@neat.is/core 0.9.5-dev.20260825 → 0.9.6-dev.20260826

package/dist/{chunk-TGCWMMF6.js → chunk-4SLKQNG7.js}

@@ -20,7 +20,7 @@ import {
   startStalenessLoop,
   touchLastSeen,
   writeAtomically
-} from "./chunk-IVVF37OU.js";
+} from "./chunk-DGAI4VOE.js";
 import {
   assertBindAuthority,
   buildOtelReceiver,
@@ -891,4 +891,4 @@ export {
   resolveHost,
   startDaemon
 };
-//# sourceMappingURL=chunk-TGCWMMF6.js.map
+//# sourceMappingURL=chunk-4SLKQNG7.js.map

package/dist/{chunk-IVVF37OU.js → chunk-DGAI4VOE.js}

@@ -19575,8 +19575,219 @@ function createCloudRunConnector(graph, config = {}) {
   };
 }
 
+// src/connectors/gcp-lb/client.ts
+function gcpLbRequestLogName(projectId) {
+  return `projects/${projectId}/logs/requests`;
+}
+function buildGcpLbEntriesFilter(projectId, sinceIso) {
+  return [
+    `logName = "${gcpLbRequestLogName(projectId)}"`,
+    `resource.type = "${GCP_LB_RESOURCE_TYPE}"`,
+    'httpRequest.requestMethod != ""',
+    `timestamp >= "${sinceIso}"`
+  ].join(" AND ");
+}
+var GCP_LB_RESOURCE_TYPE = "http_load_balancer";
+var DEFAULT_LOOKBACK_MS3 = 24 * 60 * 60 * 1e3;
+var ENTRIES_LIST_URL3 = "https://logging.googleapis.com/v2/entries:list";
+var PAGE_SIZE3 = 1e3;
+var MAX_PAGES3 = 20;
+async function fetchGcpLbRequestLogEntries(creds, sinceIso, apiUrl = ENTRIES_LIST_URL3) {
+  const filter = buildGcpLbEntriesFilter(creds.projectId, sinceIso);
+  const out = [];
+  let pageToken;
+  for (let page = 0; page < MAX_PAGES3; page++) {
+    const body = {
+      resourceNames: [`projects/${creds.projectId}`],
+      filter,
+      orderBy: "timestamp asc",
+      pageSize: PAGE_SIZE3,
+      ...pageToken ? { pageToken } : {}
+    };
+    const res = await junctionFetch(
+      apiUrl,
+      {
+        method: "POST",
+        headers: {
+          ...bearerAuthHeader(creds.accessToken),
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify(body)
+      },
+      // accountKey: the GCP project id — one customer's Cloud Logging quota is
+      // scoped per GCP project (ADR-131's per-(provider, accountKey) rate-limit
+      // bucket), the same key Cloud Run's and Firebase's connectors use.
