@neat.is/core 0.7.8 → 0.7.10

package/dist/neatd.cjs

@@ -504,13 +504,18 @@ function loadProtobufResponseEncoder() {
   );
   return exportTraceServiceResponseType;
 }
-function encodeProtobufResponseBody() {
-  if (cachedProtobufResponseBody) return cachedProtobufResponseBody;
+function encodeProtobufResponseBody(rejected, message) {
   const Type = loadProtobufResponseEncoder();
-  const msg = Type.create({});
-  const encoded = Type.encode(msg).finish();
-  cachedProtobufResponseBody = Buffer.from(encoded);
-  return cachedProtobufResponseBody;
+  if (!rejected) {
+    if (cachedProtobufResponseBody) return cachedProtobufResponseBody;
+    const msg2 = Type.create({});
+    cachedProtobufResponseBody = Buffer.from(Type.encode(msg2).finish());
+    return cachedProtobufResponseBody;
+  }
+  const msg = Type.fromObject({
+    partial_success: { rejected_spans: rejected, error_message: message ?? "" }
+  });
+  return Buffer.from(Type.encode(msg).finish());
 }
 async function decodeProtobufBody(buf) {
   const Type = loadProtobufDecoder();
@@ -625,6 +630,13 @@ async function buildOtelReceiver(opts) {
     }
     return reply.code(200).header("content-type", "application/json").send({ partialSuccess: {} });
   }
+  function sendOtlpPartial(reply, flavor, rejected, message) {
+    if (flavor === "protobuf") {
+      const buf = encodeProtobufResponseBody(rejected, message);
+      return reply.code(200).header("content-type", "application/x-protobuf").send(buf);
+    }
+    return reply.code(200).header("content-type", "application/json").send({ partialSuccess: { rejectedSpans: rejected, errorMessage: message } });
+  }
   app.addContentTypeParser(
     "application/x-protobuf",
     { parseAs: "buffer", bodyLimit: opts.bodyLimit ?? 16 * 1024 * 1024 },
@@ -652,6 +664,10 @@ async function buildOtelReceiver(opts) {
       }
     }
     enqueue(spans);
+    if (opts.classifyBareRoutability) {
+      const { rejected, message } = opts.classifyBareRoutability(spans);
+      if (rejected > 0) return sendOtlpPartial(reply, result.flavor, rejected, message);
+    }
     return sendOtlpSuccess(reply, result.flavor);
   });
   app.post("/projects/:project/v1/traces", async (req2, reply) => {
@@ -2213,6 +2229,7 @@ var import_yaml = require("yaml");
 var import_types3 = require("@neat.is/types");
 var SERVICE_FILE_EXTENSIONS = /* @__PURE__ */ new Set([".js", ".mjs", ".cjs", ".ts", ".tsx", ".py", ".go", ".rb", ".php"]);
 var CONFIG_FILE_EXTENSIONS = /* @__PURE__ */ new Set([".yaml", ".yml"]);
+var JSON_CONFIG_FILENAMES = /* @__PURE__ */ new Set(["app.json", "app.config.json", "eas.json"]);
 var IGNORED_DIRS = /* @__PURE__ */ new Set([
   "node_modules",
   ".git",
@@ -2252,6 +2269,7 @@ async function isPythonVenvDir(dir) {
 function isConfigFile(name) {
   const ext = import_node_path3.default.extname(name);
   if (CONFIG_FILE_EXTENSIONS.has(ext)) return { match: true, fileType: ext.slice(1) };
+  if (JSON_CONFIG_FILENAMES.has(name)) return { match: true, fileType: "json" };
   if (name === ".env" || name.startsWith(".env.")) {
     if (isEnvTemplateFile(name)) return { match: false, fileType: "" };
     if (isNeatAuthoredEnvFile(name)) return { match: false, fileType: "" };
@@ -4828,10 +4846,15 @@ function resolveDistToSrc(absFilepath, line) {
   }
   if (!entry2) return null;
   try {
-    const pos = entry2.consumer.originalPositionFor({
-      line: line !== void 0 && Number.isFinite(line) ? line : 1,
-      column: 0
-    });
+    const queryLine = line !== void 0 && Number.isFinite(line) ? line : 1;
+    let pos = entry2.consumer.originalPositionFor({ line: queryLine, column: 0 });
+    if (!pos || !pos.source) {
+      pos = entry2.consumer.originalPositionFor({
+        line: queryLine,
+        column: 0,
+        bias: sourceMapJs.SourceMapConsumer.LEAST_UPPER_BOUND
+      });
+    }
     if (!pos || !pos.source) return null;
     const root = entry2.consumer.sourceRoot ?? "";
     const resolved = import_node_path8.default.resolve(entry2.dir, root, pos.source);
@@ -4840,6 +4863,9 @@ function resolveDistToSrc(absFilepath, line) {
     return null;
   }
 }
+function hasAdjacentSourceMap(absFilepath) {
+  return sourceMapCache.get(absFilepath) != null;
+}
 function callSiteFromSpan(span, serviceNode, scanPath) {
   const filepath = codeFilepathOf(span.attributes);
   if (filepath === void 0) return null;
@@ -4855,7 +4881,7 @@ function callSiteFromSpan(span, serviceNode, scanPath) {
   }
   const relPath = relPathForRuntimeFile(effectivePath, serviceNode, scanPath);
   if (!relPath) return null;
-  if (!resolved && abs.endsWith(".js") && relPath.startsWith("dist/") && serviceNode?.name) {
+  if (!resolved && abs.endsWith(".js") && relPath.startsWith("dist/") && !hasAdjacentSourceMap(abs) && serviceNode?.name) {
     warnNoSourceMaps(serviceNode.name);
   }
   const fn = codeFunctionOf(span.attributes);
@@ -5131,7 +5157,7 @@ function resolveServiceId(graph, host, env) {
 function frontierIdFor(host) {
   return (0, import_types8.frontierId)(host);
 }
-function ensureServiceNode(graph, serviceName, env) {
+function resolveFusedServiceId(graph, serviceName, env) {
   const id = (0, import_types8.serviceId)(serviceName, env);
   if (graph.hasNode(id)) return id;
   const wanted = serviceName.toLowerCase();
@@ -5141,17 +5167,21 @@ function ensureServiceNode(graph, serviceName, env) {
     if (svc.discoveredVia === "otel") return false;
     return typeof svc.name === "string" && svc.name.toLowerCase() === wanted;
   });
-  if (extractedId) return extractedId;
+  return extractedId ?? id;
+}
+function ensureServiceNode(graph, serviceName, env) {
+  const resolved = resolveFusedServiceId(graph, serviceName, env);
+  if (graph.hasNode(resolved)) return resolved;
   const node = {
-    id,
+    id: resolved,
     type: import_types8.NodeType.ServiceNode,
     name: serviceName,
     language: "unknown",
     discoveredVia: "otel",
     ...env !== "unknown" ? { env } : {}
   };
-  graph.addNode(id, node);
-  return id;
+  graph.addNode(resolved, node);
+  return resolved;
 }
 function ensureInfraNode(graph, kind, name, provider) {
   const id = (0, import_types8.infraId)(kind, name);
