@neat.is/core 0.9.21-dev.20260924 → 0.10.0

package/dist/index.cjs

@@ -8710,7 +8710,7 @@ function collectPhpSymbolDefs(root) {
     });
   };
   const dot = (s) => s.replace(/\\/g, ".").replace(/::/g, ".").replace(/^\.+/, "");
-  const join = (prefix, name) => prefix ? `${prefix}.${name}` : name;
+  const join2 = (prefix, name) => prefix ? `${prefix}.${name}` : name;
   const walkChildren = (container, nsCtx, classCtx) => {
     let ns = nsCtx;
     for (let i = 0; i < container.namedChildCount; i++) {
@@ -8732,7 +8732,7 @@ function collectPhpSymbolDefs(root) {
     switch (node.type) {
       case "function_definition": {
         const name = node.childForFieldName("name")?.text;
-        if (name) push("function", join(nsCtx, name), node);
+        if (name) push("function", join2(nsCtx, name), node);
         walkBody(node, nsCtx, void 0);
         return;
       }
@@ -8740,7 +8740,7 @@ function collectPhpSymbolDefs(root) {
       case "trait_declaration":
       case "interface_declaration": {
         const name = node.childForFieldName("name")?.text;
-        const full = name ? join(nsCtx, name) : classCtx;
+        const full = name ? join2(nsCtx, name) : classCtx;
         if (name) push("class", full, node);
         walkBody(node, nsCtx, full);
         return;
@@ -8749,7 +8749,7 @@ function collectPhpSymbolDefs(root) {
         const name = node.childForFieldName("name")?.text;
         if (name) {
           const kind = name === "__construct" ? "constructor" : "method";
-          push(kind, join(classCtx ?? nsCtx, name), node);
+          push(kind, join2(classCtx ?? nsCtx, name), node);
         }
         return;
       }
@@ -8775,7 +8775,7 @@ function collectCsharpSymbolDefs(root) {
       endLine: node.endPosition.row + 1
     });
   };
-  const join = (prefix, name) => prefix ? `${prefix}.${name}` : name;
+  const join2 = (prefix, name) => prefix ? `${prefix}.${name}` : name;
   const walkChildren = (container, nsCtx, classCtx) => {
     let ns = nsCtx;
     for (let i = 0; i < container.namedChildCount; i++) {
@@ -8783,7 +8783,7 @@ function collectCsharpSymbolDefs(root) {
       if (!child) continue;
       if (child.type === "file_scoped_namespace_declaration") {
         const nameNode = child.childForFieldName("name");
-        if (nameNode) ns = join(nsCtx, nameNode.text);
+        if (nameNode) ns = join2(nsCtx, nameNode.text);
         continue;
       }
       visit(child, ns, classCtx);
@@ -8797,7 +8797,7 @@ function collectCsharpSymbolDefs(root) {
     switch (node.type) {
       case "namespace_declaration": {
         const nameNode = node.childForFieldName("name");
-        const ns = nameNode ? join(nsCtx, nameNode.text) : nsCtx;
+        const ns = nameNode ? join2(nsCtx, nameNode.text) : nsCtx;
         walkBody(node, ns, classCtx);
         return;
       }
@@ -8806,19 +8806,19 @@ function collectCsharpSymbolDefs(root) {
       case "struct_declaration":
       case "record_declaration": {
         const name = node.childForFieldName("name")?.text;
-        const full = name ? join(classCtx ?? nsCtx, name) : classCtx;
+        const full = name ? join2(classCtx ?? nsCtx, name) : classCtx;
         if (name) push("class", full, node);
         walkBody(node, nsCtx, full);
         return;
       }
       case "method_declaration": {
         const name = node.childForFieldName("name")?.text;
-        if (name) push("method", join(classCtx ?? nsCtx, name), node);
+        if (name) push("method", join2(classCtx ?? nsCtx, name), node);
         return;
       }
       case "constructor_declaration": {
         const name = node.childForFieldName("name")?.text;
-        if (name) push("constructor", join(classCtx ?? nsCtx, name), node);
+        if (name) push("constructor", join2(classCtx ?? nsCtx, name), node);
         return;
       }
     }
@@ -8837,7 +8837,7 @@ function collectJavaSymbolDefs(root) {
       endLine: node.endPosition.row + 1
     });
   };
-  const join = (prefix, name) => prefix ? `${prefix}.${name}` : name;
+  const join2 = (prefix, name) => prefix ? `${prefix}.${name}` : name;
   let pkg;
   for (let i = 0; i < root.namedChildCount; i++) {
     const child = root.namedChild(i);
@@ -8863,19 +8863,19 @@ function collectJavaSymbolDefs(root) {
       case "enum_declaration":
       case "record_declaration": {
         const name = node.childForFieldName("name")?.text;
-        const full = name ? join(classCtx ?? pkg, name) : classCtx;
+        const full = name ? join2(classCtx ?? pkg, name) : classCtx;
         if (name) push("class", full, node);
         walkBody(node, full);
         return;
       }
       case "method_declaration": {
         const name = node.childForFieldName("name")?.text;
-        if (name) push("method", join(classCtx ?? pkg, name), node);
+        if (name) push("method", join2(classCtx ?? pkg, name), node);
         return;
       }
       case "constructor_declaration": {
         const name = node.childForFieldName("name")?.text;
-        if (name) push("constructor", join(classCtx ?? pkg, name), node);
+        if (name) push("constructor", join2(classCtx ?? pkg, name), node);
         return;
       }
     }
@@ -8894,7 +8894,7 @@ function collectKotlinSymbolDefs(root) {
       endLine: node.endPosition.row + 1
     });
   };
-  const join = (prefix, name) => prefix ? `${prefix}.${name}` : name;
+  const join2 = (prefix, name) => prefix ? `${prefix}.${name}` : name;
   const firstChildOfType2 = (node, types) => {
     for (let i = 0; i < node.namedChildCount; i++) {
       const child = node.namedChild(i);
@@ -8923,7 +8923,7 @@ function collectKotlinSymbolDefs(root) {
       case "class_declaration":
       case "object_declaration": {
         const name = nameOf(node, "type_identifier");
-        const full = name ? join(classCtx ?? pkg, name) : classCtx;
+        const full = name ? join2(classCtx ?? pkg, name) : classCtx;
         if (name) push("class", full, node);
         const body = bodyOf(node);
         if (body) walkChildren(body, full);
@@ -8931,20 +8931,20 @@ function collectKotlinSymbolDefs(root) {
       }
       case "companion_object": {
         const name = nameOf(node, "type_identifier");
-        const full = name ? join(classCtx ?? pkg, name) : classCtx ?? pkg;
+        const full = name ? join2(classCtx ?? pkg, name) : classCtx ?? pkg;
         const body = bodyOf(node);
         if (body) walkChildren(body, full);
         return;
       }
       case "function_declaration": {
         const name = nameOf(node, "simple_identifier");
-        if (name) push(classCtx ? "method" : "function", join(classCtx ?? pkg, name), node);
+        if (name) push(classCtx ? "method" : "function", join2(classCtx ?? pkg, name), node);
         return;
       }
       case "secondary_constructor": {
         if (classCtx) {
           const typeName = classCtx.slice(classCtx.lastIndexOf(".") + 1);
-          push("constructor", join(classCtx, typeName), node);
+          push("constructor", join2(classCtx, typeName), node);
         }
         return;
       }
@@ -8964,14 +8964,14 @@ function collectRustSymbolDefs(root) {
       endLine: node.endPosition.row + 1
     });
   };
-  const join = (prefix, name) => prefix ? `${prefix}::${name}` : name;
+  const join2 = (prefix, name) => prefix ? `${prefix}::${name}` : name;
   const walkTypeBody = (body, typeCtx) => {
     for (let i = 0; i < body.namedChildCount; i++) {
       const child = body.namedChild(i);
       if (!child) continue;
       if (child.type === "function_item" || child.type === "function_signature_item") {
         const name = child.childForFieldName("name")?.text;
-        if (name) push("method", join(typeCtx, name), child);
+        if (name) push("method", join2(typeCtx, name), child);
       }
     }
   };
@@ -8985,7 +8985,7 @@ function collectRustSymbolDefs(root) {
     switch (node.type) {
       case "mod_item": {
         const name = node.childForFieldName("name")?.text;
-        const full = name ? join(modCtx, name) : modCtx;
+        const full = name ? join2(modCtx, name) : modCtx;
         const body = node.childForFieldName("body");
         if (body) walkChildren(body, full);
         return;
@@ -8993,12 +8993,12 @@ function collectRustSymbolDefs(root) {
       case "struct_item":
       case "enum_item": {
         const name = node.childForFieldName("name")?.text;
-        if (name) push("class", join(modCtx, name), node);
+        if (name) push("class", join2(modCtx, name), node);
         return;
       }
       case "trait_item": {
         const name = node.childForFieldName("name")?.text;
-        const full = name ? join(modCtx, name) : modCtx;
+        const full = name ? join2(modCtx, name) : modCtx;
         if (name) push("class", full, node);
         const body = node.childForFieldName("body");
         if (body && full) walkTypeBody(body, full);
@@ -9006,14 +9006,14 @@ function collectRustSymbolDefs(root) {
       }
       case "impl_item": {
         const typeName = node.childForFieldName("type")?.text;
-        const full = typeName ? join(modCtx, typeName) : modCtx;
+        const full = typeName ? join2(modCtx, typeName) : modCtx;
         const body = node.childForFieldName("body");
         if (body && full) walkTypeBody(body, full);
         return;
       }
       case "function_item": {
         const name = node.childForFieldName("name")?.text;
-        if (name) push("function", join(modCtx, name), node);
+        if (name) push("function", join2(modCtx, name), node);
         return;
       }
     }
@@ -9032,7 +9032,7 @@ function collectCppSymbolDefs(root) {
       endLine: node.endPosition.row + 1
     });
   };
-  const join = (prefix, name) => prefix ? `${prefix}::${name}` : name;
+  const join2 = (prefix, name) => prefix ? `${prefix}::${name}` : name;
   const DECLARATOR_WRAPPERS = /* @__PURE__ */ new Set([
     "function_declarator",
     "pointer_declarator",
@@ -9058,7 +9058,7 @@ function collectCppSymbolDefs(root) {
     return void 0;
   };
   const classify = (nameText, prefix, enclosingClass) => {
-    const qualname = join(prefix, nameText);
+    const qualname = join2(prefix, nameText);
     let className;
     let memberName;
     const idx = nameText.lastIndexOf("::");
@@ -9087,7 +9087,7 @@ function collectCppSymbolDefs(root) {
     switch (node.type) {
       case "namespace_definition": {
         const name = node.childForFieldName("name")?.text;
-        const newPrefix = name ? join(prefix, name) : prefix;
+        const newPrefix = name ? join2(prefix, name) : prefix;
         const body = node.childForFieldName("body");
         if (body) walkChildren(body, newPrefix, void 0);
         return;
@@ -9095,7 +9095,7 @@ function collectCppSymbolDefs(root) {
       case "class_specifier":
       case "struct_specifier": {
         const name = node.childForFieldName("name")?.text;
-        const full = name ? join(prefix, name) : prefix;
+        const full = name ? join2(prefix, name) : prefix;
         if (name) push("class", full, node);
         const body = node.childForFieldName("body");
         if (body && name) walkChildren(body, full, name);
@@ -16471,7 +16471,7 @@ function startPersistLoop(graph, outPath, opts = {}) {
 init_cjs_shims();
 var import_fastify2 = __toESM(require("fastify"), 1);
 var import_cors = __toESM(require("@fastify/cors"), 1);
-var import_types100 = require("@neat.is/types");
+var import_types101 = require("@neat.is/types");
 
