@neat.is/core 0.9.18-dev.20260917 → 0.9.18-dev.20260918

package/dist/index.d.cts

@@ -564,6 +564,7 @@ interface ProjectSlot {
     stopPersist: () => void;
     stopStaleness: () => void;
     stopConnectors: () => void;
+    stopHostedConnectors: () => void;
     stopK8sSubstrate: () => void;
     detachEvents: () => void;
     status: 'active' | 'broken';

package/dist/index.d.ts

@@ -564,6 +564,7 @@ interface ProjectSlot {
     stopPersist: () => void;
     stopStaleness: () => void;
     stopConnectors: () => void;
+    stopHostedConnectors: () => void;
     stopK8sSubstrate: () => void;
     detachEvents: () => void;
     status: 'active' | 'broken';

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   routeSpanToProject,
   startDaemon
-} from "./chunk-NV4WWJSU.js";
+} from "./chunk-MGQSR6QZ.js";
 import {
   ProjectNameCollisionError,
   addProject,
@@ -37,7 +37,7 @@ import {
   thresholdForEdgeType,
   touchLastSeen,
   writeAtomically
-} from "./chunk-SSLPBQWY.js";
+} from "./chunk-KIV7OB2K.js";
 import {
   startOtelGrpcReceiver
 } from "./chunk-ERE47MCR.js";

package/dist/neatd.cjs

@@ -19063,7 +19063,8 @@ function startConnectorPollLoop(connector, ctx, graph, resolveTarget, options =
     void (async () => {
       const tickStartedAt = (/* @__PURE__ */ new Date()).toISOString();
       try {
-        const result = await runConnectorPoll(connector, { ...ctx, since }, graph, resolveTarget);
+        const credentials = options.refreshCredentials ? await options.refreshCredentials() : ctx.credentials;
+        const result = await runConnectorPoll(connector, { ...ctx, credentials, since }, graph, resolveTarget);
         since = tickStartedAt;
         if (connectorId) {
           recordConnectorPoll(connectorId, {
@@ -23296,6 +23297,122 @@ async function reconcileFrontierSurfaces(graph, errorsPath) {
   stageHangSurfaces(graph, incidents);
 }
 