@@ -5344,8 +5374,23 @@ async function appendErrorEvent(ctx, ev) {
   await import_node_fs7.promises.mkdir(import_node_path8.default.dirname(ctx.errorsPath), { recursive: true });
   await import_node_fs7.promises.appendFile(ctx.errorsPath, JSON.stringify(ev) + "\n", "utf8");
 }
+async function appendConnectorIncident(errorsPath, input) {
+  const ev = {
+    id: input.id,
+    timestamp: input.timestamp,
+    service: input.service,
+    traceId: input.id,
+    spanId: input.id,
+    errorType: input.errorType,
+    errorMessage: input.errorMessage,
+    ...input.attributes && Object.keys(input.attributes).length > 0 ? { attributes: input.attributes } : {},
+    affectedNode: input.affectedNode
+  };
+  await import_node_fs7.promises.mkdir(import_node_path8.default.dirname(errorsPath), { recursive: true });
+  await import_node_fs7.promises.appendFile(errorsPath, JSON.stringify(ev) + "\n", "utf8");
+}
 function incidentAffectedNode(span, graph, scanPath) {
-  const sid = (0, import_types8.serviceId)(span.service, span.env);
+  const sid = graph ? resolveFusedServiceId(graph, span.service, span.env) : (0, import_types8.serviceId)(span.service, span.env);
   const serviceNode = graph && graph.hasNode(sid) ? graph.getNodeAttributes(sid) : void 0;
   const callSite = callSiteFromSpan(span, serviceNode, scanPath);
   if (callSite) {
@@ -6744,7 +6789,7 @@ function disambiguate(defs) {
 }
 async function addSymbols(graph, services) {
   const parsers = /* @__PURE__ */ new Map();
-  const parserForExt4 = (ext) => {
+  const parserForExt5 = (ext) => {
     const grammar = GRAMMAR_BY_EXT[ext];
     if (!grammar) return null;
     let parser = parsers.get(ext);
@@ -6760,7 +6805,7 @@ async function addSymbols(graph, services) {
   for (const service of services) {
     const files = await loadSourceFiles(service.dir);
     for (const file of files) {
-      const parser = parserForExt4(import_node_path17.default.extname(file.path));
+      const parser = parserForExt5(import_node_path17.default.extname(file.path));
       if (!parser) continue;
       const relPath = toPosix(import_node_path17.default.relative(service.dir, file.path));
       let defs;
@@ -6912,7 +6957,7 @@ function stringInner(node) {
 }
 async function addSymbolEdges(graph, services) {
   const parsers = /* @__PURE__ */ new Map();
-  const parserForExt4 = (ext) => {
+  const parserForExt5 = (ext) => {
     const grammar = GRAMMAR_BY_EXT[ext];
     if (!grammar) return null;
     let parser = parsers.get(ext);
@@ -6929,7 +6974,7 @@ async function addSymbolEdges(graph, services) {
     const tsPaths = await loadTsPathConfig(service.dir);
     const files = await loadSourceFiles(service.dir);
     for (const file of files) {
-      const parser = parserForExt4(import_node_path18.default.extname(file.path));
+      const parser = parserForExt5(import_node_path18.default.extname(file.path));
       if (!parser) continue;
       const relPath = toPosix(import_node_path18.default.relative(service.dir, file.path));
       const fileDir = import_node_path18.default.dirname(file.path);
@@ -7191,7 +7236,7 @@ function firstReferenceLines(root, wanted) {
 }
 async function addServerActions(graph, services) {
   const parsers = /* @__PURE__ */ new Map();
-  const parserForExt4 = (ext) => {
+  const parserForExt5 = (ext) => {
     const grammar = GRAMMAR_BY_EXT[ext];
     if (!grammar) return null;
     let parser = parsers.get(ext);
@@ -7214,7 +7259,7 @@ async function addServerActions(graph, services) {
     const files = await loadSourceFiles(service.dir);
     for (const file of files) {
       if (isTestPath(file.path)) continue;
-      const parser = parserForExt4(import_node_path19.default.extname(file.path));
+      const parser = parserForExt5(import_node_path19.default.extname(file.path));
       if (!parser) continue;
       const relPath = toPosix(import_node_path19.default.relative(service.dir, file.path));
       let root;
@@ -7277,7 +7322,7 @@ async function addServerActions(graph, services) {
     }
     for (const file of files) {
       if (isTestPath(file.path)) continue;
-      const parser = parserForExt4(import_node_path19.default.extname(file.path));
+      const parser = parserForExt5(import_node_path19.default.extname(file.path));
       if (!parser) continue;
       const relPath = toPosix(import_node_path19.default.relative(service.dir, file.path));
       const fileDir = import_node_path19.default.dirname(file.path);
@@ -8241,6 +8286,7 @@ init_cjs_shims();
 var import_node_path30 = __toESM(require("path"), 1);
 var import_tree_sitter6 = __toESM(require("tree-sitter"), 1);
 var import_tree_sitter_javascript4 = __toESM(require("tree-sitter-javascript"), 1);
+var import_tree_sitter_typescript2 = __toESM(require("tree-sitter-typescript"), 1);
 var import_tree_sitter_python3 = __toESM(require("tree-sitter-python"), 1);
 var import_types20 = require("@neat.is/types");
 var STRING_LITERAL_NODE_TYPES = /* @__PURE__ */ new Set(["string_fragment", "string_content"]);
@@ -8291,19 +8337,27 @@ function callsFromSource(source, parser, knownHosts) {
   }
   return out;
 }
-function makeJsParser3() {
-  const p = new import_tree_sitter6.default();
-  p.setLanguage(import_tree_sitter_javascript4.default);
-  return p;
-}
-function makePyParser3() {
-  const p = new import_tree_sitter6.default();
-  p.setLanguage(import_tree_sitter_python3.default);
-  return p;
+var GRAMMAR_BY_EXT2 = {
+  ".ts": import_tree_sitter_typescript2.default.typescript,
+  ".tsx": import_tree_sitter_typescript2.default.tsx,
+  ".js": import_tree_sitter_javascript4.default,
+  ".jsx": import_tree_sitter_javascript4.default,
+  ".mjs": import_tree_sitter_javascript4.default,
+  ".cjs": import_tree_sitter_javascript4.default,
+  ".py": import_tree_sitter_python3.default
+};
+function parserForExt(ext, cache) {
+  const grammar = GRAMMAR_BY_EXT2[ext] ?? import_tree_sitter_javascript4.default;
+  let parser = cache.get(grammar);
+  if (!parser) {
+    parser = new import_tree_sitter6.default();
+    parser.setLanguage(grammar);
+    cache.set(grammar, parser);
+  }
+  return parser;
 }
 async function addHttpCallEdges(graph, services) {
-  const jsParser = makeJsParser3();
