@neondatabase/config 1.9.5 → 1.10.0

package/README.md

@@ -210,6 +210,8 @@ Two invariants are enforced **both** at author time (TypeScript) and at runtime
 
 The auth wiring (`authProvider`, `jwksUrl`, …) is set when the Data API is first **enabled** and is immutable afterwards. The runtime `settings` are reconcilable: changing them is treated as an **update** and requires `updateExisting: true` (`apply`) / `--update-existing` (CLI), like compute/TTL/`protected` drift.
 
+Because the provider cannot change, `neon init --services data-api` and `config pull` declare what the live Data API has rather than assuming Neon Auth: when the linked branch's Data API verifies an external IdP (or the API does not say and Neon Auth is off on the branch), they write `dataApi: { authProvider: "external", … }` with whatever wiring the API reports and leave `auth` alone. Otherwise they write `dataApi: true` with `auth: true`.
+
 ## Functions
 
 The three operations mirror the Terraform mental model: **`inspect`** (read live state), **`plan`** (dry-run diff), **`apply`** (reconcile).

package/dist/lib/auth.d.ts

@@ -1,6 +1,6 @@
 import { NeonApi } from "./neon-api.js";
 
-//#region src/lib/auth.d.ts
+// src/lib/auth.d.ts
 
 /**
  * Build a real {@link NeonApi} adapter from an explicit API key, or throw a uniform
@@ -25,6 +25,5 @@ declare function createNeonApiFromOptions(operation: string, options?: {
   apiKey?: string;
   apiHost?: string;
 }): NeonApi;
-//#endregion
 export { createNeonApiFromOptions };
 //# sourceMappingURL=auth.d.ts.map

package/dist/lib/auth.js

@@ -1,6 +1,6 @@
 import { ErrorCode, PlatformError } from "./errors.js";
 import { createRealNeonApi } from "./neon-api-real.js";
-//#region src/lib/auth.ts
+// src/lib/auth.ts
 /** Trim trailing slashes and surrounding whitespace; treat empty as unset. */
 function normalizeApiHost(url) {
 	const trimmed = url?.trim().replace(/\/+$/, "");
@@ -39,7 +39,6 @@ function createNeonApiFromOptions(operation, options = {}) {
 		...baseUrl ? { baseUrl } : {}
 	});
 }
-//#endregion
 export { createNeonApiFromOptions };
 
 //# sourceMappingURL=auth.js.map

package/dist/lib/authored-services.d.ts

@@ -1,6 +1,6 @@
 import { BranchTarget, BranchTuning, BucketDef, Config, FunctionDef, PreviewInput, ServiceToggleInput } from "./types.js";
 
-//#region src/lib/authored-services.d.ts
+// src/lib/authored-services.d.ts
 /** The home a static service can be authored in. */
 type AuthoredServiceKey = "aiGateway" | "functions" | "buckets";
 declare function authoredFunctions(config: Pick<Config, "functions" | "preview">): Record<string, FunctionDef> | undefined;
@@ -32,6 +32,5 @@ declare function previewGaWarningMessage(keys: readonly string[]): string;
  * target, only static `preview.*` keys are reported.
  */
 declare function previewGaWarningForConfig(config: Config, target?: BranchTarget): string | null;
-//#endregion
 export { AuthoredServiceKey, authoredAiGateway, authoredBuckets, authoredFunctionTuning, authoredFunctions, deprecatedPreviewAuthoring, mergeAuthoredPreview, previewGaWarningForConfig, previewGaWarningMessage };
 //# sourceMappingURL=authored-services.d.ts.map

package/dist/lib/authored-services.js

@@ -1,5 +1,5 @@
 import { branchTuningSchema } from "./schema.js";
-//#region src/lib/authored-services.ts
+// src/lib/authored-services.ts
 const PREVIEW_PATH = {
 	aiGateway: "preview.aiGateway",
 	functions: "preview.functions",
@@ -85,7 +85,6 @@ function previewGaWarningForConfig(config, target) {
 	if (keys.size === 0) return null;
 	return previewGaWarningMessage([...keys]);
 }
-//#endregion
 export { authoredAiGateway, authoredBuckets, authoredFunctionTuning, authoredFunctions, deprecatedPreviewAuthoring, mergeAuthoredPreview, previewGaWarningForConfig, previewGaWarningMessage };
 