 // src/extend/index.ts
 init_cjs_shims();
@@ -17701,7 +17701,7 @@ var INTENT_RULES = [
   },
   {
     intent: "blast-radius",
-    test: /\b(blast|break[\s-]?if|breaks[\s-]?if|impact|downstream|dependents?|redeploy|who\s+(?:uses|calls|depends)|what\s+depends\s+on|affect(?:s|ed)?)\b/
+    test: /\b(blast|break[\s-]?if|breaks[\s-]?if|impact|downstream|dependents?|redeploy|who\s+(?:uses|calls|depends(?:\s+on)?)|what\s+depends\s+on|consumers?\s+of|callers?\s+of|affect(?:s|ed)?)\b/
   },
   {
     intent: "divergence",
@@ -17713,11 +17713,11 @@ var INTENT_RULES = [
   },
   {
     intent: "observed",
-    test: /\b(at\s+runtime|in\s+prod(?:uction)?|actually\s+call\w*|really\s+call\w*|observed|runtime\s+traffic)\b/
+    test: /\b(at\s+runtime|in\s+prod(?:uction)?|actually|really\s+call\w*|observed|runtime\s+traffic|slow|latency|p95|timing)\b/
   },
   {
     intent: "dependencies",
-    test: /\b(depend\w*|calls?|uses?|imports?|relies\s+on|needs?)\b/
+    test: /\b(depend\w*|calls?|uses?|imports?|relies\s+on|needs?|talks?\s+to|connects?\s+to|hits?|reads?\s+from|writes?\s+to)\b/
   }
 ];
 function classifyIntent(question) {
@@ -17884,7 +17884,25 @@ var INTENT_WORDS = /* @__PURE__ */ new Set([
   "rely",
   "needs",
   "need",
-  "sync"
+  "sync",
+  "talk",
+  "talks",
+  "connect",
+  "connects",
+  "hit",
+  "hits",
+  "read",
+  "reads",
+  "write",
+  "writes",
+  "consumer",
+  "consumers",
+  "caller",
+  "callers",
+  "slow",
+  "latency",
+  "p95",
+  "timing"
 ]);
 function tokens(input) {
   const spaced = input.replace(/([a-z0-9])([A-Z])/g, "$1 $2");
@@ -17908,6 +17926,13 @@ function idBody(id) {
   const colon = id.indexOf(":");
   return colon >= 0 ? id.slice(colon + 1) : id;
 }
+var TYPE_NOUNS = [
+  { nouns: ["database", "db", "table"], type: import_types62.NodeType.DatabaseNode },
+  { nouns: ["service", "api", "backend"], type: import_types62.NodeType.ServiceNode },
+  { nouns: ["route", "endpoint"], type: import_types62.NodeType.RouteNode },
+  { nouns: ["file"], type: import_types62.NodeType.FileNode },
+  { nouns: ["config"], type: import_types62.NodeType.ConfigNode }
+];
 var EMBED_MIN_SCORE = 0.35;
 async function resolveEntities(graph, question, searchIndex, maxNodes) {
   const qTokens = queryTokens(question);
@@ -17915,6 +17940,7 @@ async function resolveEntities(graph, question, searchIndex, maxNodes) {
   const best = /* @__PURE__ */ new Map();
   const consider = (cand) => {
     const cur = best.get(cand.nodeId);
+    if (cur?.via === "id" && cand.via === "embedding") return;
     if (!cur || cand.score > cur.score) best.set(cand.nodeId, cand);
   };
   graph.forEachNode((id, attrs) => {
@@ -17924,12 +17950,12 @@ async function resolveEntities(graph, question, searchIndex, maxNodes) {
     const body = idBody(id);
     const labelTokens = /* @__PURE__ */ new Set([...tokens(body), ...tokens(name)]);
     if (labelTokens.size === 0) return;
-    let matched = 0;
-    for (const t of qTokens) if (labelTokens.has(t)) matched += 1;
+    let matched2 = 0;
+    for (const t of qTokens) if (labelTokens.has(t)) matched2 += 1;
     const named2 = body.length >= 2 && normalized.includes(body.toLowerCase()) || name.length >= 2 && normalized.includes(name.toLowerCase());
-    if (matched === 0 && !named2) return;
-    const coverage = qTokens.length > 0 ? matched / qTokens.length : 0;
-    const via = named2 ? "id" : matched > 0 && tokens(name).some((t) => qTokens.includes(t)) ? "label" : "token";
+    if (matched2 === 0 && !named2) return;
+    const coverage = qTokens.length > 0 ? matched2 / qTokens.length : 0;
+    const via = named2 ? "id" : matched2 > 0 && tokens(name).some((t) => qTokens.includes(t)) ? "label" : "token";
     const score = named2 ? Math.max(0.9, coverage) : Math.min(0.85, 0.3 + 0.7 * coverage);
     consider({ nodeId: id, label: name, via, score: Math.min(1, score) });
   });
@@ -17939,6 +17965,7 @@ async function resolveEntities(graph, question, searchIndex, maxNodes) {
       if (res.provider !== "substring") {
         for (const m of res.matches) {
           if (m.node.type === import_types62.NodeType.FrontierNode) continue;
+          if (!graph.hasNode(m.node.id)) continue;
           const already = best.get(m.node.id);
           if (!already && m.score < EMBED_MIN_SCORE) continue;
           consider({
@@ -17952,10 +17979,31 @@ async function resolveEntities(graph, question, searchIndex, maxNodes) {
     } catch {
     }
   }
-  const viaRank = { id: 3, label: 2, token: 1, embedding: 0 };
-  return [...best.values()].sort(
-    (a, b) => b.score - a.score || viaRank[b.via] - viaRank[a.via] || a.nodeId.localeCompare(b.nodeId)
+  if (best.size === 0) {
+    const words = new Set(tokens(question));
+    const kind = TYPE_NOUNS.find((entry) => entry.nouns.some((noun) => words.has(noun)));
+    if (kind) {
+      const ids = graph.filterNodes((_id, attrs) => attrs.type === kind.type).sort();
+      if (ids.length > 1) {
+        return { matched: [], ambiguousType: { noun: kind.nouns.find((noun) => words.has(noun)), ids } };
+      }
+      if (ids.length === 1) {
+        const id = ids[0];
+        return { matched: [{ nodeId: id, label: nodeName(graph.getNodeAttributes(id)), via: "type", score: 0.6 }].slice(0, maxNodes) };
+      }
+      return { matched: [] };
+    }
+  }
+  const viaRank = { id: 4, label: 3, token: 2, type: 1, embedding: 0 };
+  const ranked = [...best.values()].sort(
+    (a, b) => Number(b.via === "id") - Number(a.via === "id") || b.score - a.score || viaRank[b.via] - viaRank[a.via] || a.nodeId.localeCompare(b.nodeId)
+  );
+  const primary = ranked[0];
+  const primaryType = primary && graph.getNodeAttributes(primary.nodeId).type;
+  const matched = ranked.filter(
+    (candidate) => !primary || primary.via !== "id" || primary.score < 0.85 || candidate === primary || graph.getNodeAttributes(candidate.nodeId).type === primaryType || candidate.via !== "embedding" && candidate.score >= primary.score - 0.2
   ).slice(0, maxNodes).map((s) => ({ nodeId: s.nodeId, label: s.label, via: s.via, score: Number(s.score.toFixed(3)) }));
+  return { matched };
 }
 function incidentsForNode(nodeId, incidents) {
   if (!incidents || incidents.length === 0) return [];
@@ -18047,6 +18095,23 @@ function buildBlastSection(graph, node) {
     facts
   };
 }
+function buildDatabaseCallersSection(graph, node) {
+  const callers = getBlastRadius(graph, node).affectedNodes.filter((item) => {
+    if (graph.getNodeAttributes(item.nodeId).type !== import_types62.NodeType.ServiceNode) return false;
+    return item.path.slice(1, -1).every((id) => {
+      const type = graph.getNodeAttributes(id).type;
+      return type === import_types62.NodeType.FileNode || type === import_types62.NodeType.SymbolNode;
+    });
+  });
+  return {
+    heading: `Services calling ${node} \u2014 ${callers.length}`,
+    facts: callers.length > 0 ? callers.slice(0, MAX_FACTS_PER_SECTION).map((item) => ({
+      text: `${item.nodeId} (distance ${item.distance})`,
+      provenance: item.edgeProvenance,
+      confidence: item.confidence
+    })) : [{ text: `No inbound service callers found for ${node}.` }]
+  };
+}
 function buildIncidentsSection(node, incidents) {
   const relevant = incidentsForNode(node, incidents);
   if (relevant.length === 0) return null;
@@ -18073,6 +18138,29 @@ function divergenceLine(d) {
   }
   return `[${d.type}] ${d.source} \u2192 ${d.target} \u2014 ${d.reason}`;
 }
+function runtimeEdgeState(graph) {
+  let observed = false;
+  let stale = false;
+  graph.forEachEdge((_id, attrs) => {
+    if (attrs.provenance === import_types62.Provenance.OBSERVED) observed = true;
+    if (attrs.provenance === import_types62.Provenance.STALE) stale = true;
+  });
+  return { observed, stale };
+}
+function pendingRuntimeMessage(graph, divergences) {
+  const count = divergences.filter((d) => d.type === "missing-observed").length;
+  if (count === 0) return void 0;
+  const { observed, stale } = runtimeEdgeState(graph);
+  if (observed) return void 0;
+  const prefix = stale ? "No current runtime observations \u2014 earlier runtime evidence is stale" : "No runtime observed yet";
+  return `${prefix} \u2014 ${count} declared dependenc${count === 1 ? "y is" : "ies are"} waiting to be confirmed. Send traces (or connect a provider) and ask again.`;
+}
+function noDivergenceMessage(graph) {
+  if (graph.order === 0) return "Graph is empty \u2014 no declared or observed dependencies to compare.";
+  const { observed, stale } = runtimeEdgeState(graph);
+  if (!observed) return stale ? "No current runtime dependency observations to compare \u2014 earlier runtime evidence is stale." : "No runtime dependency observations to compare with declared code.";
+  return "None \u2014 declared code and observed runtime agree across the graph.";
+}
 function buildDivergenceSection(graph, node, incidents) {
   const result = computeDivergences(graph, { node, ...incidents ? { incidents } : {} });
   if (result.totalAffected === 0) return null;
@@ -18089,19 +18177,28 @@ function buildDivergenceSection(graph, node, incidents) {
 }
 function buildGlobalDivergenceSection(graph, incidents) {
   const result = computeDivergences(graph, incidents ? { incidents } : {});
+  const pending = pendingRuntimeMessage(graph, result.divergences);
+  const visible = pending ? result.divergences.filter((d) => d.type !== "missing-observed") : result.divergences;
+  if (visible.length === 0 && pending) {
+    return {
+      heading: "Divergences (EXTRACTED vs OBSERVED)",
+      facts: [{ text: pending }]
+    };
+  }
   if (result.totalAffected === 0) {
     return {
       heading: "Divergences (EXTRACTED vs OBSERVED)",
-      facts: [{ text: "None \u2014 declared code and observed runtime agree across the graph." }]
+      facts: [{ text: noDivergenceMessage(graph) }]
     };
   }
-  const facts = result.divergences.slice(0, MAX_FACTS_PER_SECTION).map((d) => ({
+  const facts = visible.slice(0, MAX_FACTS_PER_SECTION).map((d) => ({
     text: divergenceLine(d),
     confidence: d.confidence
     // Composite by construction (EXTRACTED vs OBSERVED), so no single provenance.
   }));
+  if (pending && facts.length < MAX_FACTS_PER_SECTION) facts.push({ text: pending });
   return {
-    heading: `Divergences (EXTRACTED vs OBSERVED) \u2014 ${result.totalAffected}`,
+    heading: `Divergences (EXTRACTED vs OBSERVED) \u2014 ${visible.length}`,
     facts
   };
 }
@@ -18187,13 +18284,12 @@ function buildOverviewSections(graph, incidents) {
     });
   }
   const div = computeDivergences(graph, incidents ? { incidents } : {});
+  const pending = pendingRuntimeMessage(graph, div.divergences);
+  const visibleCount = pending ? div.divergences.filter((d) => d.type !== "missing-observed").length : div.totalAffected;
+  const divergenceText = visibleCount > 0 ? `${visibleCount} divergence${visibleCount === 1 ? "" : "s"} between declared code and observed runtime \u2014 ask "are there any divergences?" for the list.${pending ? ` ${pending}` : ""}` : pending ?? noDivergenceMessage(graph);
   sections.push({
     heading: "Divergences",
-    facts: [
-      {
-        text: div.totalAffected === 0 ? "None \u2014 declared code and observed runtime agree across the graph." : `${div.totalAffected} divergence${div.totalAffected === 1 ? "" : "s"} between declared code and observed runtime \u2014 ask "are there any divergences?" for the list.`
-      }
-    ]
+    facts: [{ text: divergenceText }]
   });
   return sections;
 }
@@ -18238,6 +18334,8 @@ function summarizeGlobal(intent, sections) {
   const lead = sections[0];
   switch (intent) {
     case "divergence": {
+      const pending = lead?.facts[0]?.text;
+      if (pending?.startsWith("No runtime") || pending?.startsWith("No current runtime") || pending?.startsWith("Graph is empty")) return pending;
       const none = lead?.facts[0]?.text.startsWith("None") ?? true;
       return none ? "No divergences across the graph \u2014 declared code and observed runtime agree." : `${lead.heading} across the graph, highest-confidence first below.`;
     }
@@ -18250,11 +18348,16 @@ function summarizeGlobal(intent, sections) {
       return `System overview across the whole graph: ${sections.length} view${sections.length === 1 ? "" : "s"} below \u2014 shape (nodes/edges by provenance), busiest services, incidents, and divergences.`;
   }
 }
-function summarize(question, intent, matched, primary, sections, scope) {
+function summarize(question, intent, matched, primary, sections, scope, ambiguousType) {
   if (scope === "global") {
     return summarizeGlobal(intent, sections);
   }
   if (!primary) {
+    if (ambiguousType) {
+      const shown = ambiguousType.ids.slice(0, 10);
+      const more = ambiguousType.ids.length - shown.length;
+      return `"${ambiguousType.noun}" matches ${ambiguousType.ids.length} nodes. Name one by ID: ${shown.join(", ")}${more > 0 ? `, and ${more} more` : ""}.`;
+    }
     return `Nothing in "${question}" resolved to a node in the graph. Name a service, file, route, or table \u2014 e.g. \`ask "what does <service> depend on?"\`. For a graph-wide look, ask for an overview, divergences, or incidents.`;
   }
   const lead = sections[0];
@@ -18277,10 +18380,13 @@ function summarize(question, intent, matched, primary, sections, scope) {
       core = lead ? `${lead.heading} of ${primary}.` : `${primary} has no dependents \u2014 nothing else would break if it failed.`;
       break;
     case "dependencies":
-      core = lead ? `${primary}: ${lead.heading.toLowerCase()} listed below.` : `${primary} has no declared dependencies in the graph.`;
+      core = lead?.heading.startsWith("Services calling") ? `${lead.heading}.` : lead ? `${primary}: ${lead.heading.toLowerCase()} listed below.` : `${primary} has no declared dependencies in the graph.`;
       break;
     case "observed":
-      core = lead ? `${primary} at runtime: ${lead.facts.length} OBSERVED fact${lead.facts.length === 1 ? "" : "s"}.` : `No runtime traffic OBSERVED for ${primary}.`;
+      {
+        const observed = sections.find((s) => s.heading === "Runtime dependencies (OBSERVED)");
+        core = observed ? `${primary} at runtime: ${observed.facts.length} OBSERVED fact${observed.facts.length === 1 ? "" : "s"}.` : `No runtime traffic OBSERVED for ${primary}.`;
+      }
       break;
     case "incidents":
       core = lead ? `${primary}: ${lead.heading.toLowerCase()}.` : `No incidents recorded against ${primary}.`;
@@ -18297,24 +18403,28 @@ async function askGraph(graph, question, opts = {}) {
   const now = opts.now ?? Date.now();
   const maxNodes = opts.maxNodes ?? DEFAULT_MAX_NODES;
   const intent = classifyIntent(question);
-  const matched = await resolveEntities(graph, question, opts.searchIndex, maxNodes);
+  const resolution = await resolveEntities(graph, question, opts.searchIndex, maxNodes);
+  const matched = resolution.matched;
   const primary = matched[0]?.nodeId;
   const sections = [];
   let scope;
   if (primary) {
     scope = "node";
+    const callersQuestion = intent === "dependencies" && graph.getNodeAttributes(primary).type === import_types62.NodeType.DatabaseNode && /\b(?:which|what)\s+services?\s+(?:talks?\s+to|connects?\s+to|uses?|hits?|calls?|reads?\s+from|writes?\s+to)\b/i.test(question);
+    if (callersQuestion) sections.push(buildDatabaseCallersSection(graph, primary));
     for (const kind of SECTION_ORDER[intent]) {
+      if (callersQuestion && kind === "blast") continue;
       const s = buildSection(kind, graph, primary, opts.incidents, now);
       if (s && s.facts.length > 0) sections.push(s);
     }
   } else {
-    const global = buildGlobalSections(intent, graph, opts.incidents);
+    const global = resolution.ambiguousType ? null : buildGlobalSections(intent, graph, opts.incidents);
     if (global) {
       scope = "global";
       for (const s of global) if (s.facts.length > 0) sections.push(s);
     }
   }
-  const answer = summarize(question, intent, matched, primary, sections, scope);
+  const answer = summarize(question, intent, matched, primary, sections, scope, resolution.ambiguousType);
   const provSet = /* @__PURE__ */ new Set();
   for (const s of sections) for (const f of s.facts) if (f.provenance) provSet.add(f.provenance);
   const confidence = sections[0]?.facts[0]?.confidence;
@@ -20252,9 +20362,9 @@ var RESOURCE_TYPES = [
 function isFirebaseResourceType(value) {
   return RESOURCE_TYPES.includes(value);
 }
-function buildEntriesFilter(sinceIso) {
+function buildEntriesFilter(sinceIso, resourceTypes = RESOURCE_TYPES) {
   return [
-    'resource.type = ("cloud_function" OR "cloud_run_revision" OR "firebase_domain")',
+    `resource.type = (${resourceTypes.map((t) => `"${t}"`).join(" OR ")})`,
     "httpRequest:*",
     `timestamp >= "${sinceIso}"`
   ].join(" AND ");
@@ -20263,8 +20373,8 @@ var DEFAULT_LOOKBACK_MS = 24 * 60 * 60 * 1e3;
 var ENTRIES_LIST_URL = "https://logging.googleapis.com/v2/entries:list";
 var PAGE_SIZE = 1e3;
 var MAX_PAGES = 20;
-async function fetchHttpRequestLogEntries(creds, sinceIso) {
-  const filter = buildEntriesFilter(sinceIso);
+async function fetchHttpRequestLogEntries(creds, sinceIso, resourceTypes) {
+  const filter = buildEntriesFilter(sinceIso, resourceTypes);
   const out = [];
   let pageToken;
   for (let page = 0; page < MAX_PAGES; page++) {
@@ -20379,7 +20489,38 @@ function mapLogEntriesToSignals(entries) {
 