-  const pyParser = makePyParser3();
+  const parserCache = /* @__PURE__ */ new Map();
   const { knownHosts, hostToNodeId } = buildServiceHostIndex(services);
   let nodesAdded = 0;
   let edgesAdded = 0;
@@ -8312,7 +8366,7 @@ async function addHttpCallEdges(graph, services) {
     const seen = /* @__PURE__ */ new Set();
     for (const file of files) {
       if (isTestPath(file.path)) continue;
-      const parser = import_node_path30.default.extname(file.path) === ".py" ? pyParser : jsParser;
+      const parser = parserForExt(import_node_path30.default.extname(file.path), parserCache);
       let sites;
       try {
         sites = callsFromSource(file.content, parser, knownHosts);
@@ -8385,7 +8439,7 @@ function parseSource5(parser, source) {
     (index) => index >= source.length ? "" : source.slice(index, index + PARSE_CHUNK5)
   );
 }
-function makeJsParser4() {
+function makeJsParser3() {
   const p = new import_tree_sitter7.default();
   p.setLanguage(import_tree_sitter_javascript5.default);
   return p;
@@ -8563,7 +8617,7 @@ function findRoute(entries, method, normalizedPath) {
   );
 }
 async function addRouteCallEdges(graph, services) {
-  const jsParser = makeJsParser4();
+  const jsParser = makeJsParser3();
   const { knownHosts, hostToNodeId } = buildServiceHostIndex(services);
   const routeIndex = buildRouteIndex(graph);
   if (routeIndex.size === 0) return { nodesAdded: 0, edgesAdded: 0 };
@@ -8955,7 +9009,7 @@ var import_tree_sitter_javascript6 = __toESM(require("tree-sitter-javascript"),
 var import_types27 = require("@neat.is/types");
 var FIRESTORE_CLIENT_IMPORT_RE = /(?:from\s+['"`]|require\(\s*['"`])firebase\/firestore['"`]/;
 var FIRESTORE_ADMIN_IMPORT_RE = /(?:from\s+['"`]|require\(\s*['"`])firebase-admin(?:\/firestore)?['"`]/;
-function parserForExt(ext) {
+function parserForExt2(ext) {
   const p = new import_tree_sitter8.default();
   p.setLanguage(GRAMMAR_BY_EXT[ext] ?? import_tree_sitter_javascript6.default);
   return p;
@@ -9120,7 +9174,7 @@ function firestoreEndpointsFromFile(file, serviceDir) {
   const hasAdmin = FIRESTORE_ADMIN_IMPORT_RE.test(file.content);
   if (!hasClient && !hasAdmin) return [];
   const fileSdk = hasClient && !hasAdmin ? "client" : hasAdmin && !hasClient ? "admin" : null;
-  const tree = parseSource3(parserForExt(import_node_path37.default.extname(file.path)), file.content);
+  const tree = parseSource3(parserForExt2(import_node_path37.default.extname(file.path)), file.content);
   const clientVars = firestoreClientVars(tree.rootNode);
   const collLine = /* @__PURE__ */ new Map();
   const writes = /* @__PURE__ */ new Map();
@@ -9537,7 +9591,7 @@ var import_tree_sitter_python4 = __toESM(require("tree-sitter-python"), 1);
 var import_types29 = require("@neat.is/types");
 var SQLALCHEMY_IMPORT_RE = /(?:from|import)\s+(?:flask_sqlalchemy|sqlalchemy)\b/;
 var PARSE_CHUNK6 = 16384;
-function makePyParser4() {
+function makePyParser3() {
   const p = new import_tree_sitter9.default();
   p.setLanguage(import_tree_sitter_python4.default);
   return p;
@@ -9644,7 +9698,7 @@ function foreignKeyParentTable(call) {
 }
 function sqlalchemyForeignKeys(file, serviceDir) {
   if (!SQLALCHEMY_IMPORT_RE.test(file.content)) return [];
-  const tree = parseSource6(makePyParser4(), file.content);
+  const tree = parseSource6(makePyParser3(), file.content);
   const out = [];
   const seen = /* @__PURE__ */ new Set();
   walk3(tree.rootNode, (node) => {
@@ -9681,7 +9735,7 @@ function sqlalchemyForeignKeys(file, serviceDir) {
 }
 function sqlalchemyEndpointsFromFile(file, serviceDir) {
   if (!SQLALCHEMY_IMPORT_RE.test(file.content)) return [];
-  const tree = parseSource6(makePyParser4(), file.content);
+  const tree = parseSource6(makePyParser3(), file.content);
   const out = [];
   const seen = /* @__PURE__ */ new Set();
   const push = (name, line, columns) => {
@@ -9733,7 +9787,7 @@ function sqlalchemyEndpointsFromFile(file, serviceDir) {
 function buildSqlalchemyModelRegistry(files) {
   const table = /* @__PURE__ */ new Map();
   const ambiguous = /* @__PURE__ */ new Set();
-  const parser = makePyParser4();
+  const parser = makePyParser3();
   for (const file of files) {
     if (!SQLALCHEMY_IMPORT_RE.test(file.content)) continue;
     const tree = parseSource6(parser, file.content);
@@ -9782,7 +9836,7 @@ function importsModelName(content, name) {
 function pythonOrmCrossFileEndpoints(files, serviceDir) {
   const registry = buildSqlalchemyModelRegistry(files);
   if (registry.size === 0) return [];
-  const parser = makePyParser4();
+  const parser = makePyParser3();
   const out = [];
   const seen = /* @__PURE__ */ new Set();
   for (const file of files) {
@@ -9820,7 +9874,7 @@ var import_tree_sitter_python5 = __toESM(require("tree-sitter-python"), 1);
 var import_types30 = require("@neat.is/types");
 var DJANGO_IMPORT_RE = /(?:from|import)\s+django\b/;
 var PARSE_CHUNK7 = 16384;
-function makePyParser5() {
+function makePyParser4() {
   const p = new import_tree_sitter10.default();
   p.setLanguage(import_tree_sitter_python5.default);
   return p;
@@ -9881,7 +9935,7 @@ function readMeta(body) {
 }
 function djangoOrmEndpointsFromFile(file, serviceDir) {
   if (!DJANGO_IMPORT_RE.test(file.content)) return [];
-  const tree = parseSource7(makePyParser5(), file.content);
+  const tree = parseSource7(makePyParser4(), file.content);
   const out = [];
   const seen = /* @__PURE__ */ new Set();
   const defaultAppLabel = import_node_path40.default.basename(import_node_path40.default.dirname(file.path));
@@ -9916,7 +9970,7 @@ var import_tree_sitter_javascript7 = __toESM(require("tree-sitter-javascript"),
 var import_types31 = require("@neat.is/types");
 var DRIZZLE_IMPORT_RE = /drizzle-orm/;
 var TABLE_BUILDERS = /* @__PURE__ */ new Set(["pgTable", "mysqlTable", "sqliteTable"]);
-function parserForExt2(ext) {
+function parserForExt3(ext) {
   const p = new import_tree_sitter11.default();
   p.setLanguage(GRAMMAR_BY_EXT[ext] ?? import_tree_sitter_javascript7.default);
   return p;
@@ -9988,7 +10042,7 @@ function columnsFromObject(obj) {
 }
 function drizzleEndpointsFromFile(file, serviceDir) {