 //# sourceMappingURL=authored-services.js.map

package/dist/lib/credentials.d.ts

@@ -1,6 +1,6 @@
 import { CredentialScope } from "./types.js";
 
-//#region src/lib/credentials.d.ts
+// src/lib/credentials.d.ts
 
 /**
  * Which branch-scoped Preview features a policy enables, reduced to the booleans that drive
@@ -32,6 +32,5 @@ declare function deriveCredentialScopes(flags: CredentialFeatureFlags): Credenti
  * credential).
  */
 declare function credentialScopesSatisfied(granted: readonly CredentialScope[], desired: readonly CredentialScope[]): boolean;
-//#endregion
 export { CredentialFeatureFlags, credentialScopesSatisfied, deriveCredentialScopes };
 //# sourceMappingURL=credentials.d.ts.map

package/dist/lib/credentials.js

@@ -1,4 +1,4 @@
-//#region src/lib/credentials.ts
+// src/lib/credentials.ts
 /**
 * Derive the set of {@link CredentialScope}s a branch credential needs from the policy's
 * enabled Preview features. Deterministic and order-stable (handy for diffing / round-trip
@@ -24,7 +24,6 @@ function credentialScopesSatisfied(granted, desired) {
 	const grantedSet = new Set(granted);
 	return desired.every((scope) => grantedSet.has(scope));
 }
-//#endregion
 export { credentialScopesSatisfied, deriveCredentialScopes };
 
 //# sourceMappingURL=credentials.js.map

package/dist/lib/custom-domain.d.ts

@@ -1,7 +1,5 @@
-//#region src/lib/custom-domain.d.ts
 declare function normalizeCustomDomain(value: string): string;
 /** `undefined` when `value` is a usable custom domain; otherwise the schema message. */
 declare function customDomainValidationError(value: string): string | undefined;
-//#endregion
 export { customDomainValidationError, normalizeCustomDomain };
 //# sourceMappingURL=custom-domain.d.ts.map

package/dist/lib/custom-domain.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"custom-domain.d.ts","names":["normalizeCustomDomain","customDomainValidationError","normalizeCustomDomain","value","customDomainValidationError"],"sources":["../../src/lib/custom-domain.ts"],"mappings":";A,iBAAgBA,qBAAAA,C;AAAhB;AAYgBC,iBAAAA,2BAAAA,CAA2BE,KAAA,EAAA,MAAA,CAAA,EAAA,MAAA,GAAA,SAAA"}
+{"version":3,"file":"custom-domain.d.ts","names":["normalizeCustomDomain","customDomainValidationError","normalizeCustomDomain","value","customDomainValidationError"],"sources":["../../src/lib/custom-domain.ts"],"mappings":"A,iBAAgBA,qBAAAA,C;AAAhB;AAYgBC,iBAAAA,2BAAAA,CAA2BE,KAAA,EAAA,MAAA,CAAA,EAAA,MAAA,GAAA,SAAA"}

package/dist/lib/custom-domain.js

@@ -1,4 +1,4 @@
-//#region src/lib/custom-domain.ts
+// src/lib/custom-domain.ts
 function normalizeCustomDomain(value) {
 	return value.trim().toLowerCase().replace(/\.$/, "");
 }
@@ -14,7 +14,6 @@ function customDomainValidationError(value) {
 	if (normalized.length < MIN_NORMALIZED_CUSTOM_DOMAIN_LENGTH || normalized.length > MAX_NORMALIZED_CUSTOM_DOMAIN_LENGTH) return `custom domain ${JSON.stringify(value)} must be ${MIN_NORMALIZED_CUSTOM_DOMAIN_LENGTH}–${MAX_NORMALIZED_CUSTOM_DOMAIN_LENGTH} characters after normalizing`;
 	if (!CUSTOM_DOMAIN_RE.test(normalized)) return `custom domain ${JSON.stringify(value)} is not a DNS hostname`;
 }
-//#endregion
 export { customDomainValidationError, normalizeCustomDomain };
 