 // src/connectors/firebase/resolve.ts
 init_cjs_shims();
+var import_types72 = require("@neat.is/types");
+
+// src/connectors/infer-service.ts
+init_cjs_shims();
 var import_types71 = require("@neat.is/types");
+function normalizeName(name) {
+  return name.toLowerCase().replace(/[^a-z0-9]/g, "");
+}
+function inferServiceName(graph, resourceName, method, path79) {
+  const wantedMethod = method.toUpperCase();
+  const wantedPath = normalizePathTemplate(path79);
+  const services = [];
+  const owners = /* @__PURE__ */ new Set();
+  graph.forEachNode((_id, attrs) => {
+    const node = attrs;
+    if (node.type === import_types71.NodeType.ServiceNode && typeof node.name === "string") {
+      services.push(node.name);
+      return;
+    }
+    if (node.type !== import_types71.NodeType.RouteNode) return;
+    const route = attrs;
+    if (!route.pathTemplate || normalizePathTemplate(route.pathTemplate) !== wantedPath) return;
+    const routeMethod = route.method.toUpperCase();
+    if (routeMethod === "ALL" || routeMethod === wantedMethod) owners.add(route.service);
+  });
+  const wanted = normalizeName(resourceName);
+  const byName = services.find((s) => normalizeName(s) === wanted);
+  if (byName) return byName;
+  return owners.size === 1 ? [...owners][0] : null;
+}
+
+// src/connectors/firebase/resolve.ts
 function neatServiceNameFor(resourceType, resourceName, serviceMap) {
   switch (resourceType) {
     case "cloud_function":
@@ -20394,7 +20535,7 @@ function routeEntriesFor(graph, serviceName) {
   const entries = [];
   graph.forEachNode((_id, attrs) => {
     const node = attrs;
-    if (node.type !== import_types71.NodeType.RouteNode) return;
+    if (node.type !== import_types72.NodeType.RouteNode) return;
     const route = attrs;
     if (route.service !== serviceName) return;
     entries.push({
@@ -20418,32 +20559,38 @@ function createFirebaseResolveTarget(graph, serviceMap) {
     }
     const identity = parseFirebaseTargetName(signal.targetName);
     if (!identity) return null;
-    const serviceName = neatServiceNameFor(resourceType, identity.resourceName, serviceMap);
-    if (!serviceName) return null;
     const normalizedPath = normalizePathTemplate(identity.path);
+    const serviceName = neatServiceNameFor(resourceType, identity.resourceName, serviceMap) ?? (serviceMap.inferServices ? inferServiceName(graph, identity.resourceName, identity.method, identity.path) : null);
+    if (!serviceName) return null;
     const match = findRoute2(routeEntriesFor(graph, serviceName), identity.method, normalizedPath);
     if (!match) return null;
     return {
       targetNodeId: match.routeNodeId,
       serviceName,
-      edgeType: import_types71.EdgeType.CALLS
+      edgeType: import_types72.EdgeType.CALLS
     };
   };
 }
 