   if (!DRIZZLE_IMPORT_RE.test(file.content)) return [];
-  const tree = parseSource3(parserForExt2(import_node_path41.default.extname(file.path)), file.content);
+  const tree = parseSource3(parserForExt3(import_node_path41.default.extname(file.path)), file.content);
   const out = [];
   const seen = /* @__PURE__ */ new Set();
   const walk9 = (node) => {
@@ -10077,7 +10131,7 @@ function referencesTargetVar(call) {
 }
 function drizzleForeignKeys(file, serviceDir) {
   if (!DRIZZLE_IMPORT_RE.test(file.content)) return [];
-  const tree = parseSource3(parserForExt2(import_node_path41.default.extname(file.path)), file.content);
+  const tree = parseSource3(parserForExt3(import_node_path41.default.extname(file.path)), file.content);
   const { tables, varToTable } = collectDrizzleTables(tree.rootNode);
   const out = [];
   const seen = /* @__PURE__ */ new Set();
@@ -11145,8 +11199,41 @@ var import_tree_sitter14 = __toESM(require("tree-sitter"), 1);
 var import_tree_sitter_go3 = __toESM(require("tree-sitter-go"), 1);
 var import_types35 = require("@neat.is/types");
 init_otel();
-var SQL_METHODS = /* @__PURE__ */ new Set(["Exec", "ExecContext", "Query", "QueryContext", "QueryRow", "QueryRowContext"]);
 var PARSE_CHUNK10 = 16384;
+var DATABASE_SQL_METHODS = /* @__PURE__ */ new Set([
+  "Query",
+  "QueryContext",
+  "QueryRow",
+  "QueryRowContext",
+  "Exec",
+  "ExecContext",
+  "Prepare",
+  "PrepareContext"
+]);
+var SQLX_METHODS = /* @__PURE__ */ new Set([
+  "Get",
+  "Select",
+  "Queryx",
+  "QueryRowx",
+  "NamedExec",
+  "NamedQuery",
+  "MustExec",
+  "Preparex",
+  "GetContext",
+  "SelectContext"
+]);
+var DATABASE_SQL_IMPORT = "database/sql";
+var SQLX_IMPORT = "github.com/jmoiron/sqlx";
+function makeGoParser3() {
+  const p = new import_tree_sitter14.default();
+  p.setLanguage(import_tree_sitter_go3.default);
+  return p;
+}
+function parseSource10(parser, source) {
+  return parser.parse(
+    (index) => index >= source.length ? "" : source.slice(index, index + PARSE_CHUNK10)
+  );
+}
 function walk7(node, visit) {
   visit(node);
   for (let i = 0; i < node.namedChildCount; i++) {
@@ -11154,25 +11241,54 @@ function walk7(node, visit) {
     if (child) walk7(child, visit);
   }
 }
+function goStringLiteralValue(node) {
+  if (!node) return null;
+  if (node.type === "interpreted_string_literal" || node.type === "raw_string_literal") {
+    const t = node.text;
+    return t.length >= 2 ? t.slice(1, -1) : "";
+  }
+  return null;
+}
+function goImportsAny(root, names) {
+  let found = false;
+  walk7(root, (node) => {
+    if (found || node.type !== "import_spec") return;
+    for (let i = 0; i < node.namedChildCount; i++) {
+      const value = goStringLiteralValue(node.namedChild(i));
+      if (value !== null && names.has(value)) found = true;
+    }
+  });
+  return found;
+}
+function firstStringLiteralArg(argsNode) {
+  if (!argsNode) return null;
+  for (let i = 0; i < argsNode.namedChildCount; i++) {
+    const value = goStringLiteralValue(argsNode.namedChild(i));
+    if (value !== null) return value;
+  }
+  return null;
+}
 function goSqlEndpointsFromFile(file, serviceDir) {
   if (import_node_path47.default.extname(file.path) !== ".go") return [];
-  const parser = new import_tree_sitter14.default();
-  parser.setLanguage(import_tree_sitter_go3.default);
-  const tree = parser.parse(
-    (index) => index >= file.content.length ? "" : file.content.slice(index, index + PARSE_CHUNK10)
-  );
+  if (!file.content.includes(DATABASE_SQL_IMPORT) && !file.content.includes(SQLX_IMPORT)) return [];
+  const tree = parseSource10(makeGoParser3(), file.content);
+  const importsDatabaseSql = goImportsAny(tree.rootNode, /* @__PURE__ */ new Set([DATABASE_SQL_IMPORT]));
+  const importsSqlx = goImportsAny(tree.rootNode, /* @__PURE__ */ new Set([SQLX_IMPORT]));
+  if (!importsDatabaseSql && !importsSqlx) return [];
   const out = [];
   walk7(tree.rootNode, (node) => {
     if (node.type !== "call_expression") return;
     const fn = node.childForFieldName("function");
     if (fn?.type !== "selector_expression") return;
     const method = fn.childForFieldName("field")?.text;
-    if (!method || !SQL_METHODS.has(method)) return;
-    const arg = node.childForFieldName("arguments")?.namedChild(0);
-    if (!arg || arg.type !== "interpreted_string_literal" && arg.type !== "raw_string_literal") return;
-    const sql = arg.text.slice(1, -1);
+    if (!method) return;
+    const recognized = DATABASE_SQL_METHODS.has(method) || importsSqlx && SQLX_METHODS.has(method);
+    if (!recognized) return;
+    const sql = firstStringLiteralArg(node.childForFieldName("arguments"));
+    if (sql === null) return;
     const table = tableFromSqlStatement(sql);
     if (!table) return;
+    const columns = columnsFromSqlStatement(sql);
     const line = node.startPosition.row + 1;
     out.push({
       infraId: (0, import_types35.infraId)("sql-table", table),
@@ -11180,7 +11296,12 @@ function goSqlEndpointsFromFile(file, serviceDir) {
       kind: "sql-table",
       edgeType: "CALLS",
       confidenceKind: "verified-call-site",
-      evidence: { file: toPosix(import_node_path47.default.relative(serviceDir, file.path)), line, snippet: snippet(file.content, line) }
+      ...columns.length > 0 ? { columns } : {},
+      evidence: {
+        file: toPosix(import_node_path47.default.relative(serviceDir, file.path)),
+        line,
+        snippet: snippet(file.content, line)
+      }
     });
   });
   return out;
@@ -11194,12 +11315,12 @@ var import_tree_sitter_go4 = __toESM(require("tree-sitter-go"), 1);
 var import_types36 = require("@neat.is/types");
 var GORM_IMPORT_RE = /gorm\.io\/gorm/;
 var PARSE_CHUNK11 = 16384;
-function makeGoParser3() {
+function makeGoParser4() {
   const p = new import_tree_sitter15.default();
   p.setLanguage(import_tree_sitter_go4.default);
   return p;
 }
-function parseSource10(parser, source) {
+function parseSource11(parser, source) {
   return parser.parse(
     (index) => index >= source.length ? "" : source.slice(index, index + PARSE_CHUNK11)
   );
@@ -11623,7 +11744,7 @@ function collectColumns(struct, structs, seen, prefix, out, emitted) {