 //# sourceMappingURL=custom-domain.js.map

package/dist/lib/define-config.d.ts

@@ -1,6 +1,6 @@
 import { BranchTarget, BranchTuningFn, BucketDef, Config, DataApiInput, ExperimentalInput, FunctionDef, FunctionTriggerDef, PreviewInput, ResolvedBranchConfig, ServiceEnabled, ServiceToggleInput } from "./types.js";
 
-//#region src/lib/define-config.d.ts
+// src/lib/define-config.d.ts
 
 /**
  * Whether a `dataApi` toggle is **enabled and verified by Neon Auth** at the type level: it is
@@ -127,6 +127,5 @@ declare function resolveConfig(config: Config, branch: BranchTarget): ResolvedBr
  * NeonApi adapter.
  */
 declare function normalizeRegion(region: string): string;
-//#endregion
 export { DataApiField, NeonAuthRequiredHint, defineConfig, normalizeRegion, resolveConfig };
 //# sourceMappingURL=define-config.d.ts.map

package/dist/lib/define-config.js

@@ -4,7 +4,7 @@ import { parseBranchTtl } from "./duration.js";
 import { normalizeExternalPackage } from "./external-packages.js";
 import { branchTuningSchema, configInputSchema, formatZodIssues } from "./schema.js";
 import { authoredFunctionTuning, mergeAuthoredPreview } from "./authored-services.js";
-//#region src/lib/define-config.ts
+// src/lib/define-config.ts
 /** Default deploy parameters applied to functions that omit them in `neon.ts`. */
 const DEFAULT_FUNCTION_RUNTIME = "nodejs24";
 const DEFAULT_FUNCTION_BUNDLER = "esbuild";
@@ -226,7 +226,6 @@ function normalizeRegion(region) {
 	if (REGION_PREFIX.test(region)) return region;
 	return `aws-${region}`;
 }
-//#endregion
 export { defineConfig, normalizeRegion, resolveConfig };
 
 //# sourceMappingURL=define-config.js.map

package/dist/lib/diff.d.ts

@@ -1,7 +1,7 @@
 import { BucketAccessLevel, ComputeSettings, ConflictReport, DataApiSettings, ResolvedBranchConfig, ResolvedFunctionConfig, ResolvedFunctionTrigger } from "./types.js";
 import { ConfigureRealtimeInput, EnableDataApiInput, NeonBranchSnapshot, NeonBucketSnapshot, NeonCustomDomainSnapshot, NeonEndpointSnapshot, NeonFunctionSnapshot, NeonRealtimeSnapshot, NeonTriggerSnapshot } from "./neon-api.js";
 
-//#region src/lib/diff.d.ts
+// src/lib/diff.d.ts
 
 /**
  * A planned action to perform a single mutation against the Neon API. The diff engine
@@ -168,6 +168,5 @@ interface DiffResult {
  * Diff desired branch policy against the selected remote branch. Pure function.
  */
 declare function diffConfig(config: ResolvedBranchConfig, remote: RemoteState, options: DiffOptions): DiffResult;
-//#endregion
 export { DiffOptions, DiffResult, PlanStep, RemotePreviewState, RemoteServiceState, RemoteState, diffConfig };
 //# sourceMappingURL=diff.d.ts.map

package/dist/lib/diff.js

@@ -1,4 +1,4 @@
-//#region src/lib/diff.ts
+// src/lib/diff.ts
 /**
 * Diff desired branch policy against the selected remote branch. Pure function.
 */
@@ -473,7 +473,6 @@ function computeDriftBetween(desired, endpoint) {
 		desired: desiredDrift
 	} : null;
 }
-//#endregion
 export { diffConfig };
 
 //# sourceMappingURL=diff.js.map

package/dist/lib/duration.d.ts

@@ -1,6 +1,6 @@
 import { DurationString } from "./types.js";
 