 // src/connectors/firebase/index.ts
 var FirebaseConnector = class {
+  constructor(opts = {}) {
+    this.opts = opts;
+  }
+  opts;
   provider = "firebase";
   async poll(ctx) {
     const creds = readFirebaseCredentials(ctx.credentials);
     const sinceIso = ctx.since ?? new Date(Date.now() - DEFAULT_LOOKBACK_MS).toISOString();
-    const entries = await fetchHttpRequestLogEntries(creds, sinceIso);
+    const entries = await fetchHttpRequestLogEntries(creds, sinceIso, this.opts.resourceTypes);
     return mapLogEntriesToSignals(entries);
   }
 };
 function createFirebaseConnector(graph, serviceMap) {
   return {
-    connector: new FirebaseConnector(),
+    connector: new FirebaseConnector(
+      serviceMap.excludeCloudRun ? { resourceTypes: ["cloud_function", "firebase_domain"] } : {}
+    ),
     resolveTarget: createFirebaseResolveTarget(graph, serviceMap)
   };
 }
@@ -20453,7 +20600,7 @@ init_cjs_shims();
 
 // src/connectors/cloudflare/connector.ts
 init_cjs_shims();
-var import_types73 = require("@neat.is/types");
+var import_types74 = require("@neat.is/types");
 
 // src/connectors/cloudflare/client.ts
 init_cjs_shims();
@@ -20617,7 +20764,7 @@ function findTaggedWorkerFileNode(graph, workerName) {
   graph.forEachNode((id, attrs) => {
     if (found) return;
     const a = attrs;
-    if (a.type === import_types73.NodeType.FileNode && a.platform === "cloudflare" && a.platformName === workerName) {
+    if (a.type === import_types74.NodeType.FileNode && a.platform === "cloudflare" && a.platformName === workerName) {
       found = id;
     }
   });
@@ -20629,7 +20776,7 @@ function findMatchingRouteNode(graph, serviceName, method, path79) {
   graph.forEachNode((id, attrs) => {
     if (found) return;
     const a = attrs;
-    if (a.type !== import_types73.NodeType.RouteNode || a.service !== serviceName) return;
+    if (a.type !== import_types74.NodeType.RouteNode || a.service !== serviceName) return;
     if (!a.pathTemplate || normalizePathTemplate(a.pathTemplate) !== normalizedPath) return;
     const routeMethod = (a.method ?? "").toUpperCase();
     if (routeMethod !== "ALL" && routeMethod !== method) return;
@@ -20648,11 +20795,11 @@ function createCloudflareResolveTarget(config, graph) {
     };
     const mapping = config.workers?.[scriptName];
     if (mapping) {
-      const wholeFileId = (0, import_types73.fileId)(mapping.service, mapping.entryFile);
+      const wholeFileId = (0, import_types74.fileId)(mapping.service, mapping.entryFile);
       return {
         targetNodeId: resolveRouteGrain(mapping.service, wholeFileId),
         serviceName: mapping.service,
-        edgeType: import_types73.EdgeType.CALLS
+        edgeType: import_types74.EdgeType.CALLS
       };
     }
     const taggedFileId = findTaggedWorkerFileNode(graph, scriptName);
@@ -20661,13 +20808,13 @@ function createCloudflareResolveTarget(config, graph) {
       return {
         targetNodeId: resolveRouteGrain(fileNode.service, taggedFileId),
         serviceName: fileNode.service,
-        edgeType: import_types73.EdgeType.CALLS
+        edgeType: import_types74.EdgeType.CALLS
       };
     }
     return {
-      targetNodeId: (0, import_types73.infraId)("cloudflare-worker", scriptName),
+      targetNodeId: (0, import_types74.infraId)("cloudflare-worker", scriptName),
       serviceName: scriptName,
-      edgeType: import_types73.EdgeType.CALLS,
+      edgeType: import_types74.EdgeType.CALLS,
       ensureInfraNode: { kind: "cloudflare-worker", name: scriptName, provider: "cloudflare" }
     };
   };
@@ -20863,14 +21010,14 @@ function diffNeonStatementsToSignals(rows, previous, observedAtIso) {
 