 function gormEndpointsFromFile(file, serviceDir) {
   if (import_node_path48.default.extname(file.path) !== ".go") return [];
   if (!GORM_IMPORT_RE.test(file.content)) return [];
-  const tree = parseSource10(makeGoParser3(), file.content);
+  const tree = parseSource11(makeGoParser4(), file.content);
   const { structs, models, tableFor } = analyze(tree);
   const out = [];
   const seenTables = /* @__PURE__ */ new Set();
@@ -11654,7 +11775,7 @@ function gormEndpointsFromFile(file, serviceDir) {
 function gormForeignKeys(file, serviceDir) {
   if (import_node_path48.default.extname(file.path) !== ".go") return [];
   if (!GORM_IMPORT_RE.test(file.content)) return [];
-  const tree = parseSource10(makeGoParser3(), file.content);
+  const tree = parseSource11(makeGoParser4(), file.content);
   const { structs, models, tableFor } = analyze(tree);
   const out = [];
   const seen = /* @__PURE__ */ new Set();
@@ -12784,7 +12905,7 @@ var import_tree_sitter_javascript8 = __toESM(require("tree-sitter-javascript"),
 var import_types47 = require("@neat.is/types");
 var ZOD_IMPORT_RE = /\bzod\b/;
 var ZOD_OBJECTS = /* @__PURE__ */ new Set(["z", "zod"]);
-function parserForExt3(ext) {
+function parserForExt4(ext) {
   const p = new import_tree_sitter16.default();
   p.setLanguage(GRAMMAR_BY_EXT[ext] ?? import_tree_sitter_javascript8.default);
   return p;
@@ -12873,7 +12994,7 @@ function topLevelSchemas(root) {
 }
 function zodShapesFromFile(file, serviceDir) {
   if (!ZOD_IMPORT_RE.test(file.content)) return [];
-  const tree = parseSource3(parserForExt3(import_node_path57.default.extname(file.path)), file.content);
+  const tree = parseSource3(parserForExt4(import_node_path57.default.extname(file.path)), file.content);
   const out = [];
   const seen = /* @__PURE__ */ new Set();
   for (const { name, call } of topLevelSchemas(tree.rootNode)) {
@@ -13449,7 +13570,7 @@ var Projects = class {
 init_cjs_shims();
 var import_fastify2 = __toESM(require("fastify"), 1);
 var import_cors = __toESM(require("@fastify/cors"), 1);
-var import_types80 = require("@neat.is/types");
+var import_types85 = require("@neat.is/types");
 
 // src/extend/index.ts
 init_cjs_shims();
@@ -14845,6 +14966,23 @@ async function runConnectorPoll(connector, ctx, graph, resolveTarget) {
       unresolved++;
       continue;
     }
+    if (signal.incident) {
+      ensureServiceNode(graph, resolved.serviceName, NO_ENV);
+      if (!ctx.errorsPath || !graph.hasNode(resolved.targetNodeId)) {
+        unresolved++;
+        continue;
+      }
+      await appendConnectorIncident(ctx.errorsPath, {
+        id: signal.incident.id,
+        timestamp: signal.incident.timestamp,
+        service: signal.incident.service,
+        errorType: signal.incident.errorType,
+        errorMessage: signal.incident.errorMessage,
+        ...signal.incident.attributes ? { attributes: signal.incident.attributes } : {},
+        affectedNode: resolved.targetNodeId
+      });
+      continue;
+    }
     if (resolved.ensureInfraNode) {
       const { kind, name, provider } = resolved.ensureInfraNode;
       ensureInfraNode(graph, kind, name, provider);
@@ -17079,6 +17217,338 @@ function createPlanetscaleConnector(graph, config, deps = {}) {
   };
 }
 
+// src/connectors/eas/index.ts
+init_cjs_shims();
+
+// src/connectors/eas/client.ts
+init_cjs_shims();
+
+// src/connectors/eas/types.ts
+init_cjs_shims();
+function readEasCredentials(raw) {
+  const token = raw["token"];
+  if (typeof token !== "string" || token.length === 0) {
+    throw new Error("eas connector: credentials.token (EXPO_TOKEN) must be a non-empty string");
+  }
+  return { token };
+}
+var EAS_STATUS_ERRORED = "ERRORED";
+var TRANSIENT_BUILD_PHASES = /* @__PURE__ */ new Set([
+  "SPIN_UP_BUILDER",
+  "PREPARE_CREDENTIALS",
+  "RESTORE_CACHE",
+  "UPLOAD_APPLICATION_ARCHIVE"
+]);
+var INTERNAL_ERROR_CODE = /INTERNAL_SERVER_ERROR|EAS_BUILD_.*INTERNAL|_INTERNAL_ERROR|UNKNOWN_ERROR/i;
+function isTransientFailure(err) {
+  if (!err) return false;
+  const phase = typeof err.buildPhase === "string" ? err.buildPhase : void 0;
+  if (phase) {
+    if (TRANSIENT_BUILD_PHASES.has(phase)) return true;
+    if (/^SPIN_UP|_CREDENTIALS$|^RESTORE_CACHE/i.test(phase)) return true;
+  }
+  const code = typeof err.errorCode === "string" ? err.errorCode : void 0;
+  if (code && INTERNAL_ERROR_CODE.test(code)) return true;
+  return false;
+}
+var FIELD_SEP3 = "\0";
+var EAS_TARGET_KIND = "eas-build";
+function packEasTargetName(identity) {
+  return [identity.serviceName, identity.phase].join(FIELD_SEP3);
+}
+function parseEasTargetName(targetName) {
+  const sep = targetName.indexOf(FIELD_SEP3);
+  if (sep === -1) return null;
+  const serviceName = targetName.slice(0, sep);
+  const phase = targetName.slice(sep + 1);
+  if (!serviceName) return null;
+  return { serviceName, phase };
+}
+
+// src/connectors/eas/client.ts
+var DEFAULT_EAS_API_URL = "https://api.expo.dev/graphql";
+var DEFAULT_PAGE_SIZE = 50;
+var DEFAULT_MAX_PAGES = 10;
+var DEFAULT_MAX_LOG_BYTES = 16 * 1024;
+var DEFAULT_MAX_LOOKBACK_MS6 = 7 * 24 * 60 * 60 * 1e3;
+var BUILDS_QUERY = `
+  query NeatEasErroredBuilds($appId: String!, $offset: Int!, $limit: Int!) {
+    app {
+      byId(appId: $appId) {
+        builds(offset: $offset, limit: $limit, filter: { status: ERRORED }) {
+          id
+          status
+          platform
+          buildProfile
+          gitCommitHash
+          gitCommitMessage
+          gitRef
+          isGitWorkingTreeDirty
+          createdAt
+          completedAt
+          error {
+            buildPhase
+            errorCode
+            message
+            docsUrl
+          }
+          logFileUrls
+        }
+      }
+    }
+  }
+`;
+async function easGraphQL(apiUrl, token, query, variables, accountKey, fetchImpl) {
+  const res = await junctionFetch(
+    apiUrl,
+    {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        ...bearerAuthHeader(token)
+      },
+      body: JSON.stringify({ query, variables })
+    },
+    // accountKey: the Expo app id — the per-(provider, accountKey) rate-limit
+    // bucket (ADR-131), the closest thing this connector carries to "one account".