+      { provider: "gcp-lb", accountKey: creds.projectId }
+    );
+    if (!res.ok) {
+      throw new Error(`Cloud Logging entries.list failed: ${res.status} ${res.statusText}`);
+    }
+    const json = await res.json();
+    if (Array.isArray(json.entries)) out.push(...json.entries);
+    if (!json.nextPageToken) break;
+    pageToken = json.nextPageToken;
+  }
+  return out;
+}
+
+// src/connectors/gcp-lb/types.ts
+function readGcpLbCredentials(raw) {
+  const projectId = raw["projectId"];
+  const accessToken = raw["accessToken"];
+  if (typeof projectId !== "string" || projectId.length === 0) {
+    throw new Error("gcp-lb connector: credentials.projectId must be a non-empty string");
+  }
+  if (typeof accessToken !== "string" || accessToken.length === 0) {
+    throw new Error("gcp-lb connector: credentials.accessToken must be a non-empty string");
+  }
+  return { projectId, accessToken };
+}
+var GCP_LB_TARGET_KIND = "http_load_balancer";
+var FIELD_SEP3 = "\0";
+function packGcpLbTargetName(identity) {
+  return [identity.backendServiceName, identity.method, identity.path].join(FIELD_SEP3);
+}
+function parseGcpLbTargetName(targetName) {
+  const firstSep = targetName.indexOf(FIELD_SEP3);
+  if (firstSep === -1) return null;
+  const backendServiceName = targetName.slice(0, firstSep);
+  const rest = targetName.slice(firstSep + 1);
+  const secondSep = rest.indexOf(FIELD_SEP3);
+  if (secondSep === -1) return null;
+  const method = rest.slice(0, secondSep);
+  const path72 = rest.slice(secondSep + 1);
+  if (!backendServiceName || !method || !path72) return null;
+  return { backendServiceName, method, path: path72 };
+}
+
+// src/connectors/gcp-lb/map.ts
+var GCP_LB_RESOURCE_TYPE2 = "http_load_balancer";
+function pathFromRequestUrl3(requestUrl) {
+  if (typeof requestUrl !== "string" || requestUrl.length === 0) return null;
+  if (requestUrl.startsWith("/")) {
+    const withoutQuery = requestUrl.split("?")[0];
+    return withoutQuery && withoutQuery.length > 0 ? withoutQuery : "/";
+  }
+  try {
+    const candidate = requestUrl.startsWith("//") ? `https:${requestUrl}` : requestUrl;
+    const parsed = new URL(candidate);
+    return parsed.pathname || "/";
+  } catch {
+    return null;
+  }
+}
+var ERROR_STATUS_THRESHOLD5 = 500;
+function mapLogEntryToSignal3(entry) {
+  if (!entry || typeof entry !== "object") return null;
+  if (entry.resource?.type !== GCP_LB_RESOURCE_TYPE2) return null;
+  const backendServiceName = entry.resource?.labels?.["backend_service_name"];
+  if (typeof backendServiceName !== "string" || backendServiceName.length === 0) return null;
+  const req = entry.httpRequest;
+  if (!req) return null;
+  if (typeof req.requestMethod !== "string" || req.requestMethod.length === 0) return null;
+  const method = req.requestMethod.toUpperCase();
+  const path72 = pathFromRequestUrl3(req.requestUrl);
+  if (path72 === null) return null;
+  const timestamp = entry.timestamp;
+  if (typeof timestamp !== "string" || timestamp.length === 0) return null;
+  const isError = typeof req.status === "number" && req.status >= ERROR_STATUS_THRESHOLD5;
+  return {
+    targetKind: GCP_LB_TARGET_KIND,
+    targetName: packGcpLbTargetName({ backendServiceName, method, path: path72 }),
+    callCount: 1,
+    errorCount: isError ? 1 : 0,
+    lastObservedIso: timestamp
+  };
+}
+function mapLogEntriesToSignals3(entries) {
+  const out = [];
+  for (const entry of entries) {
+    const signal = mapLogEntryToSignal3(entry);
+    if (signal) out.push(signal);
+  }
+  return out;
+}
+
+// src/connectors/gcp-lb/resolve.ts