 // src/connectors/neon/resolve.ts
 init_cjs_shims();
-var import_types77 = require("@neat.is/types");
+var import_types78 = require("@neat.is/types");
 function createNeonResolveTarget(config) {
   return (signal) => {
     if (signal.targetKind !== NEON_SQL_TABLE_TARGET_KIND || !signal.targetName) return null;
     return {
-      targetNodeId: (0, import_types77.infraId)("sql-table", signal.targetName),
+      targetNodeId: (0, import_types78.infraId)("sql-table", signal.targetName),
       serviceName: config.serviceName,
-      edgeType: import_types77.EdgeType.CALLS,
+      edgeType: import_types78.EdgeType.CALLS,
       ensureInfraNode: { kind: "sql-table", name: signal.targetName, provider: "neon" }
     };
   };
@@ -21051,14 +21198,14 @@ function mapLogEntriesToSignals2(entries) {
 
 // src/connectors/cloud-run/resolve.ts
 init_cjs_shims();
-var import_types81 = require("@neat.is/types");
+var import_types82 = require("@neat.is/types");
 var CLOUD_RUN_SERVICE_INFRA_KIND = "cloud-run-service";
 function findMatchingRouteNode2(graph, serviceName, method, normalizedPath) {
   let found = null;
   graph.forEachNode((_id, attrs) => {
     if (found) return;
     const node = attrs;
-    if (node.type !== import_types81.NodeType.RouteNode) return;
+    if (node.type !== import_types82.NodeType.RouteNode) return;
     const route = attrs;
     if (route.service !== serviceName || !route.pathTemplate) return;
     if (normalizePathTemplate(route.pathTemplate) !== normalizedPath) return;
@@ -21074,7 +21221,7 @@ function createCloudRunResolveTarget(graph, config) {
     const identity = parseCloudRunTargetName(signal.targetName);
     if (!identity) return null;
     const { serviceName: gcpServiceName, method, path: path79 } = identity;
-    const mappedService = config.serviceMap?.[gcpServiceName];
+    const mappedService = config.serviceMap?.[gcpServiceName] ?? (config.inferServices ? inferServiceName(graph, gcpServiceName, method, path79) ?? void 0 : void 0);
     if (mappedService) {
       const routeNodeId = findMatchingRouteNode2(
         graph,
@@ -21083,13 +21230,13 @@ function createCloudRunResolveTarget(graph, config) {
         normalizePathTemplate(path79)
       );
       if (routeNodeId) {
-        return { targetNodeId: routeNodeId, serviceName: mappedService, edgeType: import_types81.EdgeType.CALLS };
+        return { targetNodeId: routeNodeId, serviceName: mappedService, edgeType: import_types82.EdgeType.CALLS };
       }
     }
     return {
-      targetNodeId: (0, import_types81.infraId)(CLOUD_RUN_SERVICE_INFRA_KIND, gcpServiceName),
+      targetNodeId: (0, import_types82.infraId)(CLOUD_RUN_SERVICE_INFRA_KIND, gcpServiceName),
       serviceName: mappedService ?? gcpServiceName,
-      edgeType: import_types81.EdgeType.CALLS,
+      edgeType: import_types82.EdgeType.CALLS,
       ensureInfraNode: {
         kind: CLOUD_RUN_SERVICE_INFRA_KIND,
         name: gcpServiceName,
@@ -21271,14 +21418,14 @@ function mapLogEntriesToSignals3(entries) {
 
 // src/connectors/gcp-lb/resolve.ts
 init_cjs_shims();
-var import_types85 = require("@neat.is/types");
+var import_types86 = require("@neat.is/types");
 var GCP_LB_BACKEND_INFRA_KIND = "gcp-lb-backend";
 function findMatchingRouteNode3(graph, serviceName, method, normalizedPath) {
   let found = null;
   graph.forEachNode((_id, attrs) => {
     if (found) return;
     const node = attrs;
-    if (node.type !== import_types85.NodeType.RouteNode) return;
+    if (node.type !== import_types86.NodeType.RouteNode) return;
     const route = attrs;
     if (route.service !== serviceName || !route.pathTemplate) return;
     if (normalizePathTemplate(route.pathTemplate) !== normalizedPath) return;
@@ -21294,7 +21441,7 @@ function createGcpLbResolveTarget(graph, config) {
     const identity = parseGcpLbTargetName(signal.targetName);
     if (!identity) return null;
     const { backendServiceName, method, path: path79 } = identity;
-    const mappedService = config.backendServiceMap?.[backendServiceName];
+    const mappedService = config.backendServiceMap?.[backendServiceName] ?? (config.inferServices ? inferServiceName(graph, backendServiceName, method, path79) ?? void 0 : void 0);
     if (mappedService) {
       const routeNodeId = findMatchingRouteNode3(
         graph,
@@ -21303,13 +21450,13 @@ function createGcpLbResolveTarget(graph, config) {
         normalizePathTemplate(path79)
       );
       if (routeNodeId) {
-        return { targetNodeId: routeNodeId, serviceName: mappedService, edgeType: import_types85.EdgeType.CALLS };
+        return { targetNodeId: routeNodeId, serviceName: mappedService, edgeType: import_types86.EdgeType.CALLS };
       }
     }
     return {
-      targetNodeId: (0, import_types85.infraId)(GCP_LB_BACKEND_INFRA_KIND, backendServiceName),
+      targetNodeId: (0, import_types86.infraId)(GCP_LB_BACKEND_INFRA_KIND, backendServiceName),
       serviceName: mappedService ?? backendServiceName,
-      edgeType: import_types85.EdgeType.CALLS,
+      edgeType: import_types86.EdgeType.CALLS,
       ensureInfraNode: {
         kind: GCP_LB_BACKEND_INFRA_KIND,
         name: backendServiceName,
@@ -21350,7 +21497,7 @@ function createGcpLbConnector(graph, config = {}) {
 
 // src/connectors/render/index.ts
 init_cjs_shims();
-var import_types88 = require("@neat.is/types");
+var import_types89 = require("@neat.is/types");
 
 // src/connectors/render/types.ts
 init_cjs_shims();
@@ -21428,7 +21575,7 @@ function buildRenderRouteIndex(graph, serviceName) {
   const out = [];
   graph.forEachNode((_id, attrs) => {
     const node = attrs;
-    if (node.type !== import_types88.NodeType.RouteNode) return;
+    if (node.type !== import_types89.NodeType.RouteNode) return;
     const route = attrs;
     if (route.service !== serviceName) return;
     out.push({
@@ -21513,7 +21660,7 @@ function mapRenderRequestLogsToSignals(entries, routeIndex) {
 function createRenderResolveTarget(config) {
   return (signal) => {
     if (signal.targetKind === ROUTE_TARGET_KIND2) {
-      return { targetNodeId: signal.targetName, serviceName: config.serviceName, edgeType: import_types88.EdgeType.CALLS };
+      return { targetNodeId: signal.targetName, serviceName: config.serviceName, edgeType: import_types89.EdgeType.CALLS };
     }
     return null;
   };
@@ -21651,21 +21798,21 @@ function mapInsightsToSignals(rows, observedAtIso) {
 
 // src/connectors/planetscale/resolve.ts
 init_cjs_shims();
-var import_types92 = require("@neat.is/types");
+var import_types93 = require("@neat.is/types");
 var PLANETSCALE_DATABASE_KIND = "planetscale-database";
 function createPlanetscaleResolveTarget(graph, config) {
   const databaseName = `${config.organization}/${config.database}`;
   return (signal, _ctx) => {
     if (signal.targetKind !== PLANETSCALE_SQL_TABLE_TARGET_KIND || !signal.targetName) return null;
-    const tableId = (0, import_types92.infraId)("sql-table", signal.targetName);
+    const tableId = (0, import_types93.infraId)("sql-table", signal.targetName);
     if (graph.hasNode(tableId)) {
-      return { targetNodeId: tableId, serviceName: config.serviceName, edgeType: import_types92.EdgeType.CALLS };
+      return { targetNodeId: tableId, serviceName: config.serviceName, edgeType: import_types93.EdgeType.CALLS };
     }
-    const providerId = (0, import_types92.infraId)(PLANETSCALE_DATABASE_KIND, databaseName);
+    const providerId = (0, import_types93.infraId)(PLANETSCALE_DATABASE_KIND, databaseName);
     return {
       targetNodeId: providerId,
       serviceName: config.serviceName,
-      edgeType: import_types92.EdgeType.CALLS,
+      edgeType: import_types93.EdgeType.CALLS,
       ensureInfraNode: { kind: PLANETSCALE_DATABASE_KIND, name: databaseName, provider: "planetscale" }
     };
   };
@@ -21930,7 +22077,7 @@ function mapBuildsToSignals(builds, serviceName) {
 