+    { provider: "eas", accountKey, ...fetchImpl ? { fetchImpl } : {} }
+  );
+  if (!res.ok) {
+    throw new Error(`Expo GraphQL request failed: ${res.status} ${res.statusText}`);
+  }
+  const body = await res.json();
+  if (body.errors && body.errors.length > 0) {
+    throw new Error(`Expo GraphQL errors: ${body.errors.map((e) => e.message).join("; ")}`);
+  }
+  if (!body.data) throw new Error("Expo GraphQL response carried no data");
+  return body.data;
+}
+async function fetchErroredBuilds(token, config, fetchImpl) {
+  const apiUrl = config.apiUrl ?? DEFAULT_EAS_API_URL;
+  const pageSize = config.pageSize ?? DEFAULT_PAGE_SIZE;
+  const maxPages = config.maxPages ?? DEFAULT_MAX_PAGES;
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (let page = 0; page < maxPages; page++) {
+    const data = await easGraphQL(
+      apiUrl,
+      token,
+      BUILDS_QUERY,
+      { appId: config.appId, offset: page * pageSize, limit: pageSize },
+      config.appId,
+      fetchImpl
+    );
+    const builds = data.app?.byId?.builds;
+    if (!Array.isArray(builds)) break;
+    let added = 0;
+    for (const b of builds) {
+      if (!b || typeof b.id !== "string" || b.id.length === 0) continue;
+      if (b.status !== EAS_STATUS_ERRORED) continue;
+      if (seen.has(b.id)) continue;
+      seen.add(b.id);
+      out.push(b);
+      added++;
+    }
+    if (builds.length < pageSize) break;
+    if (added === 0) break;
+  }
+  return out;
+}
+async function fetchBuildLogs(logFileUrls, maxBytes = DEFAULT_MAX_LOG_BYTES, fetchImpl) {
+  if (!Array.isArray(logFileUrls) || logFileUrls.length === 0) return "";
+  const doFetch = fetchImpl ?? fetch;
+  const chunks = [];
+  for (const url of logFileUrls) {
+    if (typeof url !== "string" || url.length === 0) continue;
+    try {
+      const res = await doFetch(url);
+      if (!res.ok) continue;
+      chunks.push(await res.text());
+    } catch {
+    }
+  }
+  const joined = chunks.join("\n");
+  return joined.length > maxBytes ? joined.slice(joined.length - maxBytes) : joined;
+}
+
+// src/connectors/eas/map.ts
+init_cjs_shims();
+function buildEventTime(build) {
+  if (typeof build.completedAt === "string" && build.completedAt.length > 0) return build.completedAt;
+  if (typeof build.createdAt === "string" && build.createdAt.length > 0) return build.createdAt;
+  return (/* @__PURE__ */ new Date()).toISOString();
+}
+function incidentMessage2(build) {
+  const err = build.error ?? {};
+  const phase = typeof err.buildPhase === "string" && err.buildPhase.length > 0 ? ` at ${err.buildPhase}` : "";
+  const detail = typeof err.message === "string" && err.message.trim().length > 0 && err.message.trim() || typeof err.errorCode === "string" && err.errorCode.length > 0 && err.errorCode || "no error detail reported";
+  let msg = `EAS build failed${phase}: ${detail}`;
+  if (build.isGitWorkingTreeDirty === true) {
+    msg += " (built from a dirty working tree \u2014 the commit may not represent what built)";
+  }
+  return msg;
+}
+function incidentAttributes(build) {
+  const attrs = {};
+  const err = build.error ?? {};
+  const put = (k, v) => {
+    if (typeof v === "string" && v.length === 0) return;
+    if (v !== void 0 && v !== null) attrs[k] = v;
+  };
+  put("eas.buildId", build.id);
+  put("eas.platform", build.platform ?? void 0);
+  put("eas.buildProfile", build.buildProfile ?? void 0);
+  put("eas.buildPhase", err.buildPhase ?? void 0);
+  put("eas.errorCode", err.errorCode ?? void 0);
+  put("eas.docsUrl", err.docsUrl ?? void 0);
+  put("eas.gitCommitHash", build.gitCommitHash ?? void 0);
+  put("eas.gitRef", build.gitRef ?? void 0);
+  put("eas.gitCommitMessage", build.gitCommitMessage ?? void 0);
+  if (typeof build.isGitWorkingTreeDirty === "boolean") {
+    attrs["eas.gitWorkingTreeDirty"] = build.isGitWorkingTreeDirty;
+    if (build.isGitWorkingTreeDirty) attrs["eas.confidence"] = "low";
+  }
+  put("eas.createdAt", build.createdAt ?? void 0);
+  put("eas.completedAt", build.completedAt ?? void 0);
+  if (typeof build.logsText === "string" && build.logsText.length > 0) {
+    attrs["eas.logs"] = build.logsText;
+  }
+  return attrs;
+}
+function mapBuildToSignal(build, serviceName) {
+  if (!build || typeof build !== "object") return null;
+  if (build.status !== EAS_STATUS_ERRORED) return null;
+  if (!build.error) return null;
+  if (isTransientFailure(build.error)) return null;
+  const timestamp = buildEventTime(build);
+  const phase = typeof build.error.buildPhase === "string" ? build.error.buildPhase : "";
+  return {
+    targetKind: EAS_TARGET_KIND,
+    targetName: packEasTargetName({ serviceName, phase }),
+    // Incident-only — no edge, so no call/error count to replay.
