@produtype/core 0.70.0 → 0.72.0

package/README.md

@@ -174,7 +174,7 @@ prodkit plan ../my-app --output prodkit-plan.md
 
 _Generated from the analyzer itself — run `npm run docs:stacks` after changing a detector._
 
-- **Backend:** Express, Next.js, NestJS, Fastify, Hono, Elysia, Koa, AdonisJS, SvelteKit, Remix, Nuxt, Nitro, Astro, Django, Flask, FastAPI, aiohttp, Litestar, Sanic, Tornado, Starlette, Streamlit, Gradio, Dash, Chainlit, Gin, Echo, Fiber, chi, Gorilla, Beego, Go, Axum, Actix Web, Rocket, Warp, Tide, Poem, Salvo, Tower HTTP, Spring Boot, Quarkus, Micronaut, Ktor, Javalin, Vert.x, Dropwizard, Helidon, Rails, Sinatra, Hanami, Roda, Grape, Ruby, Laravel, Symfony, Slim, CodeIgniter, CakePHP, Yii, PHP, ASP.NET Core, .NET
+- **Backend:** Express, Next.js, NestJS, Fastify, Hono, Elysia, Koa, AdonisJS, SvelteKit, Remix, Nuxt, Nitro, Astro, Django, Flask, FastAPI, aiohttp, Litestar, Sanic, Tornado, Starlette, Streamlit, Gradio, Dash, Chainlit, Gin, Echo, Fiber, chi, Gorilla, Beego, Go, Axum, Actix Web, Rocket, Warp, Tide, Poem, Salvo, Tower HTTP, Hyper, Spring Boot, Quarkus, Micronaut, Ktor, Javalin, Vert.x, Dropwizard, Helidon, Rails, Sinatra, Hanami, Roda, Grape, Ruby, Laravel, Symfony, Slim, CodeIgniter, CakePHP, Yii, PHP, ASP.NET Core, .NET
 - **Frontend:** React, Vite, Vue, Nuxt, Svelte, Angular, Astro, Solid, Qwik, Preact, Remix, htmx, Tailwind CSS, Electron
 - **Mobile:** Flutter, React Native, iOS (native), Android (native)
 - **Databases:** Postgres, MySQL, SQLite, SQL Server, MongoDB, Redis, Firestore, DynamoDB, Convex

package/dist/analyzer/catalogue.js

@@ -59,6 +59,8 @@ exports.RUST_BACKEND_FRAMEWORKS = [
     ['poem', ['poem']],
     ['salvo', ['salvo']],
     ['tower-http', ['tower-http']],
+    // What a Rust service uses when it uses no framework: the HTTP layer itself.
+    ['hyper', ['hyper']],
 ];
 /**
  * JVM frameworks, read from pom.xml and build.gradle alike.
@@ -211,6 +213,7 @@ const LABELS = {
     poem: 'Poem',
     salvo: 'Salvo',
     'tower-http': 'Tower HTTP',
+    hyper: 'Hyper',
     rust: 'Rust',
     rails: 'Rails',
     sinatra: 'Sinatra',