 // src/connectors/eas/resolve.ts
 init_cjs_shims();
-var import_types97 = require("@neat.is/types");
+var import_types98 = require("@neat.is/types");
 var NO_ENV2 = "unknown";
 var EAS_JSON_PHASES = /* @__PURE__ */ new Set(["READ_EAS_JSON"]);
 var APP_CONFIG_PHASES = /* @__PURE__ */ new Set([
@@ -21946,8 +22093,8 @@ function configBasenamesForPhase(phase) {
 function configNodeService(graph, configNodeId) {
   for (const edgeId of graph.inboundEdges(configNodeId)) {
     const edge = graph.getEdgeAttributes(edgeId);
-    if (edge.type !== import_types97.EdgeType.CONFIGURED_BY) continue;
-    const parsed = (0, import_types97.parseFileId)(edge.source);
+    if (edge.type !== import_types98.EdgeType.CONFIGURED_BY) continue;
+    const parsed = (0, import_types98.parseFileId)(edge.source);
     if (parsed) return parsed.service;
   }
   return null;
@@ -21958,7 +22105,7 @@ function findConfigNode(graph, basenames, serviceName) {
   graph.forEachNode((id, attrs) => {
     if (scoped) return;
     const node = attrs;
-    if (node.type !== import_types97.NodeType.ConfigNode) return;
+    if (node.type !== import_types98.NodeType.ConfigNode) return;
     if (typeof node.name !== "string" || !basenames.includes(node.name)) return;
     if (anyMatch === null) anyMatch = id;
     if (configNodeService(graph, id) === serviceName) scoped = id;
@@ -21975,13 +22122,13 @@ function createEasResolveTarget(graph) {
     if (basenames.length > 0) {
       const configNodeId = findConfigNode(graph, basenames, serviceName);
       if (configNodeId) {
-        return { targetNodeId: configNodeId, serviceName, edgeType: import_types97.EdgeType.CALLS };
+        return { targetNodeId: configNodeId, serviceName, edgeType: import_types98.EdgeType.CALLS };
       }
     }
     return {
       targetNodeId: resolveFusedServiceId(graph, serviceName, NO_ENV2),
       serviceName,
-      edgeType: import_types97.EdgeType.CALLS
+      edgeType: import_types98.EdgeType.CALLS
     };
   };
 }
@@ -22469,6 +22616,9 @@ var PUSH_PROVIDER_DISPATCH = {
     }
   }
 };
+function getPushProviderDispatch(provider) {
+  return PUSH_PROVIDER_DISPATCH[provider];
+}
 function isPushProvider(provider) {
   return provider in PUSH_PROVIDER_DISPATCH;
 }
@@ -22762,11 +22912,11 @@ function registerRoutes(scope, ctx) {
       const candidates = req.query.type.split(",").map((s) => s.trim()).filter((s) => s.length > 0);
       const parsed = [];
       for (const c of candidates) {
-        const r = import_types100.DivergenceTypeSchema.safeParse(c);
+        const r = import_types101.DivergenceTypeSchema.safeParse(c);
         if (!r.success) {
           return reply.code(400).send({
             error: `unknown divergence type "${c}"`,
-            allowed: import_types100.DivergenceTypeSchema.options
+            allowed: import_types101.DivergenceTypeSchema.options
           });
         }
         parsed.push(r.data);
@@ -23162,7 +23312,7 @@ function registerRoutes(scope, ctx) {
     const log = new PolicyViolationsLog(proj.paths.policyViolationsPath);
     let violations = await log.readAll();
     if (req.query.severity) {
-      const sev = import_types100.PolicySeveritySchema.safeParse(req.query.severity);
+      const sev = import_types101.PolicySeveritySchema.safeParse(req.query.severity);
       if (!sev.success) {
         return reply.code(400).send({
           error: "invalid severity",
@@ -23201,7 +23351,7 @@ function registerRoutes(scope, ctx) {
   scope.post("/policies/check", async (req, reply) => {
     const proj = resolveProject(registry, req, reply, ctx.bootstrap, ctx.singleProject);
     if (!proj) return;
-    const parsed = import_types100.PoliciesCheckBodySchema.safeParse(req.body ?? {});
+    const parsed = import_types101.PoliciesCheckBodySchema.safeParse(req.body ?? {});
     if (!parsed.success) {
       return reply.code(400).send({
         error: "invalid /policies/check body",
@@ -23523,13 +23673,13 @@ init_otel_grpc();
 // src/daemon.ts
 init_cjs_shims();
 var import_node_fs41 = require("fs");
-var import_node_path78 = __toESM(require("path"), 1);
+var import_node_path79 = __toESM(require("path"), 1);
 var import_node_module = require("module");
 init_otel();
 
 // src/hang-sensor.ts
 init_cjs_shims();
-var import_types101 = require("@neat.is/types");
+var import_types102 = require("@neat.is/types");
 var RECONCILE_INCIDENT_LIMIT = 500;
 function stageHangSurfaces(graph, incidents) {
   const boundaries = /* @__PURE__ */ new Set();
@@ -23542,7 +23692,7 @@ function stageHangSurfaces(graph, incidents) {
     if (!isBoundaryTimeoutSymptom(ctx)) continue;
     const hop = resolveHangHop(graph, boundary, incidents);
     if (!hop) continue;
-    if (stageFrontierEdge(graph, hop.source, hop.target, import_types101.EdgeType.CALLS)) staged++;
+    if (stageFrontierEdge(graph, hop.source, hop.target, import_types102.EdgeType.CALLS)) staged++;
   }
   return staged;
 }
@@ -23559,6 +23709,8 @@ async function reconcileFrontierSurfaces(graph, errorsPath) {
 
 // src/connectors/hosted.ts
 init_cjs_shims();
+var import_promises = require("fs/promises");
+var import_node_path75 = require("path");
 