+import { EdgeType as EdgeType32, NodeType as NodeType38, infraId as infraId25 } from "@neat.is/types";
+var GCP_LB_BACKEND_INFRA_KIND = "gcp-lb-backend";
+function findMatchingRouteNode3(graph, serviceName, method, normalizedPath) {
+  let found = null;
+  graph.forEachNode((_id, attrs) => {
+    if (found) return;
+    const node = attrs;
+    if (node.type !== NodeType38.RouteNode) return;
+    const route = attrs;
+    if (route.service !== serviceName || !route.pathTemplate) return;
+    if (normalizePathTemplate(route.pathTemplate) !== normalizedPath) return;
+    const routeMethod = route.method.toUpperCase();
+    if (routeMethod !== "ALL" && routeMethod !== method) return;
+    found = route.id;
+  });
+  return found;
+}
+function createGcpLbResolveTarget(graph, config) {
+  return (signal) => {
+    if (signal.targetKind !== GCP_LB_TARGET_KIND) return null;
+    const identity = parseGcpLbTargetName(signal.targetName);
+    if (!identity) return null;
+    const { backendServiceName, method, path: path72 } = identity;
+    const mappedService = config.backendServiceMap?.[backendServiceName];
+    if (mappedService) {
+      const routeNodeId = findMatchingRouteNode3(
+        graph,
+        mappedService,
+        method,
+        normalizePathTemplate(path72)
+      );
+      if (routeNodeId) {
+        return { targetNodeId: routeNodeId, serviceName: mappedService, edgeType: EdgeType32.CALLS };
+      }
+    }
+    return {
+      targetNodeId: infraId25(GCP_LB_BACKEND_INFRA_KIND, backendServiceName),
+      serviceName: mappedService ?? backendServiceName,
+      edgeType: EdgeType32.CALLS,
+      ensureInfraNode: {
+        kind: GCP_LB_BACKEND_INFRA_KIND,
+        name: backendServiceName,
+        provider: "gcp-lb"
+      }
+    };
+  };
+}
+
+// src/connectors/gcp-lb/index.ts
+var GcpLbConnector = class {
+  constructor(config = {}) {
+    this.config = config;
+  }
+  config;
+  provider = "gcp-lb";
+  async poll(ctx) {
+    const creds = readGcpLbCredentials(ctx.credentials);
+    const maxLookbackMs = this.config.maxLookbackMs ?? DEFAULT_LOOKBACK_MS3;
+    const sinceIso = boundedSinceIso2(ctx.since, /* @__PURE__ */ new Date(), maxLookbackMs);
+    const entries = await fetchGcpLbRequestLogEntries(creds, sinceIso, this.config.apiUrl);
+    return mapLogEntriesToSignals3(entries);
+  }
+};
+function boundedSinceIso2(since, now, maxLookbackMs) {
+  const floor = new Date(now.getTime() - maxLookbackMs);
+  if (!since) return floor.toISOString();
+  const sinceMs = new Date(since).getTime();
+  if (Number.isNaN(sinceMs)) return floor.toISOString();
+  return sinceMs < floor.getTime() ? floor.toISOString() : new Date(sinceMs).toISOString();
+}
+function createGcpLbConnector(graph, config = {}) {
+  return {
+    connector: new GcpLbConnector(config),
+    resolveTarget: createGcpLbResolveTarget(graph, config)
+  };
+}
+
 // src/connectors/render/index.ts
-import { EdgeType as EdgeType32, NodeType as NodeType38 } from "@neat.is/types";
+import { EdgeType as EdgeType33, NodeType as NodeType39 } from "@neat.is/types";
 
 // src/connectors/render/types.ts
 function readRenderToken(credentials) {
@@ -19652,7 +19863,7 @@ function buildRenderRouteIndex(graph, serviceName) {
   const out = [];
   graph.forEachNode((_id, attrs) => {
     const node = attrs;
-    if (node.type !== NodeType38.RouteNode) return;
+    if (node.type !== NodeType39.RouteNode) return;
     const route = attrs;
     if (route.service !== serviceName) return;
     out.push({
@@ -19737,7 +19948,7 @@ function mapRenderRequestLogsToSignals(entries, routeIndex) {
 function createRenderResolveTarget(config) {
   return (signal) => {