package/dist/analyzer/detectBackend.js

@@ -109,24 +109,28 @@ async function detectBackend(ctx) {
             evidence.push({ type: 'dependency', value: dep });
     }
     /** Rust, read from Cargo.toml. */
-    let namedRustFramework = false;
     for (const [framework, deps] of catalogue_1.RUST_BACKEND_FRAMEWORKS) {
         const hits = (0, detectContext_1.hasAnyRuntimeRustDep)(ctx, deps);
         if (!hits.length)
             continue;
-        namedRustFramework = true;
         frameworks.push(framework);
         for (const dep of hits)
             evidence.push({ type: 'dependency', value: dep });
     }
-    // Same reasoning as Go: a crate that serves requests from the standard library and a
-    // hand-rolled loop is still a backend, and a Cargo.toml alone is not.
-    if (!namedRustFramework
-        && languageShare(ctx, /\.rs$/) >= MINIMUM_BACKEND_SHARE
-        && ctx.files.all.some((f) => /(^|\/)Cargo\.toml$/.test(f))) {
-        frameworks.push('rust');
-        evidence.push({ type: 'note', value: 'a Cargo manifest with no web framework named in it' });
-    }
+    /**
+     * No fallback for Rust, and removing it is a correction of my own over-reach.
+     *
+     * This was written to mirror Go's, whose justification is that plenty of production
+     * services use `net/http` and nothing else. Rust's standard library has no HTTP
+     * server at all, so the mirror does not hold: a crate with no web framework is
+     * overwhelmingly a library, a parser or a command-line tool.
+     *
+     * ruff is the measurement. A linter with `Cargo.toml` at its root reported
+     * `backend: rust`, and "a backend disqualifies a library" then profiled it as a
+     * client application — so teaching this analyzer to read Rust made it worse at
+     * reading the best-known Rust project in the corpus. `hyper` joins the framework
+     * list instead: it is what a Rust service uses when it uses no framework.
+     */
     /** Ruby, read from the Gemfile. */
     let namedRubyFramework = false;
     for (const [framework, deps] of catalogue_1.RUBY_BACKEND_FRAMEWORKS) {
@@ -138,7 +142,23 @@ async function detectBackend(ctx) {
         for (const dep of hits)
             evidence.push({ type: 'dependency', value: dep });
     }
-    if (!namedRubyFramework && ctx.files.all.some((f) => /(^|\/)Gemfile$/.test(f))) {
+    /**
+     * A Gemfile is not a Ruby backend on its own.
+     *
+     * WordPress-iOS and BlueWallet both reported `backend: ruby`. Neither ships a Ruby
+     * server: both keep a Gemfile for fastlane and CocoaPods, which is how the iOS
+     * world runs its build. WordPress-iOS has 23 Ruby files among 2675 — under one per
+     * cent — and the backend it did not have then excluded it from the mobile profile,
+     * so an iOS application with 2649 Swift files was judged as a B2B SaaS and told it
+     * needed a health endpoint.
+     *
+     * The same share test Go already uses, and the reason Rust's fallback was removed
+     * outright a release ago: a language has to be a real part of what is written here
+     * before it names the backend.
+     */
+    if (!namedRubyFramework
+        && languageShare(ctx, /\.rb$/) >= MINIMUM_BACKEND_SHARE
+        && ctx.files.all.some((f) => /(^|\/)Gemfile$/.test(f))) {
         frameworks.push('ruby');
         evidence.push({ type: 'note', value: 'a Gemfile with no web framework in it' });
     }

package/dist/expectations/profileSignals.js

@@ -164,7 +164,23 @@ const RULES = [
          * Half is the line, and it sits in the gap between those two rather than in the
          * middle of a distribution.
          */
-        admissible: (f) => f.mobilePlatforms.length > 0 && f.mobileShare >= 0.5 && !f.tenancy,
+        /**
+         * A tenant word in a client model is not a tenant boundary.
+         *
+         * WordPress-iOS carries `organizationID` in `RemoteBlog.swift` and
+         * `RemoteReaderSiteInfo.swift` — data classes deserialised from WordPress.com's
+         * JSON. The application consumes an organization; it does not host one, and it
+         * could not: enforcing a boundary between tenants takes a server, and this is
+         * 2649 Swift files with none.
+         *
+         * It was excluded from the mobile profile on that word and judged as a B2B SaaS,
+         * which asked it for a health endpoint, security headers and a GDPR export
+         * route. Tenancy still disqualifies a phone application that ships a server
+         * alongside it, because then the boundary is the repository's to keep.
+         */
+        admissible: (f) => f.mobilePlatforms.length > 0
+            && f.mobileShare >= 0.5
+            && !(f.tenancy && f.productBackend),
         signals: [
             { identifies: true, label: 'a mobile project in the repository', weight: 5, holds: (f) => f.mobilePlatforms.length > 0 },
             {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@produtype/core",
-  "version": "0.70.0",
+  "version": "0.72.0",
   "description": "Deterministic CLI and library that analyzes a web application repository and reports how far it is from production-ready for the kind of product it is meant to be.",
   "license": "MIT",
   "bin": {