+// src/connectors/hosted.ts
+init_cjs_shims();
+var CREDENTIAL_REFRESH_SKEW_MS = 6e4;
+var CP_REQUEST_TIMEOUT_MS = 1e4;
+async function cpGet(path80, deps) {
+  const f = deps.fetchImpl ?? fetch;
+  const res = await f(`${deps.cpUrl.replace(/\/+$/, "")}${path80}`, {
+    headers: { authorization: `Bearer ${deps.daemonToken}`, accept: "application/json" },
+    signal: AbortSignal.timeout(CP_REQUEST_TIMEOUT_MS)
+  });
+  if (!res.ok) throw new Error(`control plane ${path80} \u2192 HTTP ${res.status}`);
+  return await res.json();
+}
+function credentialRecord(provider, cred) {
+  switch (provider) {
+    case "supabase":
+      return { managementToken: cred.accessToken };
+    default:
+      return { token: cred.accessToken };
+  }
+}
+function hostedOptions(provider, summary, serviceName) {
+  switch (provider) {
+    case "supabase": {
+      const ref = summary.projectRef;
+      if (!ref) return null;
+      return { apiProjectRef: ref, nodeRef: `${ref}.supabase.co`, serviceName };
+    }
+    default:
+      return null;
+  }
+}
+function createHostedCredentialSource(provider, deps) {
+  let cached = null;
+  return async () => {
+    if (cached && cached.expiresAtMs - CREDENTIAL_REFRESH_SKEW_MS > Date.now()) return cached.record;
+    const cred = await cpGet(
+      `/internal/projects/${deps.projectId}/connections/${provider}/credential`,
+      deps
+    );
+    const record = credentialRecord(provider, cred);
+    const parsed = cred.expiresAt ? Date.parse(cred.expiresAt) : Number.NaN;
+    cached = { record, expiresAtMs: Number.isFinite(parsed) ? parsed : Number.POSITIVE_INFINITY };
+    return record;
+  };
+}
+async function startHostedConnectors(input) {
+  const { deps, graph, projectDir, project, errorsPath, onSkip } = input;
+  const startLoop = input.startLoop ?? startConnectorPollLoop;
+  let connections;
+  try {
+    connections = await cpGet(`/internal/projects/${deps.projectId}/connections`, deps);
+  } catch (err) {
+    onSkip?.("(all)", `control plane connection list unreadable \u2014 ${err.message}`);
+    return () => {
+    };
+  }
+  if (!Array.isArray(connections)) return () => {
+  };
+  const stops = [];
+  for (const c of connections) {
+    const dispatch = PROVIDER_DISPATCH[c.provider];
+    if (!dispatch) {
+      onSkip?.(c.provider, "no pull connector for this provider");
+      continue;
+    }
+    if (c.needsProjectSelection || !c.projectRef) {
+      onSkip?.(c.provider, "no project selected yet \u2014 not pullable");
+      continue;
+    }
+    const options = hostedOptions(c.provider, c, project);
+    if (!options) {
+      onSkip?.(c.provider, "no hosted option mapping for this provider");
+      continue;
+    }
+    let built;
+    try {
+      built = dispatch.build(graph, options);
+    } catch (err) {
+      onSkip?.(c.provider, err.message);
+      continue;
+    }
+    stops.push(
+      startLoop(
+        built.connector,
+        { projectDir, project, credentials: {}, ...errorsPath ? { errorsPath } : {} },
+        graph,
+        built.resolveTarget,
+        {
+          connectorId: `hosted:${c.provider}`,
+          refreshCredentials: createHostedCredentialSource(c.provider, deps)
+        }
+      )
+    );
+  }
+  return () => {
+    for (const stop of stops) stop();
+  };
+}
+async function maybeStartHostedConnectors(input) {
+  const env = input.env ?? process.env;
+  const cpUrl = env.NEAT_CP_URL;
+  const projectId = env.NEAT_CP_PROJECT_ID;
+  const daemonToken = env.NEAT_AUTH_TOKEN;
+  if (!cpUrl || !projectId || !daemonToken) return () => {
+  };
+  return startHostedConnectors({
+    deps: { cpUrl, projectId, daemonToken, ...input.fetchImpl ? { fetchImpl: input.fetchImpl } : {} },
+    graph: input.graph,
+    projectDir: input.projectDir,
+    project: input.project,
+    ...input.errorsPath ? { errorsPath: input.errorsPath } : {},
+    ...input.onSkip ? { onSkip: input.onSkip } : {}
+  });
+}
+
 // src/connectors/kubernetes/index.ts
 init_cjs_shims();
 
@@ -23872,6 +23989,10 @@ function teardownSlot(slot) {
     slot.stopConnectors();
   } catch {
   }
+  try {
+    slot.stopHostedConnectors();
+  } catch {
+  }
   try {
     slot.stopK8sSubstrate();
   } catch {
@@ -23960,6 +24081,8 @@ async function bootstrapProject(entry2, connectors = [], neatHome4) {
       },
       stopConnectors: () => {
       },
+      stopHostedConnectors: () => {
+      },
       stopK8sSubstrate: () => {
       },
       detachEvents: () => {
@@ -23998,6 +24121,13 @@ async function bootstrapProject(entry2, connectors = [], neatHome4) {
         `neatd: connector "${skipped.id}" (${skipped.provider}) skipped for project "${entry2.name}" \u2014 ${reason}`
       )
     });
+    const stopHostedConnectors = await maybeStartHostedConnectors({
+      project: entry2.name,
+      graph,
+      projectDir: entry2.path,
+      errorsPath: paths.errorsPath,
+      onSkip: (provider, reason) => console.warn(`neatd: hosted connector "${provider}" skipped for project "${entry2.name}" \u2014 ${reason}`)
+    });
     const stopK8sSubstrate = await startK8sSubstratePolling({
       project: entry2.name,
       graph,
@@ -24016,6 +24146,7 @@ async function bootstrapProject(entry2, connectors = [], neatHome4) {
       stopPersist,
       stopStaleness,
       stopConnectors,
+      stopHostedConnectors,
       stopK8sSubstrate,
       detachEvents,
       status: "active"