 // src/connectors/railway/target-ref.ts
 init_cjs_shims();
@@ -23605,11 +23757,14 @@ function credentialRecord(provider, cred) {
   switch (provider) {
     case "supabase":
       return { managementToken: cred.accessToken };
+    case "gcp":
+      if (!cred.projectRef) throw new Error("gcp credential delivered without a project ref");
+      return { projectId: cred.projectRef, accessToken: cred.accessToken };
     default:
       return { token: cred.accessToken };
   }
 }
-function hostedOptions(provider, summary, serviceName) {
+function hostedOptions(provider, summary, serviceName, firebaseServiceMap) {
   switch (provider) {
     case "supabase": {
       const ref = summary.projectRef;
@@ -23625,10 +23780,125 @@ function hostedOptions(provider, summary, serviceName) {
         serviceNameById: { [target.serviceId]: serviceName }
       };
     }
+    case "firebase": {
+      return { inferServices: true, excludeCloudRun: true, ...firebaseServiceMap ?? {} };
+    }
+    case "cloud-run":
+    case "gcp-lb":
+      return { inferServices: true };
     default:
       return null;
   }
 }
+function parseFirebaseServiceMap(raw) {
+  if (!raw) return void 0;
+  try {
+    const parsed = JSON.parse(raw);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return void 0;
+    const out = {};
+    for (const key of ["functions", "cloudRun", "hosting"]) {
+      const group = parsed[key];
+      if (group === void 0) continue;
+      if (!group || typeof group !== "object" || Array.isArray(group)) return void 0;
+      const entries = Object.entries(group);
+      if (entries.some(([, v]) => typeof v !== "string" || v.length === 0)) return void 0;
+      out[key] = Object.fromEntries(entries);
+    }
+    return Object.keys(out).length > 0 ? out : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function pushHandlesPath(projectDir) {
+  return (0, import_node_path75.join)(projectDir, "neat-out", "connectors-hosted.json");
+}
+async function readPushHandles(projectDir) {
+  try {
+    const parsed = JSON.parse(await (0, import_promises.readFile)(pushHandlesPath(projectDir), "utf8"));
+    return parsed && typeof parsed === "object" ? parsed : {};
+  } catch {
+    return {};
+  }
+}
+async function writePushHandle(projectDir, provider, handle) {
+  const path79 = pushHandlesPath(projectDir);
+  const handles = await readPushHandles(projectDir);
+  handles[provider] = handle;
+  await (0, import_promises.mkdir)((0, import_node_path75.dirname)(path79), { recursive: true });
+  const tmp = `${path79}.${process.pid}.tmp`;
+  await (0, import_promises.writeFile)(tmp, `${JSON.stringify(handles, null, 2)}
+`, "utf8");
+  await (0, import_promises.rename)(tmp, path79);
+}
+function pushCredentialRecord(provider, cred, deps) {
+  switch (provider) {
+    case "vercel":
+      return { token: cred.accessToken, otelToken: deps.otelToken ?? deps.daemonToken };
+    default:
+      return { token: cred.accessToken };
+  }
+}
+function hostedPushOptions(provider, summary, deps) {
+  switch (provider) {
+    case "vercel": {
+      if (!deps.publicUrl) {
+        return { skip: "no public URL for this daemon (NEAT_PUBLIC_URL) \u2014 a drain has nowhere to deliver" };
+      }
+      if (!summary.projectRef) return { skip: "no Vercel team selected yet \u2014 drains are team-scoped" };
+      const endpoint2 = `${deps.publicUrl.replace(/\/+$/, "")}/v1/traces`;
+      return { options: { teamId: summary.projectRef, endpoint: endpoint2 }, endpoint: endpoint2 };
+    }
+    default:
+      return { skip: "no hosted option mapping for this push provider" };
+  }
+}
+async function provisionHostedPushProvider(summary, dispatch, input) {
+  const { deps, projectDir, onSkip, onProvisioned } = input;
+  const provider = summary.provider;
+  const mapped = hostedPushOptions(provider, summary, deps);
+  if ("skip" in mapped) {
+    onSkip?.(provider, mapped.skip);
+    return;
+  }
+  let cred;
+  try {
+    cred = await cpGet(
+      `/internal/projects/${deps.projectId}/connections/${provider}/credential`,
+      deps
+    );
+  } catch (err) {
+    onSkip?.(provider, `credential delivery failed \u2014 ${err.message}`);
+    return;
+  }
+  const credentials = pushCredentialRecord(provider, cred, deps);
+  const existing = (await readPushHandles(projectDir))[provider];
+  const alreadyProvisioned = existing !== void 0 && existing.endpoint === mapped.endpoint;
+  const options = alreadyProvisioned ? { ...mapped.options, ...existing.options } : mapped.options;
+  const seam = deps.fetchImpl ? { fetchImpl: deps.fetchImpl } : {};
+  const validation = await dispatch.validate({ credentials, options, ...seam });
+  if (!validation.ok) {
+    onSkip?.(provider, `drain delivery test failed \u2014 ${validation.reason}`);
+    return;
+  }
+  if (alreadyProvisioned) {
+    onProvisioned?.(provider, "drain already provisioned \u2014 delivery re-validated");
+    return;
+  }
+  const result = await dispatch.provision({ credentials, options, ...seam });
+  if (!result.ok) {
+    onSkip?.(provider, `drain provisioning failed \u2014 ${result.reason}`);
+    return;
+  }
+  await writePushHandle(projectDir, provider, {
+    endpoint: mapped.endpoint,
+    options: result.options ?? {},
+    provisionedAt: (/* @__PURE__ */ new Date()).toISOString()
+  });
+  onProvisioned?.(provider, result.note);
+}
+var HOSTED_CONNECTORS_FOR = {
+  gcp: ["firebase", "cloud-run", "gcp-lb"]
+};
 function createHostedCredentialSource(provider, deps) {
   let cached = null;
   return async () => {
@@ -23657,40 +23927,50 @@ async function startHostedConnectors(input) {
   if (!Array.isArray(connections)) return () => {
   };
   const stops = [];
+  const lookupPush = input.pushDispatch ?? getPushProviderDispatch;
   for (const c of connections) {
-    const dispatch = PROVIDER_DISPATCH[c.provider];
-    if (!dispatch) {
-      onSkip?.(c.provider, "no pull connector for this provider");
-      continue;
-    }
-    if (c.needsProjectSelection || !c.projectRef) {
-      onSkip?.(c.provider, "no project selected yet \u2014 not pullable");
-      continue;
-    }
-    const options = hostedOptions(c.provider, c, project);
-    if (!options) {
-      onSkip?.(c.provider, "no hosted option mapping for this provider");
+    const push = lookupPush(c.provider);
+    if (push) {
+      await provisionHostedPushProvider(c, push, input);
       continue;
     }
-    let built;
-    try {
-      built = dispatch.build(graph, options);
-    } catch (err) {
-      onSkip?.(c.provider, err.message);
-      continue;
+    const credentialSource = createHostedCredentialSource(c.provider, deps);
+    for (const name of HOSTED_CONNECTORS_FOR[c.provider] ?? [c.provider]) {
+      const dispatch = PROVIDER_DISPATCH[name];
+      if (!dispatch) {
+        onSkip?.(name, "no pull connector for this provider");
+        continue;
+      }
+      if (c.needsProjectSelection || !c.projectRef) {
+        onSkip?.(name, "no project selected yet \u2014 not pullable");
+        continue;
+      }
+      const options = hostedOptions(name, c, project, input.firebaseServiceMap);
+      if (!options) {
+        onSkip?.(name, "no hosted option mapping for this provider");
+        continue;
+      }
+      let built;
+      try {
+        built = dispatch.build(graph, options);
+      } catch (err) {
+        onSkip?.(name, err.message);
+        continue;
+      }
+      stops.push(
+        startLoop(
+          built.connector,
+          { projectDir, project, credentials: {}, ...errorsPath ? { errorsPath } : {} },
+          graph,
+          built.resolveTarget,
+          {
+            connectorId: `hosted:${name}`,
+            // The credential is fetched by the CONNECTION's provider (`gcp`), not the connector's name.
+            refreshCredentials: credentialSource
+          }
+        )
+      );
     }
-    stops.push(
-      startLoop(
-        built.connector,
-        { projectDir, project, credentials: {}, ...errorsPath ? { errorsPath } : {} },
-        graph,
-        built.resolveTarget,
-        {
-          connectorId: `hosted:${c.provider}`,
-          refreshCredentials: createHostedCredentialSource(c.provider, deps)
-        }
-      )
-    );
   }
   return () => {
     for (const stop of stops) stop();
@@ -23704,10 +23984,18 @@ async function maybeStartHostedConnectors(input) {
   if (!cpUrl || !projectId || !daemonToken) return () => {
   };
   return startHostedConnectors({
-    deps: { cpUrl, projectId, daemonToken, ...input.fetchImpl ? { fetchImpl: input.fetchImpl } : {} },
+    deps: {
+      cpUrl,
+      projectId,
+      daemonToken,
+      ...env.NEAT_PUBLIC_URL ? { publicUrl: env.NEAT_PUBLIC_URL } : {},
+      ...env.NEAT_OTEL_TOKEN ? { otelToken: env.NEAT_OTEL_TOKEN } : {},
+      ...input.fetchImpl ? { fetchImpl: input.fetchImpl } : {}
+    },
     graph: input.graph,
     projectDir: input.projectDir,
     project: input.project,
+    ...parseFirebaseServiceMap(env.NEAT_FIREBASE_SERVICE_MAP) ? { firebaseServiceMap: parseFirebaseServiceMap(env.NEAT_FIREBASE_SERVICE_MAP) } : {},
     ...input.errorsPath ? { errorsPath: input.errorsPath } : {},
     ...input.onSkip ? { onSkip: input.onSkip } : {}
   });
@@ -23716,8 +24004,8 @@ async function maybeStartHostedConnectors(input) {
 // src/connectors/hosted-repos.ts
 init_cjs_shims();
 var import_node_os5 = __toESM(require("os"), 1);
-var import_node_path75 = __toESM(require("path"), 1);
-var import_promises = require("fs/promises");
+var import_node_path76 = __toESM(require("path"), 1);
+var import_promises2 = require("fs/promises");
 var CP_REQUEST_TIMEOUT_MS2 = 1e4;
 var DEFAULT_SYNC_INTERVAL_MS = 5 * 6e4;
 var CLONE_TIMEOUT_MS = 5 * 6e4;
@@ -23787,7 +24075,9 @@ async function syncOneRepo(r, input) {
   const tmpRoot = input.tmpRoot ?? import_node_os5.default.tmpdir();
   let dir;
   try {
-    dir = await (0, import_promises.mkdtemp)(import_node_path75.default.join(tmpRoot, "neat-repo-"));
+    dir = await (0, import_promises2.mkdtemp)(import_node_path76.default.join(tmpRoot, "neat-repo-"));
+    await cpPostStatus(deps, r.owner, r.name, { syncStatus: "syncing", detail: "cloning" }).catch(() => {
+    });
     await cloneRepo(r.cloneUrl, r.defaultBranch, dir);
     const extracted = await extract(graph, dir);
     const nodes = extracted?.nodesAdded ?? 0;
@@ -23805,7 +24095,7 @@ async function syncOneRepo(r, input) {
     }).catch(() => {
     });
   } finally {
-    if (dir) await (0, import_promises.rm)(dir, { recursive: true, force: true }).catch(() => {
+    if (dir) await (0, import_promises2.rm)(dir, { recursive: true, force: true }).catch(() => {
     });
   }
 }
@@ -23815,23 +24105,26 @@ async function runRepoSyncPass(input) {
     repos = await cpGet2(`/internal/projects/${input.deps.projectId}/repos`, input.deps);
   } catch (err) {
     input.onSkip?.("(all)", `control plane repo list unreadable \u2014 ${err.message}`);
-    return;
+    return false;
   }
-  if (!Array.isArray(repos)) return;
+  if (!Array.isArray(repos)) return false;
   for (const r of repos) {
-    if (!needsSync(r)) continue;
+    if (!input.forceResync && !needsSync(r)) continue;
     await syncOneRepo(r, input);
   }
+  return true;
 }
 async function startRepoSync(input) {
   const intervalMs = input.intervalMs ?? DEFAULT_SYNC_INTERVAL_MS;
   let stopped = false;
   let running = false;
+  let bootResyncDone = false;
   const tick = async () => {
     if (stopped || running) return;
     running = true;
     try {
-      await runRepoSyncPass(input);
+      const listed = await runRepoSyncPass({ ...input, forceResync: !bootResyncDone });
+      if (listed) bootResyncDone = true;
     } finally {
       running = false;
     }
@@ -24215,7 +24508,7 @@ function mapWorkloadsToSignals(deployments, pods, config) {
 
