graphban-cli 0.8.0__tar.gz → 0.8.1__tar.gz

{graphban_cli-0.8.0 → graphban_cli-0.8.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: graphban-cli
-Version: 0.8.0
+Version: 0.8.1
 Summary: gban — a Graphban client for the human at a terminal
 Project-URL: Homepage, https://github.com/asc-me/graphban
 Project-URL: Repository, https://github.com/asc-me/graphban
@@ -202,8 +202,10 @@ What it reads:
 
 - Compose files (`compose.yml`, `docker-compose.yml`, and the `compose.*` / `docker-compose.*` variants): a service with `build` is a deployable, a service with only `image` is infrastructure, and `depends_on` is an edge. `environment` contributes variable **names** and, when a value is a literal URL, the bare host.
 - Dockerfiles (`Dockerfile`, `Dockerfile.*`, `*.Dockerfile`), for the deployable they sit in and for a `FROM` image the table knows.
-- Dependency manifests (`package.json`, `pyproject.toml`, `requirements*.txt`, `go.mod`, `Cargo.toml`, `Gemfile`), matched against the known-SDK table and attributed to the deployable whose directory contains them.
-- `.env.example` only. A real `.env` is not a template and is not opened. Source files are not scanned.
+- Dependency manifests (`package.json`, `pyproject.toml`, `requirements*.txt`, `go.mod`, `Cargo.toml`, `Gemfile`). Every `package.json` and `Cargo.toml` is a component named from the manifest's `name`. The known-SDK table adds edges; it is not what decides whether the component exists. `file:` and `workspace:` dependencies (and a Cargo `path` or `workspace = true`) are internal edges. Other manifests still become a component only when a dependency hits the table, and that edge is attributed to the component whose directory contains the file.
+- Deploy manifests (`vercel.json`, `railway.json`, `railway.toml`, `fly.toml`, `netlify.toml`, `render.yaml`) are a platform node. The file body is not stored.
+- `.env.example` only. A real `.env` is not a template and is not opened. A commented `KEY=` is read and the edge is `state: documented` rather than `set`. `*_TOKEN`, `*_CLIENT_ID`, and `*_CLIENT_SECRET` count, and so do `*_BASE` and `*_ISSUER` when the value is a URL. A passphrase (`AUTH_SECRET`, `ENCRYPTION_KEY`) is not an edge unless a table row names it. Values stay out of the record.
+- Source files are not scanned. There is no source-HTTP pass in this command. stderr always prints a coverage line: files read, files that produced nothing, commented template keys skipped, and that source was not scanned. Exit 0 means the record was built.
 
 The known-SDK table ships at `cli/src/gban/data/stack_sdks.toml` and is versioned with `gban`. A checkout may add rows in `.graphban/stack-sdks.toml` (same shape); those rows are consulted first.
 

{graphban_cli-0.8.0 → graphban_cli-0.8.1}/README.md

@@ -187,8 +187,10 @@ What it reads:
 
 - Compose files (`compose.yml`, `docker-compose.yml`, and the `compose.*` / `docker-compose.*` variants): a service with `build` is a deployable, a service with only `image` is infrastructure, and `depends_on` is an edge. `environment` contributes variable **names** and, when a value is a literal URL, the bare host.
 - Dockerfiles (`Dockerfile`, `Dockerfile.*`, `*.Dockerfile`), for the deployable they sit in and for a `FROM` image the table knows.
-- Dependency manifests (`package.json`, `pyproject.toml`, `requirements*.txt`, `go.mod`, `Cargo.toml`, `Gemfile`), matched against the known-SDK table and attributed to the deployable whose directory contains them.
-- `.env.example` only. A real `.env` is not a template and is not opened. Source files are not scanned.
+- Dependency manifests (`package.json`, `pyproject.toml`, `requirements*.txt`, `go.mod`, `Cargo.toml`, `Gemfile`). Every `package.json` and `Cargo.toml` is a component named from the manifest's `name`. The known-SDK table adds edges; it is not what decides whether the component exists. `file:` and `workspace:` dependencies (and a Cargo `path` or `workspace = true`) are internal edges. Other manifests still become a component only when a dependency hits the table, and that edge is attributed to the component whose directory contains the file.
+- Deploy manifests (`vercel.json`, `railway.json`, `railway.toml`, `fly.toml`, `netlify.toml`, `render.yaml`) are a platform node. The file body is not stored.
+- `.env.example` only. A real `.env` is not a template and is not opened. A commented `KEY=` is read and the edge is `state: documented` rather than `set`. `*_TOKEN`, `*_CLIENT_ID`, and `*_CLIENT_SECRET` count, and so do `*_BASE` and `*_ISSUER` when the value is a URL. A passphrase (`AUTH_SECRET`, `ENCRYPTION_KEY`) is not an edge unless a table row names it. Values stay out of the record.
+- Source files are not scanned. There is no source-HTTP pass in this command. stderr always prints a coverage line: files read, files that produced nothing, commented template keys skipped, and that source was not scanned. Exit 0 means the record was built.
 
 The known-SDK table ships at `cli/src/gban/data/stack_sdks.toml` and is versioned with `gban`. A checkout may add rows in `.graphban/stack-sdks.toml` (same shape); those rows are consulted first.
 

{graphban_cli-0.8.0 → graphban_cli-0.8.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "graphban-cli"
-version = "0.8.0"
+version = "0.8.1"
 description = "gban — a Graphban client for the human at a terminal"
 readme = "README.md"
 requires-python = ">=3.12"

{graphban_cli-0.8.0 → graphban_cli-0.8.1}/src/gban/cli.py

@@ -433,12 +433,14 @@ def cmd_stack(args) -> int:
     start = Path(args.repo).expanduser() if args.repo else Path.cwd()
     project = (config.resolve(args.project, config.PROJECT_ENV, "project") or "").strip()
     try:
-        record, warnings = stackmap.build_record(start, project_id=project)
+        record, warnings, coverage = stackmap.build_record(start, project_id=project)
     except stackmap.MapError as exc:
         print(f"{PROG}: {exc}", file=sys.stderr)
         return EXIT_REFUSED
     for warning in warnings:
         print(f"{PROG}: {warning}", file=sys.stderr)
+    # Always. A three-node map that exits 0 is not a finished topology.
+    print(f"{PROG}: {coverage}", file=sys.stderr)
     text = stackmap.canonical(record)
     if args.dry_run:
         sys.stdout.write(text)

{graphban_cli-0.8.0 → graphban_cli-0.8.1}/src/gban/data/stack_sdks.toml

@@ -148,6 +148,27 @@ label = "SendGrid"
 protocol = "https"
 domains = ["sendgrid.com", "sendgrid.net"]
 
+[[sdk]]
+id = "resend"
+packages = ["resend"]
+node = "resend"
+group = "external"
+kind = ""
+label = "Resend"
+protocol = "https"
+domains = ["resend.com"]
+
+[[sdk]]
+id = "vercel"
+packages = ["@vercel/functions"]
+prefix = "@vercel/"
+node = "vercel"
+group = "external"
+kind = ""
+label = "Vercel"
+protocol = "https"
+domains = ["vercel.com", "vercel.app"]
+
 [[sdk]]
 id = "supabase"
 packages = ["supabase", "@supabase/supabase-js"]
@@ -175,3 +196,13 @@ group = "infrastructure"
 kind = "redis"
 label = "Redis"
 protocol = "redis"
+
+[[env]]
+id = "creem"
+names = ["CREEM_API_KEY"]
+node = "creem"
+group = "external"
+kind = ""
+label = "Creem"
+protocol = "https"
+domains = ["creem.io"]