@suss/packs 0.35.1 → 0.36.0

package/dist/node.js

@@ -6,7 +6,7 @@ import {
 } from "ts-morph";
 import {
   declarationsBehind,
-  findEnclosingFunction,
+  dottedPathOf,
   functionTargetOf,
   isDefaultedAt,
   stringValueOf,
@@ -36,6 +36,7 @@ import { functionCallBinding } from "@suss/behavioral-ir";
 import { Node as Node4 } from "ts-morph";
 import { writtenPayloadOf } from "@suss/adapter-typescript";
 import { ioBinding } from "@suss/behavioral-ir";
+import { callSiteKey } from "@suss/extractor";
 var RECOGNITION = "@suss/runtime-node";
 function configBinding(where) {
   return runtimeConfigBinding({ recognition: RECOGNITION, ...where });
@@ -295,98 +296,46 @@ function schemaEnvReadsInside(callee, resolution) {
   SCHEMA_READS_INSIDE.set(callee, found);
   return found;
 }
-var readName = (name) => `process.env.${name}`;
-function isProcessEnv(node) {
+var ENVIRONMENT_OBJECTS = [
+  "process.env",
+  "import.meta.env"
+];
+var PROCESS_ENV = "process.env";
+var IMPORT_META_ENV = "import.meta.env";
+var VITE_BUILD_KEYS = /* @__PURE__ */ new Set(["MODE", "BASE_URL", "PROD", "DEV", "SSR"]);
+var readName = (read) => read.name === null ? read.node.getText() : `${read.object}.${read.name}`;
+function environmentSpelling(node) {
   if (!N2.isPropertyAccessExpression(node) || node.getName() !== "env") {
-    return false;
+    return null;
   }
-  const root = node.getExpression();
-  return N2.isIdentifier(root) && root.getText() === "process";
+  const path = dottedPathOf(node);
+  return path !== null && ENVIRONMENT_OBJECTS.includes(path) ? path : null;
 }
 function dottedRead(node) {
-  if (!isProcessEnv(node.getExpression())) {
+  const object = environmentSpelling(node.getExpression());
+  if (object === null) {
     return [];
   }
-  return [{ name: node.getName(), defaulted: isDefaultedAt(node), node }];
+  return [
+    { name: node.getName(), defaulted: isDefaultedAt(node), node, object }
+  ];
 }
-function bracketRead(access, resolution) {
+function bracketRead(access, object) {
   const argument = access.getArgumentExpression();
   if (argument === void 0) {
     return [];
   }
-  if (N2.isStringLiteral(argument) || N2.isNoSubstitutionTemplateLiteral(argument)) {
-    const name = argument.getLiteralValue();
-    if (name.length === 0) {
-      return [];
-    }
-    return [{ name, defaulted: isDefaultedAt(access), node: access }];
-  }
-  if (N2.isIdentifier(argument)) {
-    return readsThroughParameter(access, argument, resolution);
-  }
-  return [];
-}
-var CALLER_LOOKUPS = /* @__PURE__ */ new WeakMap();
-function readsThroughParameter(access, index, resolution) {
-  const remembered = CALLER_LOOKUPS.get(access);
-  if (remembered !== void 0) {
-    return remembered;
-  }
-  const found = callerLiteralReads(access, index, resolution);
-  CALLER_LOOKUPS.set(access, found);
-  return found;
-}
-function callerLiteralReads(access, index, resolution) {
-  if (resolution === void 0) {
-    return [];
-  }
-  const enclosing = findEnclosingFunction(access);
-  if (enclosing === null) {
-    return [];
-  }
-  const start = enclosing.getParameters().find((parameter) => parameter.getName() === index.getText());
-  if (start === void 0) {
-    return [];
-  }
   const defaulted = isDefaultedAt(access);
-  const reads = [];
-  const pending = [start];
-  const taken = /* @__PURE__ */ new Set();
-  while (pending.length > 0) {
-    const wanted = pending.pop();
-    if (taken.has(wanted)) {
-      continue;
-    }
-    taken.add(wanted);
-    for (const passed of resolution.argumentsPassedTo(wanted)) {
-      const literal = stringValueOf(passed.argument, resolution);
-      if (literal !== null && literal.length > 0) {
-        reads.push({ name: literal, defaulted, node: passed.call });
-        continue;
-      }
-      const forwarded = forwardedParameter(passed.argument, passed.call);
-      if (forwarded !== null) {
-        pending.push(forwarded);
-      }
-    }
-  }
-  return reads;
-}
-function forwardedParameter(passed, call) {
-  if (!N2.isIdentifier(passed)) {
-    return null;
-  }
-  const caller = findEnclosingFunction(call);
-  if (caller === null) {
-    return null;
+  if (!N2.isStringLiteral(argument) && !N2.isNoSubstitutionTemplateLiteral(argument)) {
+    return [{ name: null, defaulted, node: access, object }];
   }
-  const behind = symbolBehind(passed)?.getValueDeclaration();
-  if (behind === void 0 || !N2.isParameterDeclaration(behind)) {
-    return null;
+  const name = argument.getLiteralValue();
+  if (name.length === 0) {
+    return [];
   }
-  return behind.getParent() === caller ? behind : null;
+  return [{ name, defaulted, node: access, object }];
 }
-function bindingRead(element) {
+function bindingRead(element, object) {
   if (element.getDotDotDotToken() !== void 0) {
     return [];
   }
@@ -404,24 +353,25 @@ function bindingRead(element) {
       // A binding default covers a missing variable the same way `??`
       // does after a dotted read.