-//#region src/lib/duration.d.ts
+// src/lib/duration.d.ts
 
 /**
  * Parse a duration value into whole seconds.
@@ -63,6 +63,5 @@ declare function parseSuspendTimeout(input: false | string | number | undefined)
  * Returns `false` for -1 (never suspend), `undefined` for 0 (default), or a duration string.
  */
 declare function formatSuspendTimeout(seconds: number): false | DurationString | undefined;
-//#endregion
 export { MAX_BRANCH_TTL_SECONDS, formatDurationSeconds, formatSuspendTimeout, parseBranchTtl, parseDuration, parseSuspendTimeout };
 //# sourceMappingURL=duration.d.ts.map

package/dist/lib/duration.js

@@ -1,4 +1,4 @@
-//#region src/lib/duration.ts
+// src/lib/duration.ts
 /**
 * Parse a duration value into whole seconds.
 *
@@ -105,7 +105,6 @@ function formatSuspendTimeout(seconds) {
 	if (seconds === 0) return void 0;
 	return formatDurationSeconds(seconds);
 }
-//#endregion
 export { MAX_BRANCH_TTL_SECONDS, formatDurationSeconds, formatSuspendTimeout, parseBranchTtl, parseDuration, parseSuspendTimeout };
 
 //# sourceMappingURL=duration.js.map

package/dist/lib/errors.d.ts

@@ -1,6 +1,6 @@
 import { ConflictReport } from "./types.js";
 
-//#region src/lib/errors.d.ts
+// src/lib/errors.d.ts
 
 /**
  * Every code a {@link PlatformError} can carry. Stable identifiers — consumers can rely on
@@ -167,6 +167,5 @@ declare class ConfigLoadError extends PlatformError {
     cause?: unknown;
   });
 }
-//#endregion
 export { ConfigLoadError, ConfigValidationError, ErrorCode, MissingContextError, PartialBranchCreateError, PlatformError, PushAbortedError, PushConflictError, bugReportFooter, isPartialBranchCreateError, isPlatformError };
 //# sourceMappingURL=errors.d.ts.map

package/dist/lib/errors.js

@@ -1,4 +1,4 @@
-//#region src/lib/errors.ts
+// src/lib/errors.ts
 /**
 * Every code a {@link PlatformError} can carry. Stable identifiers — consumers can rely on
 * these for `instanceof PlatformError && err.code === ErrorCode.…` style checks instead of
@@ -236,7 +236,6 @@ function formatValue(value) {
 	if (typeof value === "object" && value !== null) return JSON.stringify(value);
 	return String(value);
 }
-//#endregion
 export { ConfigLoadError, ConfigValidationError, ErrorCode, MissingContextError, PartialBranchCreateError, PlatformError, PushAbortedError, PushConflictError, bugReportFooter, isPartialBranchCreateError, isPlatformError };
 
 //# sourceMappingURL=errors.js.map

package/dist/lib/external-packages.d.ts

@@ -1,6 +1,6 @@
 import { ExternalPackageEntry, ResolvedExternalPackage } from "./types.js";
 
-//#region src/lib/external-packages.d.ts
+// src/lib/external-packages.d.ts
 
 /**
  * The package a specifier belongs to, dropping any subpath: `sharp` from `sharp/lib/x`,
@@ -27,6 +27,5 @@ declare const normalizeExternalPackage: (entry: ExternalPackageEntry) => Resolve
  * which is always the whole package.
  */
 declare const packagesToStage: (entries: readonly ResolvedExternalPackage[]) => string[];
-//#endregion
 export { externalPackageRoot, normalizeExternalPackage, packagesToStage };
 //# sourceMappingURL=external-packages.d.ts.map

package/dist/lib/external-packages.js

@@ -1,4 +1,4 @@
-//#region src/lib/external-packages.ts
+// src/lib/external-packages.ts
 /**
 * The package a specifier belongs to, dropping any subpath: `sharp` from `sharp/lib/x`,
 * `@scope/pkg` from `@scope/pkg/sub`.
@@ -41,7 +41,6 @@ const packagesToStage = (entries) => {
 	}
 	return specifiers;
 };
-//#endregion
 export { externalPackageRoot, normalizeExternalPackage, packagesToStage };
 