+    callCount: 0,
+    errorCount: 0,
+    lastObservedIso: timestamp,
+    incident: {
+      id: `eas:build:${build.id}`,
+      timestamp,
+      service: serviceName,
+      errorType: "eas-build-failure",
+      errorMessage: incidentMessage2(build),
+      attributes: incidentAttributes(build)
+    }
+  };
+}
+function mapBuildsToSignals(builds, serviceName) {
+  const out = [];
+  for (const build of builds) {
+    const signal = mapBuildToSignal(build, serviceName);
+    if (signal) out.push(signal);
+  }
+  return out;
+}
+
+// src/connectors/eas/resolve.ts
+init_cjs_shims();
+var import_types82 = require("@neat.is/types");
+var NO_ENV2 = "unknown";
+var EAS_JSON_PHASES = /* @__PURE__ */ new Set(["READ_EAS_JSON"]);
+var APP_CONFIG_PHASES = /* @__PURE__ */ new Set([
+  "READ_APP_CONFIG",
+  "CONFIGURE_EXPO_UPDATES",
+  "CALCULATE_EXPO_UPDATES_RUNTIME_VERSION"
+]);
+function configBasenamesForPhase(phase) {
+  if (EAS_JSON_PHASES.has(phase)) return ["eas.json"];
+  if (APP_CONFIG_PHASES.has(phase)) return ["app.json", "app.config.json"];
+  return [];
+}
+function configNodeService(graph, configNodeId) {
+  for (const edgeId of graph.inboundEdges(configNodeId)) {
+    const edge = graph.getEdgeAttributes(edgeId);
+    if (edge.type !== import_types82.EdgeType.CONFIGURED_BY) continue;
+    const parsed = (0, import_types82.parseFileId)(edge.source);
+    if (parsed) return parsed.service;
+  }
+  return null;
+}
+function findConfigNode(graph, basenames, serviceName) {
+  let scoped = null;
+  let anyMatch = null;
+  graph.forEachNode((id, attrs) => {
+    if (scoped) return;
+    const node = attrs;
+    if (node.type !== import_types82.NodeType.ConfigNode) return;
+    if (typeof node.name !== "string" || !basenames.includes(node.name)) return;
+    if (anyMatch === null) anyMatch = id;
+    if (configNodeService(graph, id) === serviceName) scoped = id;
+  });
+  return scoped ?? anyMatch;
+}
+function createEasResolveTarget(graph) {
+  return (signal) => {
+    if (signal.targetKind !== EAS_TARGET_KIND) return null;
+    const identity = parseEasTargetName(signal.targetName);
+    if (!identity) return null;
+    const { serviceName, phase } = identity;
+    const basenames = configBasenamesForPhase(phase);
+    if (basenames.length > 0) {
+      const configNodeId = findConfigNode(graph, basenames, serviceName);
+      if (configNodeId) {
+        return { targetNodeId: configNodeId, serviceName, edgeType: import_types82.EdgeType.CALLS };
+      }
+    }
+    return {
+      targetNodeId: resolveFusedServiceId(graph, serviceName, NO_ENV2),
+      serviceName,
+      edgeType: import_types82.EdgeType.CALLS
+    };
+  };
+}
+
+// src/connectors/eas/index.ts
+function isBuildSince(build, sinceIso) {
+  const t = Date.parse(buildEventTime(build));
+  const s = Date.parse(sinceIso);
+  if (Number.isNaN(t) || Number.isNaN(s)) return true;
+  return t > s;
+}
+function boundedSinceIso2(since, now, maxLookbackMs) {
+  const floor = new Date(now.getTime() - maxLookbackMs);
+  if (!since) return floor.toISOString();
+  const sinceMs = new Date(since).getTime();
+  if (Number.isNaN(sinceMs)) return floor.toISOString();
+  return sinceMs < floor.getTime() ? floor.toISOString() : new Date(sinceMs).toISOString();
+}
+var EasConnector = class {
+  constructor(config, fetchImpl) {
+    this.config = config;
+    this.fetchImpl = fetchImpl;
+  }
+  config;
+  fetchImpl;
+  provider = "eas";
+  async poll(ctx) {
+    const creds = readEasCredentials(ctx.credentials);
+    const serviceName = this.config.serviceName ?? this.config.appId;
+    const maxLookbackMs = this.config.maxLookbackMs ?? DEFAULT_MAX_LOOKBACK_MS6;
+    const sinceIso = boundedSinceIso2(ctx.since, /* @__PURE__ */ new Date(), maxLookbackMs);
+    const builds = await fetchErroredBuilds(creds.token, this.config, this.fetchImpl);
+    const fresh = builds.filter((b) => isBuildSince(b, sinceIso));
+    const maxLogBytes = this.config.maxLogBytes ?? DEFAULT_MAX_LOG_BYTES;
+    for (const build of fresh) {
+      build.logsText = await fetchBuildLogs(build.logFileUrls, maxLogBytes, this.fetchImpl);
+    }
+    return mapBuildsToSignals(fresh, serviceName);
+  }
+};
+function createEasConnector(graph, config, fetchImpl) {
+  return {
+    connector: new EasConnector(config, fetchImpl),
+    resolveTarget: createEasResolveTarget(graph)
+  };
+}
+
 // src/connectors/registry.ts
 var CLOUDFLARE_API_BASE_URL = "https://api.cloudflare.com/client/v4";
 async function authProbe(input) {
@@ -17366,6 +17836,41 @@ var PROVIDER_DISPATCH = {
         ...fetchImpl ? { fetchImpl } : {}
       });
     }
+  },
+  eas: {
+    provider: "eas",
+    // The secret is a single robot-user EXPO_TOKEN; a single-string credential
+    // maps to `token`. `appId` is non-secret config (connector-config.md §7.1).
+    primaryCredentialKey: "token",
+    requiredCredentialFields: ["token"],
+    requiredOptionFields: ["appId"],
+    build(graph, options) {
+      return createEasConnector(graph, options);
+    },
+    // Runs the connector's real `builds` query at limit 1 — the exact read poll()
+    // performs, minus the pages — so the probe checks both that the EXPO_TOKEN
+    // authenticates and that this app id is reachable, the same probe-the-real-
+    // query discipline Railway and Cloud Run use over a trivial `{ __typename }`.
+    // A bad or wrong-scoped token comes back as an Expo GraphQL error, which
+    // `fetchErroredBuilds` throws on, so it fails honestly here rather than
+    // silently at the first poll.