       defaulted: element.getInitializer() !== void 0 || isDefaultedAt(element),
-      node: element
+      node: element,
+      object
     }
   ];
 }
-function destructuredReads(declaration) {
+function destructuredReads(declaration, object) {
   const pattern = declaration.getNameNode();
   if (!N2.isObjectBindingPattern(pattern)) {
     return [];
   }
-  return pattern.getElements().flatMap(bindingRead);
+  return pattern.getElements().flatMap((element) => bindingRead(element, object));
 }
-function readsThroughEnvObject(envNode, resolution) {
+function readsThroughEnvObject(envNode, object) {
   const parent = envNode.getParent();
   if (N2.isElementAccessExpression(parent)) {
-    return bracketRead(parent, resolution);
+    return bracketRead(parent, object);
   }
   if (N2.isVariableDeclaration(parent)) {
-    return destructuredReads(parent);
+    return destructuredReads(parent, object);
   }
   return [];
 }
@@ -433,7 +383,8 @@ function envReadsAt(node, resolution) {
   if (!N2.isPropertyAccessExpression(node)) {
     return [];
   }
-  return isProcessEnv(node) ? readsThroughEnvObject(node, resolution) : dottedRead(node);
+  const object = environmentSpelling(node);
+  return object === null ? dottedRead(node) : readsThroughEnvObject(node, object);
 }
 function readsThroughHelperCall(call, resolution) {
   const callee = functionBehindCallee(call.getExpression(), resolution);
@@ -442,14 +393,15 @@ function readsThroughHelperCall(call, resolution) {
   }
   const sitesNaming = namesReadAtSites(callee, resolution);
   const parameters = callee.getParameters();
-  const defaultedByName = /* @__PURE__ */ new Map();
+  const byName = /* @__PURE__ */ new Map();
   call.getArguments().forEach((passed, at) => {
     const parameter = parameters[at];
     if (parameter === void 0) {
       return;
     }
     const sites = sitesNaming(parameter) ?? directEnvReads(callee, parameter);
-    if (sites.length === 0) {
+    const [first] = sites;
+    if (first === void 0 || handsOnParameter(passed)) {
       return;
     }
     const literal = stringValueOf(passed, resolution);
@@ -457,25 +409,40 @@ function readsThroughHelperCall(call, resolution) {
       return;
     }
     const everywhere = sites.every(isDefaultedAt);
-    defaultedByName.set(
-      literal,
-      (defaultedByName.get(literal) ?? true) && everywhere
-    );
+    const known = byName.get(literal);
+    byName.set(literal, {
+      defaulted: (known?.defaulted ?? true) && everywhere,
+      object: known?.object ?? objectReadAt(first)
+    });
   });
   const wrapped = isDefaultedAt(call);
   return [
-    ...[...defaultedByName].map(([name, atSites]) => ({
+    ...[...byName].map(([name, read]) => ({
       name,
-      defaulted: atSites || wrapped,
-      node: call
+      defaulted: read.defaulted || wrapped,
+      node: call,
+      object: read.object
     })),
     // A config module often parses its schema inside a function that
     // every handler calls, so each call reports the keys that parse reads.