     if (signal.targetKind === ROUTE_TARGET_KIND2) {
-      return { targetNodeId: signal.targetName, serviceName: config.serviceName, edgeType: EdgeType32.CALLS };
+      return { targetNodeId: signal.targetName, serviceName: config.serviceName, edgeType: EdgeType33.CALLS };
     }
     return null;
   };
@@ -19866,21 +20077,21 @@ function mapInsightsToSignals(rows, observedAtIso) {
 }
 
 // src/connectors/planetscale/resolve.ts
-import { EdgeType as EdgeType33, infraId as infraId25 } from "@neat.is/types";
+import { EdgeType as EdgeType34, infraId as infraId26 } from "@neat.is/types";
 var PLANETSCALE_DATABASE_KIND = "planetscale-database";
 function createPlanetscaleResolveTarget(graph, config) {
   const databaseName = `${config.organization}/${config.database}`;
   return (signal, _ctx) => {
     if (signal.targetKind !== PLANETSCALE_SQL_TABLE_TARGET_KIND || !signal.targetName) return null;
-    const tableId = infraId25("sql-table", signal.targetName);
+    const tableId = infraId26("sql-table", signal.targetName);
     if (graph.hasNode(tableId)) {
-      return { targetNodeId: tableId, serviceName: config.serviceName, edgeType: EdgeType33.CALLS };
+      return { targetNodeId: tableId, serviceName: config.serviceName, edgeType: EdgeType34.CALLS };
     }
-    const providerId = infraId25(PLANETSCALE_DATABASE_KIND, databaseName);
+    const providerId = infraId26(PLANETSCALE_DATABASE_KIND, databaseName);
     return {
       targetNodeId: providerId,
       serviceName: config.serviceName,
-      edgeType: EdgeType33.CALLS,
+      edgeType: EdgeType34.CALLS,
       ensureInfraNode: { kind: PLANETSCALE_DATABASE_KIND, name: databaseName, provider: "planetscale" }
     };
   };
@@ -19939,13 +20150,13 @@ function isTransientFailure(err) {
   if (code && INTERNAL_ERROR_CODE.test(code)) return true;
   return false;
 }
-var FIELD_SEP3 = "\0";
+var FIELD_SEP4 = "\0";
 var EAS_TARGET_KIND = "eas-build";
 function packEasTargetName(identity) {
-  return [identity.serviceName, identity.phase].join(FIELD_SEP3);
+  return [identity.serviceName, identity.phase].join(FIELD_SEP4);
 }
 function parseEasTargetName(targetName) {
-  const sep = targetName.indexOf(FIELD_SEP3);
+  const sep = targetName.indexOf(FIELD_SEP4);
   if (sep === -1) return null;
   const serviceName = targetName.slice(0, sep);
   const phase = targetName.slice(sep + 1);
@@ -20136,7 +20347,7 @@ function mapBuildsToSignals(builds, serviceName) {
 }
 
 // src/connectors/eas/resolve.ts
-import { EdgeType as EdgeType34, NodeType as NodeType39, parseFileId as parseFileId3 } from "@neat.is/types";
+import { EdgeType as EdgeType35, NodeType as NodeType40, parseFileId as parseFileId3 } from "@neat.is/types";
 var NO_ENV2 = "unknown";
 var EAS_JSON_PHASES = /* @__PURE__ */ new Set(["READ_EAS_JSON"]);
 var APP_CONFIG_PHASES = /* @__PURE__ */ new Set([
@@ -20152,7 +20363,7 @@ function configBasenamesForPhase(phase) {
 function configNodeService(graph, configNodeId) {
   for (const edgeId of graph.inboundEdges(configNodeId)) {
     const edge = graph.getEdgeAttributes(edgeId);
-    if (edge.type !== EdgeType34.CONFIGURED_BY) continue;
+    if (edge.type !== EdgeType35.CONFIGURED_BY) continue;
     const parsed = parseFileId3(edge.source);
     if (parsed) return parsed.service;
   }
@@ -20164,7 +20375,7 @@ function findConfigNode(graph, basenames, serviceName) {
   graph.forEachNode((id, attrs) => {
     if (scoped) return;
     const node = attrs;
-    if (node.type !== NodeType39.ConfigNode) return;
+    if (node.type !== NodeType40.ConfigNode) return;
     if (typeof node.name !== "string" || !basenames.includes(node.name)) return;
