@suss/packs 0.35.1 → 0.37.0

package/dist/rails.js

@@ -29,7 +29,7 @@ import {
   symbolValue
 } from "@suss/adapter-ruby";
 
-// ../ir-core/dist/chunk-A46EUIKC.js
+// ../ir-core/dist/chunk-OROVMQY2.js
 import { z as z13 } from "zod";
 import { z as z12 } from "zod";
 import { z } from "zod";
@@ -257,7 +257,11 @@ var MessageBusSemanticsSchema = z5.object({
     "aws_kinesis",
     "aws_firehose",
     "gcp_pubsub",
+    // Job queues. The header says what their channel is.
     "bullmq",
+    "activejob",
+    "sidekiq",
+    "celery",
     "kafka",
     "nats",
     "cloudflare-queues",
@@ -273,6 +277,26 @@ var MessageBusSemanticsSchema = z5.object({
    */
   channel: z5.string().min(1).nullable()
 });
+var MESSAGES = { jobQueue: false };
+var JOBS = { jobQueue: true };
+var MESSAGE_BUS_TRAITS = {
+  aws_sqs: MESSAGES,
+  "aws.sns": MESSAGES,
+  s3: MESSAGES,
+  eventbridge: MESSAGES,
+  aws_kinesis: MESSAGES,
+  aws_firehose: MESSAGES,
+  gcp_pubsub: MESSAGES,
+  bullmq: JOBS,
+  activejob: JOBS,
+  sidekiq: JOBS,
+  celery: JOBS,
+  kafka: MESSAGES,
+  nats: MESSAGES,
+  "cloudflare-queues": MESSAGES,
+  "cloudflare-cron": MESSAGES,
+  "cloudflare-tail": MESSAGES
+};
 var messageBusSemantics = defineBoundarySemantics({
   name: "message-bus",
   schema: MessageBusSemanticsSchema,
@@ -289,6 +313,8 @@ var messageBusSemantics = defineBoundarySemantics({
      * the generic unmatched list leaves them out.
      */
     reportsUnpairedItself: true,
+    consumedAs: ["reads"],
+    unsettledJob: (semantics) => semantics.channel === null && MESSAGE_BUS_TRAITS[semantics.messageBus].jobQueue,
     /**
      * A channel that is null here can still pair. The dedicated pass
      * follows environment variable chains before comparing, so a
@@ -1070,6 +1096,7 @@ var runtimeConfigSemantics = defineBoundarySemantics({
     // comes from outside the code.
     leavesTheProcess: true,
     reportsUnpairedItself: false,
+    findingsAreReadsByName: true,
     identityKey: () => null,
     // A reader sees which deployable's environment this is. Code that
     // reads a variable does not say which deployable runs it, so a read
@@ -1309,7 +1336,21 @@ var SourceLocationSchema = z13.object({
    * project's `suss.json` gives it. Set only when the project lists its
    * modules, and then on every unit whose file is under a module's root.
    */
-  module: z13.string().optional()
+  module: z13.string().optional(),
+  /**
+   * The git repository the extract ran in. Summaries from several
+   * repositories can share a folder, and two of them can both have
+   * `src/index.ts::handler`; this says which one each came from, and
+   * which commit, so a link opens the file that was read. `path` is
+   * where `file` is measured from, relative to the repository's top.
+   * Absent outside a repository.
+   */
+  repository: z13.object({
+    name: z13.string(),
+    path: z13.string(),
+    remote: z13.string().optional(),
+    commit: z13.string().optional()
+  }).optional()
 });
 var BoundaryBindingSchema = z13.object({
   transport: z13.string(),
@@ -1401,6 +1442,13 @@ var SuppressionRuleSchema = z22.object({
    * only intent findings about a scenario with that title.
    */
   scenario: z22.string().optional(),
+  /**
+   * The deployments, by name, that a finding about one environment read
+   * is accepted for. The rule takes them off the finding's list, and
+   * the finding stays while any deployment it lists is left. Without
+   * this, a rule covers every deployment.
+   */
+  deployments: z22.array(z22.string().min(1)).min(1).optional(),
   /**
    * "narrow", the default, requires `kind` plus one of `boundary`,
    * `scenario`, `consumer.transitionId` or `provider.transitionId`, so
@@ -2657,7 +2705,8 @@ function railsFramework(options = {}) {
   const displayPathOf = (file) => path5.isAbsolute(file) ? path5.relative(railsRoot, file) : file;
   const engineRoots = () => expandPatterns(options.configDirectory, options.engineRoots);
   const extraRoutesFiles = () => expandPatterns(options.configDirectory, options.routesFiles);
