 = entry2.httpRequest;
   if (!req2) return null;
-  if (!req2.requestMethod) return null;
+  if (typeof req2.requestMethod !== "string" || req2.requestMethod.length === 0) return null;
   const method = req2.requestMethod.toUpperCase();
   const path53 = pathFromRequestUrl(req2.requestUrl);
   if (path53 === null) return null;
   const timestamp = entry2.timestamp;
-  if (!timestamp) return null;
+  if (typeof timestamp !== "string" || timestamp.length === 0) return null;
   const isError = typeof req2.status === "number" && req2.status >= ERROR_STATUS_THRESHOLD2;
   return {
     targetKind: resourceType,
@@ -10863,7 +10913,7 @@ async function queryWorkerInvocations(ctx, config, window, fetchImpl = fetch) {
     throw new Error(`cloudflare connector: telemetry query returned an error (${message})`);
   }
   const events = payload.result?.events?.events;
-  if (events === void 0) {
+  if (!Array.isArray(events)) {
     console.warn(
       "[neat connector] cloudflare: telemetry query returned success:true but no result.events.events array \u2014 the response shape may have changed; treating as zero events this tick"
     );
@@ -10893,7 +10943,7 @@ var HTTP_METHODS = /* @__PURE__ */ new Set([
 ]);
 var LEADING_TOKEN_RE = /^(\S+)\s+\S/;
 function parseHttpMethodFromTrigger(trigger) {
-  if (!trigger) return null;
+  if (typeof trigger !== "string") return null;
   const match = LEADING_TOKEN_RE.exec(trigger.trim());
   const token = match?.[1];
   if (!token) return null;
@@ -10909,14 +10959,17 @@ function parsePathFromTrigger(trigger) {
 }
 var ERROR_STATUS_THRESHOLD3 = 500;
 function mapEventToSignal(event) {
+  if (!event || typeof event !== "object") return null;
   const metadata = event.$metadata;
   const workers = event.$workers;
   const method = parseHttpMethodFromTrigger(metadata?.trigger);
   if (!method) return null;
   const scriptName = workers?.scriptName ?? metadata?.service;
-  if (!scriptName) return null;
+  if (typeof scriptName !== "string" || scriptName.length === 0) return null;
   const timestampMs = event.timestamp ?? metadata?.startTime;
   if (typeof timestampMs !== "number" || !Number.isFinite(timestampMs)) return null;
+  const observedAt = new Date(timestampMs);
+  if (Number.isNaN(observedAt.getTime())) return null;
   const statusCode = metadata?.statusCode;
   const isError = typeof statusCode === "number" && statusCode >= ERROR_STATUS_THRESHOLD3;
   const path53 = metadata?.trigger ? parsePathFromTrigger(metadata.trigger) : void 0;
@@ -10925,7 +10978,7 @@ function mapEventToSignal(event) {
     targetName: scriptName,
     callCount: 1,
     errorCount: isError ? 1 : 0,
-    lastObservedIso: new Date(timestampMs).toISOString(),
+    lastObservedIso: observedAt.toISOString(),
     method,
     ...path53 ? { path: path53 } : {},
     ...typeof statusCode === "number" ? { statusCode } : {},