+    async validate({ credentials, options, fetchImpl }) {
+      const cfg = options;
+      const appId = String(cfg.appId ?? "");
+      if (!appId) return { ok: false, reason: "eas: appId is required to validate" };
+      const probeConfig = {
+        appId,
+        pageSize: 1,
+        maxPages: 1,
+        ...cfg.apiUrl ? { apiUrl: cfg.apiUrl } : {}
+      };
+      try {
+        await fetchErroredBuilds(String(credentials.token ?? ""), probeConfig, fetchImpl);
+        return { ok: true };
+      } catch (err) {
+        return { ok: false, reason: `eas auth check failed: ${err.message}` };
+      }
+    }
   }
 };
 function vercelCredsFrom(credentials) {
@@ -17547,7 +18052,11 @@ async function startConnectorPolling(input) {
   const stopFns = all.map(
     (registration) => startConnectorPollLoop(
       registration.connector,
-      { projectDir: input.projectDir, credentials: registration.credentials },
+      {
+        projectDir: input.projectDir,
+        credentials: registration.credentials,
+        ...input.errorsPath ? { errorsPath: input.errorsPath } : {}
+      },
       input.graph,
       registration.resolveTarget,
       { intervalMs: registration.intervalMs, connectorId: registration.id }
@@ -17717,11 +18226,11 @@ function registerRoutes(scope, ctx) {
       const candidates = req2.query.type.split(",").map((s) => s.trim()).filter((s) => s.length > 0);
       const parsed = [];
       for (const c of candidates) {
-        const r = import_types80.DivergenceTypeSchema.safeParse(c);
+        const r = import_types85.DivergenceTypeSchema.safeParse(c);
         if (!r.success) {
           return reply.code(400).send({
             error: `unknown divergence type "${c}"`,
-            allowed: import_types80.DivergenceTypeSchema.options
+            allowed: import_types85.DivergenceTypeSchema.options
           });
         }
         parsed.push(r.data);
@@ -17828,10 +18337,15 @@ function registerRoutes(scope, ctx) {
       }
       const reg = built.registration;
       const at = (/* @__PURE__ */ new Date()).toISOString();
+      const incidentsPath = errorsPathFor(proj);
       try {
         const result = await ctx.runPoll(
           reg.connector,
-          { projectDir: proj.scanPath ?? "", credentials: reg.credentials },
+          {
+            projectDir: proj.scanPath ?? "",
+            credentials: reg.credentials,
+            ...incidentsPath ? { errorsPath: incidentsPath } : {}
+          },
           proj.graph,
           reg.resolveTarget
         );
@@ -18030,7 +18544,7 @@ function registerRoutes(scope, ctx) {
     const log = new PolicyViolationsLog(proj.paths.policyViolationsPath);
     let violations = await log.readAll();
     if (req2.query.severity) {
-      const sev = import_types80.PolicySeveritySchema.safeParse(req2.query.severity);
+      const sev = import_types85.PolicySeveritySchema.safeParse(req2.query.severity);
       if (!sev.success) {
         return reply.code(400).send({
           error: "invalid severity",
@@ -18069,7 +18583,7 @@ function registerRoutes(scope, ctx) {
   scope.post("/policies/check", async (req2, reply) => {
     const proj = resolveProject(registry, req2, reply, ctx.bootstrap, ctx.singleProject);
     if (!proj) return;
-    const parsed = import_types80.PoliciesCheckBodySchema.safeParse(req2.body ?? {});
+    const parsed = import_types85.PoliciesCheckBodySchema.safeParse(req2.body ?? {});
     if (!parsed.success) {
       return reply.code(400).send({
         error: "invalid /policies/check body",
@@ -18410,7 +18924,7 @@ function unroutedErrorsPath(neatHome4) {
 }
 
 // src/daemon.ts
-var import_types81 = require("@neat.is/types");
+var import_types86 = require("@neat.is/types");
 function daemonJsonPath(scanPath) {
   return import_node_path67.default.join(scanPath, "neat-out", "daemon.json");
 }
@@ -18549,7 +19063,7 @@ function spanBelongsToSingleProject(graph, project, serviceName) {
   if (!serviceName) return true;
   if (serviceNameMatchesProject(serviceName, project)) return true;
   return graph.someNode(
-    (_id, attrs) => attrs.type === import_types81.NodeType.ServiceNode && attrs.name === serviceName
+    (_id, attrs) => attrs.type === import_types86.NodeType.ServiceNode && attrs.name === serviceName
   );
 }
 async function bootstrapProject(entry2, connectors = [], neatHome4) {
@@ -18597,6 +19111,10 @@ async function bootstrapProject(entry2, connectors = [], neatHome4) {
       project: entry2.name,
       graph,
       projectDir: entry2.path,
+      // The slot's incident ledger, so an incident-emitting connector (ADR-185)
+      // writes a build-failure incident onto the same errors.ndjson OTLP-derived
+      // incidents land in.
+      errorsPath: paths.errorsPath,
       ...neatHome4 ? { home: neatHome4 } : {},
       extra: connectors,
       onSkip: (skipped, reason) => console.warn(
@@ -18839,6 +19357,19 @@ async function startDaemon(opts = {}) {
   let otlpAddress = "";
   let daemonRecord = null;
   if (bind) {
+    let bareSpanIsRoutable2 = function(serviceName) {
+      if (singleProject) {
+        const slot = slots.get(singleProject);
+        if (!slot) {
+          return !serviceName || serviceNameMatchesProject(serviceName, singleProject);
+        }
+        return spanBelongsToSingleProject(slot.graph, singleProject, serviceName);
+      }
+      const entries = [...slots.values()].map((s) => s.entry);
+      const target = routeSpanToProject(serviceName, entries);
+      return slots.has(target) || slots.has(DEFAULT_PROJECT);
+    };
+    var bareSpanIsRoutable = bareSpanIsRoutable2;
     const auth = readAuthEnv();
     const host = resolveHost(opts, Boolean(auth.authToken));
     const restPort = resolveRestPort(opts);
@@ -18936,6 +19467,20 @@ async function startDaemon(opts = {}) {
       const liveEntries = await listProjects().catch(() => []);
       let slot = slots.get(project);
       if (!slot) {
+        if (singleProject && project === singleProject) {
+          slot = await tryRecoverSlot({
+            name: singleProject,
+            path: singleProjectPath,
+            registeredAt: (/* @__PURE__ */ new Date()).toISOString(),
+            languages: [],
+            status: "active"
+          });
+          if (!slot || slot.status !== "active") {
+            warnDroppedSpan(singleProject, slot?.errorReason ?? "unknown");
+            return null;
+          }
+          return slot;
+        }
         await recordUnroutedSpan(serviceName, traceId);
         return null;
       }
@@ -19002,7 +19547,30 @@ async function startDaemon(opts = {}) {
         // host, rather than accepting it and dropping the batch. `slots` covers
         // active/recovering projects, `bootstrapStatus` the ones still
         // extracting; a foreign or wrong-cased project name matches neither.
-        isProjectRegistered: (project) => slots.has(project) || bootstrapStatus.has(project)
+        // A single-project daemon owns exactly one project by definition, so its
+        // own name always counts as registered even before loadAll populates the
+        // slot — otherwise a scoped span arriving during cold-start would 404 and
+        // be lost (OTLP does not retry 4xx). resolveSlotByName then builds it (#879).
+        isProjectRegistered: (project) => slots.has(project) || bootstrapStatus.has(project) || singleProject !== void 0 && project === singleProject,
+        // #881 — the bare `/v1/traces` route replies before the span is routed
+        // (off the queue), so tell the receiver, per batch, how many spans will
+        // land on no project. It keeps the 200 but reports those as
+        // partialSuccess.rejectedSpans instead of an empty partialSuccess that an
+        // exporter reads as full acceptance. Pure — the drop + unrouted-ledger
+        // write still happen on the async onSpan path.
+        classifyBareRoutability: (spans) => {
+          let rejected = 0;
+          for (const span of spans) {
+            if (!bareSpanIsRoutable2(span.service)) rejected++;
+          }
+          if (rejected === 0) return { rejected: 0 };
+          const noun = rejected === 1 ? "span" : "spans";
+          const verb = rejected === 1 ? "was" : "were";
+          return {
+            rejected,
+            message: `${rejected} ${noun} matched no project on this daemon and ${verb} dropped. Export to /projects/<project>/v1/traces, or check the exporter's service.name.`
+          };
+        }
       });
       otlpAddress = await listenSteppingOtlp(otlpApp, otlpPort, host);
       console.log(`neatd: OTLP listening on ${otlpAddress}/v1/traces`);