     ...anchoredAt(schemaEnvReadsInside(callee, resolution), call)
   ];
 }
+function handsOnParameter(passed) {
+  if (!N2.isIdentifier(passed)) {
+    return false;
+  }
+  const declared = symbolBehind(passed)?.getValueDeclaration();
+  return declared !== void 0 && N2.isParameterDeclaration(declared);
+}
+function objectReadAt(site) {
+  if (!N2.isElementAccessExpression(site)) {
+    return PROCESS_ENV;
+  }
+  return environmentSpelling(site.getExpression()) ?? PROCESS_ENV;
+}
 function anchoredAt(reads, node) {
-  return reads.map((read) => ({ ...read, node }));
+  return reads.map((read) => ({ ...read, node, object: PROCESS_ENV }));
 }
 function functionBehindCallee(callee, resolution) {
   const nameNode = N2.isPropertyAccessExpression(callee) ? callee.getNameNode() : callee;
@@ -524,7 +491,7 @@ function directEnvRead(fn, parameter) {
   for (const access of fn.getDescendantsOfKind(
     SyntaxKind2.ElementAccessExpression
   )) {
-    if (!isProcessEnv(access.getExpression())) {
+    if (environmentSpelling(access.getExpression()) === null) {
       continue;
     }
     const argument = access.getArgumentExpression();
@@ -534,11 +501,17 @@ function directEnvRead(fn, parameter) {
   }
   return null;
 }
+function readsBuildKey(read) {
+  return read.object === IMPORT_META_ENV && read.name !== null && VITE_BUILD_KEYS.has(read.name);
+}
 function configReadEffect(read, where) {
+  if (readsBuildKey(read)) {
+    return opaqueRuntimeRead(readName(read));
+  }
   return {
     type: "interaction",
     binding: configBinding(where),
-    callee: readName(read.name),
+    callee: readName(read),
     interaction: {
       class: "config-read",
       name: read.name,
@@ -561,6 +534,7 @@ function envVarRecognizer(opts = {}) {
   );
 }
 var FILE_LOCATION_GLOBALS = /* @__PURE__ */ new Set(["__dirname", "__filename"]);
+var ENVIRONMENT_PROPERTY = "env";
 var importMetaRecognizer = (access, _ctx) => {
   const node = access;
   if (!Node.isPropertyAccessExpression(node)) {
@@ -574,6 +548,9 @@ var importMetaRecognizer = (access, _ctx) => {
   if (keyword === void 0 || inner.getNameNode().getText() !== "meta") {
     return null;
   }
+  if (node.getName() === ENVIRONMENT_PROPERTY) {
+    return null;
+  }
   return [opaqueRuntimeRead(node.getText())];
 };
 var fileLocationRecognizer = (access, _ctx) => {
@@ -868,14 +845,13 @@ var streamWriteRecognizer = (call, ctx) => {
     type: "interaction",
     binding: ioBinding({ recognition: RECOGNITION2, target }),
     callee: callee.getText(),
-    groupId: callSiteId(written),
     interaction: {
       class: "stream-write",
       payload: payload.shape,
       serialized: payload.serialized
     }
   };
-  return [effect];
+  return [{ ...effect, groupId: callSiteKey(effect) }];
 };
 function targetOf(receiver, method, resolution) {
   const consoleStream = Object.hasOwn(CONSOLE_STREAMS, method) ? CONSOLE_STREAMS[method] : void 0;
@@ -904,11 +880,7 @@ function viaParameter(receiver, annotations, resolution) {
 function streamName(path) {
   return path.slice(path.lastIndexOf(".") + 1);
 }
-function callSiteId(call) {
-  const { line, column } = call.getSourceFile().getLineAndColumnAtPos(call.getStart());
-  return `${line}:${column}`;
-}
-var PACK_VERSION = "0.3.0";
+var PACK_VERSION = "0.4.0";
 var optionsSchema = z.object({
   /**
    * The kind of deployment that runtime-config reads such as
@@ -955,7 +927,7 @@ function nodeRuntimePack(options = {}) {
     argumentParsers: PARSE_ARGS,
     inputMapping: { type: "positionalParams", params: [] },
     invocationRecognizers: [schedulingRecognizer, streamWriteRecognizer],
-    environmentObjects: ["process.env"],
+    environmentObjects: [...ENVIRONMENT_OBJECTS],
     streamObjects: PROCESS_STREAMS,
     accessRecognizers: [
       // envRecognizer handles `process.env.X` and processRecognizer skips
@@ -973,7 +945,7 @@ var declares = {
   package: "@suss/runtime-node",
   dependencies: [],
   shippedWith: "typescript",
-  reads: "Node.js runtime primitives, scheduling and the `process` surface, each recorded as an interaction effect. A `process.env.X` read, or a key of a schema parsed against `process.env`, becomes a config-read interaction. A module-loading global becomes a metadata-read interaction. A `console` call or a write to `process.stdout` or `process.stderr` becomes a stream-write interaction on the stream it goes to."