-  const inflections = options.configDirectory === void 0 ? EMPTY_INFLECTIONS : readInflections(options.configDirectory);
+  const appRoot = options.configDirectory === void 0 ? void 0 : railsRoot;
+  const inflections = appRoot === void 0 ? EMPTY_INFLECTIONS : readInflections(appRoot);
   const acronyms = inflections.acronyms;
   const routesInput = () => ({
     routesFile: {
@@ -2685,7 +2734,7 @@ function railsFramework(options = {}) {
       ...options.baseClassNames ?? []
     ],
     root,
-    autoloadRoots: options.configDirectory === void 0 ? [] : readAutoloadRoots(options.configDirectory),
+    autoloadRoots: appRoot === void 0 ? [] : readAutoloadRoots(appRoot),
     pathConvention: "railsUnderscore",
     acronyms,
     ancestryRootClassNames: [...RAILS_ROOT_CLASS_NAMES],
@@ -2716,6 +2765,7 @@ function railsFramework(options = {}) {
     inflections,
     // An action reads the request through these, and is handed nothing.
     requestAccessors: ["params", "request"],
+    blankToNil: ["presence"],
     // Rails merges the path, the query string and the body into `params`,
     // so an action's read of one cannot be told from the others and all
     // of them are spelled `params`.
@@ -2723,6 +2773,7 @@ function railsFramework(options = {}) {
       headers: { path: ["request", "headers"], saysWhichField: true },
       params: { path: ["params"], saysWhichField: true }
     },
+    bootTemplates: () => configTemplates(railsRoot),
     // These files change an action's binding without being walked, so the
     // cache key has to list them. This runs before the grammar loads, so
     // nothing here parses Ruby.
@@ -2731,10 +2782,7 @@ function railsFramework(options = {}) {
       ...drawableRoutesFiles(routesFile),
       ...engineRoots().flatMap(engineSourceFiles),
       ...extraRoutesFiles(),
-      ...options.configDirectory === void 0 ? [] : [
-        ...inflectionFiles(options.configDirectory),
-        ...applicationFile(options.configDirectory)
-      ]
+      ...appRoot === void 0 ? [] : [...inflectionFiles(appRoot), ...applicationFile(appRoot)]
     ]
   };
 }
@@ -2743,6 +2791,13 @@ function expandPatterns(configDirectory, patterns) {
     (pattern) => expandPathPattern(resolveAgainst(configDirectory, pattern))
   );
 }
+function configTemplates(railsRoot) {
+  const directory = path5.join(railsRoot, "config");
+  if (!fs5.existsSync(directory)) {
+    return [];
+  }
+  return fs5.readdirSync(directory, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".yml")).map((entry) => path5.join(directory, entry.name)).sort();
+}
 function drawableRoutesFiles(routesFile) {
   const directory = drawDirectoryOf(routesFile);
   if (!fs5.existsSync(directory)) {
@@ -2759,7 +2814,7 @@ var declares = {
     { ecosystem: "rubygems", name: "rails" },
     { ecosystem: "rubygems", name: "railties" }
   ],
-  reads: "Rails controller actions (Ruby), bound to the method and path `config/routes.rb` gives each one. An action the routes file does not reach is still discovered, with no boundary.",
+  reads: "Rails controller actions (Ruby), bound to the method and path `config/routes.rb` gives each one. An action the routes file does not reach is still discovered, with no boundary. The YAML files under `config/` that Rails renders through ERB at boot are read as code that runs when the app loads.",
   configuration: {
     file: "suss.rails.json",
     example: {
@@ -2770,7 +2825,8 @@ var declares = {
     },
     required: false,
     why: "the app directory a controller is defined under and the routes file suss reads each action's method and path from; rails new scaffolds both at these paths. engineRoots lists where the project keeps engines it mounts, and routesFiles any other file that adds routes, when it has either.",
-    defaults: { root: "app", routesFile: "config/routes.rb" }
+    defaults: { root: "app", routesFile: "config/routes.rb" },
+    paths: ["root", "routesFile", "engineRoots", "routesFiles"]
   }
 };
 var index_default = railsFramework;