     if (anyMatch === null) anyMatch = id;
     if (configNodeService(graph, id) === serviceName) scoped = id;
@@ -20181,13 +20392,13 @@ function createEasResolveTarget(graph) {
     if (basenames.length > 0) {
       const configNodeId = findConfigNode(graph, basenames, serviceName);
       if (configNodeId) {
-        return { targetNodeId: configNodeId, serviceName, edgeType: EdgeType34.CALLS };
+        return { targetNodeId: configNodeId, serviceName, edgeType: EdgeType35.CALLS };
       }
     }
     return {
       targetNodeId: resolveFusedServiceId(graph, serviceName, NO_ENV2),
       serviceName,
-      edgeType: EdgeType34.CALLS
+      edgeType: EdgeType35.CALLS
     };
   };
 }
@@ -20199,7 +20410,7 @@ function isBuildSince(build, sinceIso) {
   if (Number.isNaN(t) || Number.isNaN(s)) return true;
   return t > s;
 }
-function boundedSinceIso2(since, now, maxLookbackMs) {
+function boundedSinceIso3(since, now, maxLookbackMs) {
   const floor = new Date(now.getTime() - maxLookbackMs);
   if (!since) return floor.toISOString();
   const sinceMs = new Date(since).getTime();
@@ -20218,7 +20429,7 @@ var EasConnector = class {
     const creds = readEasCredentials(ctx.credentials);
     const serviceName = this.config.serviceName ?? this.config.appId;
     const maxLookbackMs = this.config.maxLookbackMs ?? DEFAULT_MAX_LOOKBACK_MS6;
-    const sinceIso = boundedSinceIso2(ctx.since, /* @__PURE__ */ new Date(), maxLookbackMs);
+    const sinceIso = boundedSinceIso3(ctx.since, /* @__PURE__ */ new Date(), maxLookbackMs);
     const builds = await fetchErroredBuilds(creds.token, this.config, this.fetchImpl);
     const fresh = builds.filter((b) => isBuildSince(b, sinceIso));
     const maxLogBytes = this.config.maxLogBytes ?? DEFAULT_MAX_LOG_BYTES;
@@ -20449,6 +20660,40 @@ var PROVIDER_DISPATCH = {
       });
     }
   },
+  "gcp-lb": {
+    provider: "gcp-lb",
+    // Like cloud-run, gcp-lb reads both projectId and accessToken from the
+    // credential; the single-string form maps to the secret (the token), and the
+    // required-fields check below catches a projectId that was never supplied.
+    primaryCredentialKey: "accessToken",
+    requiredCredentialFields: ["projectId", "accessToken"],
+    requiredOptionFields: [],
+    build(graph, options) {
+      return createGcpLbConnector(graph, options);
+    },
+    // POST entries:list with pageSize 1 — the exact surface poll() reads, so the
+    // probe checks the actual `logging.logEntries.list` permission the connector
+    // needs. This is the same Cloud Logging read-verdict cloud-run's validate
+    // uses (a lighter GET on logs.list would instead check `logging.logs.list`,
+    // falsely rejecting a correctly-scoped custom role carrying only
+    // `logging.logEntries.list`). A 2xx means the token can list log entries;
+    // 401/403 means the provider rejected it.
+    validate({ credentials, fetchImpl }) {
+      const projectId = String(credentials.projectId ?? "");
+      return authProbe({
+        provider: "gcp-lb",
+        accountKey: projectId || "validate",
+        url: "https://logging.googleapis.com/v2/entries:list",
+        token: String(credentials.accessToken ?? ""),
+        init: {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify({ resourceNames: [`projects/${projectId}`], pageSize: 1 })
+        },
+        ...fetchImpl ? { fetchImpl } : {}
+      });
+    }
+  },
   render: {
     provider: "render",
     primaryCredentialKey: "token",
@@ -21798,4 +22043,4 @@ export {
   deprovisionConnector,
   buildApi
 };
-//# sourceMappingURL=chunk-IVVF37OU.js.map
+//# sourceMappingURL=chunk-DGAI4VOE.js.map