+  reads: "Node.js runtime primitives, scheduling and the `process` surface, each recorded as an interaction effect. A `process.env.X` or `import.meta.env.X` read, or a key of a schema parsed against either, becomes a config-read interaction. A module-loading global becomes a metadata-read interaction. A `console` call or a write to `process.stdout` or `process.stderr` becomes a stream-write interaction on the stream it goes to."
 };
 var index_default = nodeRuntimePack;
 export {

package/dist/rails.js

@@ -29,7 +29,7 @@ import {
   symbolValue
 } from "@suss/adapter-ruby";
 
-// ../ir-core/dist/chunk-A46EUIKC.js
+// ../ir-core/dist/chunk-7IOGU4OC.js
 import { z as z13 } from "zod";
 import { z as z12 } from "zod";
 import { z } from "zod";
@@ -1309,7 +1309,21 @@ var SourceLocationSchema = z13.object({
    * project's `suss.json` gives it. Set only when the project lists its
    * modules, and then on every unit whose file is under a module's root.
    */
-  module: z13.string().optional()
+  module: z13.string().optional(),
+  /**
+   * The git repository the extract ran in. Summaries from several
+   * repositories can share a folder, and two of them can both have
+   * `src/index.ts::handler`; this says which one each came from, and
+   * which commit, so a link opens the file that was read. `path` is
+   * where `file` is measured from, relative to the repository's top.
+   * Absent outside a repository.
+   */
+  repository: z13.object({
+    name: z13.string(),
+    path: z13.string(),
+    remote: z13.string().optional(),
+    commit: z13.string().optional()
+  }).optional()
 });
 var BoundaryBindingSchema = z13.object({
   transport: z13.string(),
@@ -2657,7 +2671,8 @@ function railsFramework(options = {}) {
   const displayPathOf = (file) => path5.isAbsolute(file) ? path5.relative(railsRoot, file) : file;
   const engineRoots = () => expandPatterns(options.configDirectory, options.engineRoots);
   const extraRoutesFiles = () => expandPatterns(options.configDirectory, options.routesFiles);
-  const inflections = options.configDirectory === void 0 ? EMPTY_INFLECTIONS : readInflections(options.configDirectory);
+  const appRoot = options.configDirectory === void 0 ? void 0 : railsRoot;
+  const inflections = appRoot === void 0 ? EMPTY_INFLECTIONS : readInflections(appRoot);
   const acronyms = inflections.acronyms;
   const routesInput = () => ({
     routesFile: {
@@ -2685,7 +2700,7 @@ function railsFramework(options = {}) {
       ...options.baseClassNames ?? []
     ],
     root,
-    autoloadRoots: options.configDirectory === void 0 ? [] : readAutoloadRoots(options.configDirectory),
+    autoloadRoots: appRoot === void 0 ? [] : readAutoloadRoots(appRoot),
     pathConvention: "railsUnderscore",
     acronyms,
     ancestryRootClassNames: [...RAILS_ROOT_CLASS_NAMES],
@@ -2723,6 +2738,7 @@ function railsFramework(options = {}) {
       headers: { path: ["request", "headers"], saysWhichField: true },
       params: { path: ["params"], saysWhichField: true }
     },
+    bootTemplates: () => configTemplates(railsRoot),
     // These files change an action's binding without being walked, so the
     // cache key has to list them. This runs before the grammar loads, so
     // nothing here parses Ruby.