 //# sourceMappingURL=external-packages.js.map

package/dist/lib/function-entries.d.ts

@@ -1,4 +1,3 @@
-//#region src/lib/function-entries.d.ts
 /**
  * Search order for a directory `source` under esbuild. Shared by apply and
  * `neon function deploy --src`. `.mjs` is last so it never implies skip-esbuild.
@@ -11,6 +10,5 @@ type FunctionArchiveEntry = (typeof FUNCTION_ARCHIVE_ENTRIES)[number];
 /** `existing` is names the caller counted as files, so a directory named `index.ts` cannot win. */
 declare const pickFunctionSourceEntry: (existing: Iterable<string>) => FunctionSourceEntry | undefined;
 declare const isFunctionArchiveEntry: (name: string) => name is FunctionArchiveEntry;
-//#endregion
 export { FUNCTION_ARCHIVE_ENTRIES, FUNCTION_SOURCE_ENTRIES, FunctionArchiveEntry, FunctionSourceEntry, isFunctionArchiveEntry, pickFunctionSourceEntry };
 //# sourceMappingURL=function-entries.d.ts.map

package/dist/lib/function-entries.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"function-entries.d.ts","names":["FUNCTION_SOURCE_ENTRIES","FunctionSourceEntry","FUNCTION_ARCHIVE_ENTRIES","FunctionArchiveEntry","pickFunctionSourceEntry","Iterable","isFunctionArchiveEntry","FUNCTION_SOURCE_ENTRIES","FunctionSourceEntry","FUNCTION_ARCHIVE_ENTRIES","FunctionArchiveEntry","pickFunctionSourceEntry","existing","Iterable","isFunctionArchiveEntry","name"],"sources":["../../src/lib/function-entries.ts"],"mappings":";;AAIA;AAMA;AAGA;AAEYG,cAXCH,uBAW8BE,EAAAA,SAAAA,CAAAA,UAAwB,EAAA,UAAA,EAAA,WAAA,CAAA;AAGtDE,KARDH,mBAAAA,GAaX,CAAA,OAbyCD,uBAazC,CAAA,CAAA,MAAA,CAAA;AAAA;AAJUK,cANEH,wBAMFG,EAAAA,SAAAA,CAAAA,WAAAA,EAAAA,UAAAA,CAAAA;AACRJ,KALSE,oBAAAA,GAKTF,CAAAA,OALwCC,wBAKxCD,CAAAA,CAAAA,MAAAA,CAAAA;AAAmB;AAKTK,cAPAF,uBASFD,EAAAA,CAAAA,QAAAA,EARAE,QAQmE,CAAA,MAAA,CAAA,EAAA,GAP3EJ,mBAO2E,GAAA,SAAA;A,cAFjEK,sB,4BAEFH,oB"}
+{"version":3,"file":"function-entries.d.ts","names":["FUNCTION_SOURCE_ENTRIES","FunctionSourceEntry","FUNCTION_ARCHIVE_ENTRIES","FunctionArchiveEntry","pickFunctionSourceEntry","Iterable","isFunctionArchiveEntry","FUNCTION_SOURCE_ENTRIES","FunctionSourceEntry","FUNCTION_ARCHIVE_ENTRIES","FunctionArchiveEntry","pickFunctionSourceEntry","existing","Iterable","isFunctionArchiveEntry","name"],"sources":["../../src/lib/function-entries.ts"],"mappings":";AAIA;AAMA;AAGA;AAEYG,cAXCH,uBAW8BE,EAAAA,SAAAA,CAAAA,UAAwB,EAAA,UAAA,EAAA,WAAA,CAAA;AAGtDE,KARDH,mBAAAA,GAaX,CAAA,OAbyCD,uBAazC,CAAA,CAAA,MAAA,CAAA;AAAA;AAJUK,cANEH,wBAMFG,EAAAA,SAAAA,CAAAA,WAAAA,EAAAA,UAAAA,CAAAA;AACRJ,KALSE,oBAAAA,GAKTF,CAAAA,OALwCC,wBAKxCD,CAAAA,CAAAA,MAAAA,CAAAA;AAAmB;AAKTK,cAPAF,uBASFD,EAAAA,CAAAA,QAAAA,EARAE,QAQmE,CAAA,MAAA,CAAA,EAAA,GAP3EJ,mBAO2E,GAAA,SAAA;A,cAFjEK,sB,4BAEFH,oB"}