package/dist/sidekiq.d.ts

@@ -0,0 +1 @@
+export { declares, default, optionsSchema } from '@suss/framework-sidekiq';

package/dist/sidekiq.js

@@ -0,0 +1,37 @@
+// ../framework/sidekiq/dist/index.js
+import { z } from "zod";
+var optionsSchema = z.object({}).strict();
+function sidekiqFramework(_options = {}) {
+  return {
+    name: "sidekiq",
+    protocol: "sidekiq",
+    discovery: [],
+    jobs: [
+      {
+        type: "jobClasses",
+        messageBus: "sidekiq",
+        baseClasses: [],
+        modules: ["Sidekiq::Job", "Sidekiq::Worker"],
+        performMethod: "perform",
+        // `perform_in` and `perform_at` take the delay or the time first.
+        enqueueMethods: { perform_async: 0, perform_in: 1, perform_at: 1 },
+        optionMethods: ["set"],
+        queueDeclarations: [
+          { call: "sidekiq_options", queue: { at: 0, keyword: "queue" } }
+        ]
+      }
+    ]
+  };
+}
+var declares = {
+  kind: "framework",
+  package: "@suss/framework-sidekiq",
+  dependencies: [{ ecosystem: "rubygems", name: "sidekiq" }],
+  reads: "Sidekiq jobs (Ruby): each job's perform is a consumer of a sidekiq channel, and perform_async, perform_in or perform_at a send to it."
+};
+var index_default = sidekiqFramework;
+export {
+  declares,
+  index_default as default,
+  optionsSchema
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suss/packs",
-  "version": "0.35.1",
+  "version": "0.37.0",
   "type": "module",
   "description": "Every pack suss ships in one install, so it can read Express, Hono, NestJS, FastAPI, Rails, Prisma, OpenAPI and the rest.",
   "keywords": [
@@ -49,6 +49,14 @@
       "types": "./dist/aws-lambda.d.ts",
       "import": "./dist/aws-lambda.js"
     },
+    "./aws-lambda-python": {
+      "types": "./dist/aws-lambda-python.d.ts",
+      "import": "./dist/aws-lambda-python.js"
+    },
+    "./aws-lambda-ruby": {
+      "types": "./dist/aws-lambda-ruby.d.ts",
+      "import": "./dist/aws-lambda-ruby.js"
+    },
     "./aws-s3": {
       "types": "./dist/aws-s3.d.ts",
       "import": "./dist/aws-s3.js"
@@ -85,6 +93,14 @@
       "types": "./dist/bigquery-python.d.ts",
       "import": "./dist/bigquery-python.js"
     },
+    "./celery": {
+      "types": "./dist/celery.d.ts",
+      "import": "./dist/celery.js"
+    },
+    "./bullmq": {
+      "types": "./dist/bullmq.d.ts",
+      "import": "./dist/bullmq.js"
+    },
     "./cloudflare-workers": {
       "types": "./dist/cloudflare-workers.d.ts",
       "import": "./dist/cloudflare-workers.js"
@@ -181,6 +197,14 @@
       "types": "./dist/rspec.d.ts",
       "import": "./dist/rspec.js"
     },
+    "./activejob": {
+      "types": "./dist/activejob.d.ts",
+      "import": "./dist/activejob.js"
+    },
+    "./sidekiq": {
+      "types": "./dist/sidekiq.d.ts",
+      "import": "./dist/sidekiq.js"
+    },
     "./factory-bot": {
       "types": "./dist/factory-bot.d.ts",
       "import": "./dist/factory-bot.js"
@@ -267,15 +291,16 @@
   },
   "dependencies": {
     "@mrleebo/prisma-ast": "^0.15.0",
-    "@suss/adapter-python": "0.35.1",
-    "@suss/adapter-ruby": "0.35.1",
-    "@suss/adapter-typescript": "0.35.1",
-    "@suss/behavioral-ir": "0.35.1",
-    "@suss/contract-graphql": "0.35.1",
-    "@suss/extractor": "0.35.1",
-    "@suss/manifest-aws": "0.35.1",
-    "@suss/recognize": "0.35.1",
-    "@suss/sql": "0.35.1",
+    "@suss/adapter-python": "0.37.0",
+    "@suss/adapter-ruby": "0.37.0",
+    "@suss/adapter-typescript": "0.37.0",
+    "@suss/behavioral-ir": "0.37.0",
+    "@suss/contract-graphql": "0.37.0",
+    "@suss/contract-serverless": "0.37.0",
+    "@suss/extractor": "0.37.0",
+    "@suss/manifest-aws": "0.37.0",
+    "@suss/recognize": "0.37.0",
+    "@suss/sql": "0.37.0",
     "zod": "^4.0.0"
   },
   "devDependencies": {
@@ -300,6 +325,8 @@
     "@suss/framework-bigquery": "*",
     "@suss/framework-bigquery-python": "*",
     "@suss/framework-bigquery-ruby": "*",
+    "@suss/framework-bullmq": "*",
+    "@suss/framework-celery": "*",
     "@suss/framework-cloudflare-workers": "*",
     "@suss/framework-drizzle": "*",
     "@suss/framework-express": "*",
@@ -318,7 +345,9 @@
     "@suss/framework-pg": "*",
     "@suss/framework-pg-ruby": "*",
     "@suss/framework-rspec": "*",
+    "@suss/framework-activejob": "*",
     "@suss/framework-factory-bot": "*",
+    "@suss/framework-sidekiq": "*",
     "@suss/framework-fabrication": "*",
     "@suss/framework-minitest": "*",
     "@suss/framework-prisma": "*",