@@ -2731,10 +2747,7 @@ function railsFramework(options = {}) {
       ...drawableRoutesFiles(routesFile),
       ...engineRoots().flatMap(engineSourceFiles),
       ...extraRoutesFiles(),
-      ...options.configDirectory === void 0 ? [] : [
-        ...inflectionFiles(options.configDirectory),
-        ...applicationFile(options.configDirectory)
-      ]
+      ...appRoot === void 0 ? [] : [...inflectionFiles(appRoot), ...applicationFile(appRoot)]
     ]
   };
 }
@@ -2743,6 +2756,13 @@ function expandPatterns(configDirectory, patterns) {
     (pattern) => expandPathPattern(resolveAgainst(configDirectory, pattern))
   );
 }
+function configTemplates(railsRoot) {
+  const directory = path5.join(railsRoot, "config");
+  if (!fs5.existsSync(directory)) {
+    return [];
+  }
+  return fs5.readdirSync(directory, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".yml")).map((entry) => path5.join(directory, entry.name)).sort();
+}
 function drawableRoutesFiles(routesFile) {
   const directory = drawDirectoryOf(routesFile);
   if (!fs5.existsSync(directory)) {
@@ -2759,7 +2779,7 @@ var declares = {
     { ecosystem: "rubygems", name: "rails" },
     { ecosystem: "rubygems", name: "railties" }
   ],
-  reads: "Rails controller actions (Ruby), bound to the method and path `config/routes.rb` gives each one. An action the routes file does not reach is still discovered, with no boundary.",
+  reads: "Rails controller actions (Ruby), bound to the method and path `config/routes.rb` gives each one. An action the routes file does not reach is still discovered, with no boundary. The YAML files under `config/` that Rails renders through ERB at boot are read as code that runs when the app loads.",
   configuration: {
     file: "suss.rails.json",
     example: {
@@ -2770,7 +2790,8 @@ var declares = {
     },
     required: false,
     why: "the app directory a controller is defined under and the routes file suss reads each action's method and path from; rails new scaffolds both at these paths. engineRoots lists where the project keeps engines it mounts, and routesFiles any other file that adds routes, when it has either.",
-    defaults: { root: "app", routesFile: "config/routes.rb" }
+    defaults: { root: "app", routesFile: "config/routes.rb" },
+    paths: ["root", "routesFile", "engineRoots", "routesFiles"]
   }
 };
 var index_default = railsFramework;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suss/packs",
-  "version": "0.35.1",
+  "version": "0.36.0",
   "type": "module",
   "description": "Every pack suss ships in one install, so it can read Express, Hono, NestJS, FastAPI, Rails, Prisma, OpenAPI and the rest.",
   "keywords": [
@@ -49,6 +49,14 @@
       "types": "./dist/aws-lambda.d.ts",
       "import": "./dist/aws-lambda.js"
     },
+    "./aws-lambda-python": {
+      "types": "./dist/aws-lambda-python.d.ts",
+      "import": "./dist/aws-lambda-python.js"
+    },
+    "./aws-lambda-ruby": {
+      "types": "./dist/aws-lambda-ruby.d.ts",
+      "import": "./dist/aws-lambda-ruby.js"
+    },
     "./aws-s3": {
       "types": "./dist/aws-s3.d.ts",
       "import": "./dist/aws-s3.js"
@@ -267,15 +275,16 @@
   },
   "dependencies": {
     "@mrleebo/prisma-ast": "^0.15.0",
-    "@suss/adapter-python": "0.35.1",
-    "@suss/adapter-ruby": "0.35.1",
-    "@suss/adapter-typescript": "0.35.1",
-    "@suss/behavioral-ir": "0.35.1",
-    "@suss/contract-graphql": "0.35.1",
-    "@suss/extractor": "0.35.1",
-    "@suss/manifest-aws": "0.35.1",
-    "@suss/recognize": "0.35.1",
-    "@suss/sql": "0.35.1",
+    "@suss/adapter-python": "0.36.0",
+    "@suss/adapter-ruby": "0.36.0",
+    "@suss/adapter-typescript": "0.36.0",
+    "@suss/behavioral-ir": "0.36.0",
+    "@suss/contract-graphql": "0.36.0",
+    "@suss/contract-serverless": "0.36.0",
+    "@suss/extractor": "0.36.0",
+    "@suss/manifest-aws": "0.36.0",
+    "@suss/recognize": "0.36.0",
+    "@suss/sql": "0.36.0",
     "zod": "^4.0.0"
   },
   "devDependencies": {