 // src/connectors/kubernetes/resolve.ts
 init_cjs_shims();
-var import_types103 = require("@neat.is/types");
+var import_types104 = require("@neat.is/types");
 var NO_ENV3 = "unknown";
 function createK8sResolveTarget(graph) {
   return (signal) => {
@@ -24226,28 +24519,28 @@ function createK8sResolveTarget(graph) {
     return {
       targetNodeId: resolveFusedServiceId(graph, serviceName, NO_ENV3),
       serviceName,
-      edgeType: import_types103.EdgeType.CALLS
+      edgeType: import_types104.EdgeType.CALLS
     };
   };
 }
 
 // src/connectors/kubernetes/substrate.ts
 init_cjs_shims();
-var import_promises2 = require("fs/promises");
+var import_promises3 = require("fs/promises");
 var import_node_os6 = __toESM(require("os"), 1);
-var import_node_path76 = __toESM(require("path"), 1);
+var import_node_path77 = __toESM(require("path"), 1);
 function defaultHome() {
   const override = process.env.NEAT_HOME;
-  if (override && override.length > 0) return import_node_path76.default.resolve(override);
-  return import_node_path76.default.join(import_node_os6.default.homedir(), ".neat");
+  if (override && override.length > 0) return import_node_path77.default.resolve(override);
+  return import_node_path77.default.join(import_node_os6.default.homedir(), ".neat");
 }
 function k8sSubstrateConfigPath(home = defaultHome()) {
-  return import_node_path76.default.join(home, "k8s.json");
+  return import_node_path77.default.join(home, "k8s.json");
 }
 async function readK8sSubstrateConfig(home = defaultHome()) {
   let raw;
   try {
-    raw = await (0, import_promises2.readFile)(k8sSubstrateConfigPath(home), "utf8");
+    raw = await (0, import_promises3.readFile)(k8sSubstrateConfigPath(home), "utf8");
   } catch {
     return { version: 1, deployments: [] };
   }
@@ -24342,7 +24635,7 @@ init_auth();
 // src/unrouted.ts
 init_cjs_shims();
 var import_node_fs40 = require("fs");
-var import_node_path77 = __toESM(require("path"), 1);
+var import_node_path78 = __toESM(require("path"), 1);
 function buildUnroutedSpanRecord(serviceName, traceId, now = /* @__PURE__ */ new Date()) {
   return {
     timestamp: now.toISOString(),
@@ -24352,34 +24645,34 @@ function buildUnroutedSpanRecord(serviceName, traceId, now = /* @__PURE__ */ new
   };
 }
 async function appendUnroutedSpan(neatHome3, record) {
-  const target = import_node_path77.default.join(neatHome3, "errors.ndjson");
+  const target = import_node_path78.default.join(neatHome3, "errors.ndjson");
   await import_node_fs40.promises.mkdir(neatHome3, { recursive: true });
   await import_node_fs40.promises.appendFile(target, JSON.stringify(record) + "\n", "utf8");
 }
 function unroutedErrorsPath(neatHome3) {
-  return import_node_path77.default.join(neatHome3, "errors.ndjson");
+  return import_node_path78.default.join(neatHome3, "errors.ndjson");
 }
 
 // src/daemon.ts
-var import_types106 = require("@neat.is/types");
+var import_types107 = require("@neat.is/types");
 function daemonJsonPath(scanPath) {
-  return import_node_path78.default.join(scanPath, "neat-out", "daemon.json");
+  return import_node_path79.default.join(scanPath, "neat-out", "daemon.json");
 }
 function daemonsDiscoveryDir(home) {
   const base = home && home.length > 0 ? home : neatHomeFromEnv();
-  return import_node_path78.default.join(base, "daemons");
+  return import_node_path79.default.join(base, "daemons");
 }
 function daemonDiscoveryPath(project, home) {
-  return import_node_path78.default.join(daemonsDiscoveryDir(home), `${sanitizeDiscoveryName(project)}.json`);
+  return import_node_path79.default.join(daemonsDiscoveryDir(home), `${sanitizeDiscoveryName(project)}.json`);
 }
 function sanitizeDiscoveryName(project) {
   return project.replace(/[^A-Za-z0-9._-]/g, "_");
 }
 function neatHomeFromEnv() {
   const env = process.env.NEAT_HOME;
-  if (env && env.length > 0) return import_node_path78.default.resolve(env);
+  if (env && env.length > 0) return import_node_path79.default.resolve(env);
   const home = process.env.HOME ?? process.env.USERPROFILE ?? "";
-  return import_node_path78.default.join(home, ".neat");
+  return import_node_path79.default.join(home, ".neat");
 }
 function resolveNeatVersion() {
   if (process.env.NEAT_LOCAL_VERSION && process.env.NEAT_LOCAL_VERSION.length > 0) {
@@ -24446,11 +24739,11 @@ function teardownSlot(slot) {
   }
 }
 function neatHomeFor(opts) {
-  if (opts.neatHome && opts.neatHome.length > 0) return import_node_path78.default.resolve(opts.neatHome);
+  if (opts.neatHome && opts.neatHome.length > 0) return import_node_path79.default.resolve(opts.neatHome);
   const env = process.env.NEAT_HOME;
-  if (env && env.length > 0) return import_node_path78.default.resolve(env);
+  if (env && env.length > 0) return import_node_path79.default.resolve(env);
   const home = process.env.HOME ?? process.env.USERPROFILE ?? "";
-  return import_node_path78.default.join(home, ".neat");
+  return import_node_path79.default.join(home, ".neat");
 }
 function routeSpanToProject(serviceName, projects) {
   if (!serviceName) return DEFAULT_PROJECT;
@@ -24498,11 +24791,11 @@ function spanBelongsToSingleProject(graph, project, serviceName) {
   if (!serviceName) return true;
   if (serviceNameMatchesProject(serviceName, project)) return true;
   return graph.someNode(
-    (_id, attrs) => attrs.type === import_types106.NodeType.ServiceNode && attrs.name === serviceName
+    (_id, attrs) => attrs.type === import_types107.NodeType.ServiceNode && attrs.name === serviceName
   );
 }
 async function bootstrapProject(entry, connectors = [], neatHome3) {
-  const paths = pathsForProject(entry.name, import_node_path78.default.join(entry.path, "neat-out"));
+  const paths = pathsForProject(entry.name, import_node_path79.default.join(entry.path, "neat-out"));
   try {
     const stat = await import_node_fs41.promises.stat(entry.path);
     if (!stat.isDirectory()) {
@@ -24656,7 +24949,7 @@ async function startDaemon(opts = {}) {
   const projectArg = typeof opts.project === "string" && opts.project.length > 0 ? opts.project : process.env.NEAT_PROJECT && process.env.NEAT_PROJECT.length > 0 ? process.env.NEAT_PROJECT : null;
   const projectPathArg = opts.projectPath && opts.projectPath.length > 0 ? opts.projectPath : process.env.NEAT_PROJECT_PATH && process.env.NEAT_PROJECT_PATH.length > 0 ? process.env.NEAT_PROJECT_PATH : null;
   const singleProject = projectArg;
-  const singleProjectPath = singleProject && projectPathArg ? import_node_path78.default.resolve(projectPathArg) : null;
+  const singleProjectPath = singleProject && projectPathArg ? import_node_path79.default.resolve(projectPathArg) : null;
   if (singleProject && !singleProjectPath) {
     throw new Error(
       `neatd: project "${singleProject}" given without a projectPath; pass NEAT_PROJECT_PATH alongside NEAT_PROJECT.`
@@ -24671,7 +24964,7 @@ async function startDaemon(opts = {}) {
       );
     }
   }
-  const pidPath = import_node_path78.default.join(home, "neatd.pid");
+  const pidPath = import_node_path79.default.join(home, "neatd.pid");
   await writeAtomically(pidPath, `${process.pid}
 `);
   const slots = /* @__PURE__ */ new Map();
@@ -25143,8 +25436,8 @@ async function startDaemon(opts = {}) {
   let registryWatcher = null;
   let reloadTimer = null;
   if (!singleProject) try {
-    const regDir = import_node_path78.default.dirname(regPath);
-    const regBase = import_node_path78.default.basename(regPath);
+    const regDir = import_node_path79.default.dirname(regPath);
+    const regBase = import_node_path79.default.basename(regPath);
     registryWatcher = (0, import_node_fs41.watch)(regDir, (_eventType, filename) => {
       if (filename !== null && filename !== regBase) return;
       if (reloadTimer) clearTimeout(reloadTimer);