package/dist/lib/function-entries.js

@@ -1,4 +1,4 @@
-//#region src/lib/function-entries.ts
+// src/lib/function-entries.ts
 /**
 * Search order for a directory `source` under esbuild. Shared by apply and
 * `neon function deploy --src`. `.mjs` is last so it never implies skip-esbuild.
@@ -16,7 +16,6 @@ const pickFunctionSourceEntry = (existing) => {
 	return FUNCTION_SOURCE_ENTRIES.find((name) => names.has(name));
 };
 const isFunctionArchiveEntry = (name) => name === "index.mjs" || name === "index.js";
-//#endregion
 export { FUNCTION_ARCHIVE_ENTRIES, FUNCTION_SOURCE_ENTRIES, isFunctionArchiveEntry, pickFunctionSourceEntry };
 
 //# sourceMappingURL=function-entries.js.map

package/dist/lib/loader.d.ts

@@ -1,6 +1,6 @@
 import { Config } from "./types.js";
 
-//#region src/lib/loader.d.ts
+// src/lib/loader.d.ts
 
 /**
  * Default file names tried (in order) when {@link loadConfigFromFile} is called without an
@@ -46,6 +46,5 @@ declare function loadConfigFromFile(options?: LoadConfigOptions): Promise<{
   config: Config;
   resolvedPath: string;
 }>;
-//#endregion
 export { DEFAULT_CONFIG_FILENAMES, LoadConfigOptions, loadConfigFromFile };
 //# sourceMappingURL=loader.d.ts.map

package/dist/lib/loader.js

@@ -4,7 +4,7 @@ import { existsSync, statSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, isAbsolute, resolve } from "node:path";
 import { pathToFileURL } from "node:url";
-//#region src/lib/loader.ts
+// src/lib/loader.ts
 /**
 * Default file names tried (in order) when {@link loadConfigFromFile} is called without an
 * explicit path. We accept `.ts` first because that's the documented format; `.mjs` and `.js`
@@ -206,7 +206,6 @@ function withoutFunctionEnvKeys(config, keys) {
 		}
 	});
 }
-//#endregion
 export { DEFAULT_CONFIG_FILENAMES, loadConfigFromFile };
 
 //# sourceMappingURL=loader.js.map

package/dist/lib/neon-api-real.d.ts

@@ -1,6 +1,6 @@
 import { DeployFunctionInput, NeonApi } from "./neon-api.js";
 
-//#region src/lib/neon-api-real.d.ts
+// src/lib/neon-api-real.d.ts
 interface CreateNeonAuthRestInput {
   auth_provider: "better_auth";
   database_name?: string;
@@ -96,6 +96,5 @@ declare function buildFunctionDeployForm(input: DeployFunctionInput): FormData;
  * that simply isn't JSON degrades to text rather than crashing.
  */
 declare function readJsonBody(res: Response): Promise<unknown>;
-//#endregion
 export { buildFunctionDeployForm, collectCursorPages, createNeonAuthRestInput, createRealNeonApi, customDomainsUnavailableError, isPreviewFeatureUnavailable, previewUnavailableError, readJsonBody, retryOnLocked };
 //# sourceMappingURL=neon-api-real.d.ts.map

package/dist/lib/neon-api-real.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"neon-api-real.d.ts","names":["DeployFunctionInput","NeonApi","CreateNeonAuthRestInput","createRealNeonApi","RetryConfig","retryOnLocked","T","Promise","collectCursorPages","isPreviewFeatureUnavailable","customDomainsUnavailableError","previewUnavailableError","createNeonAuthRestInput","buildFunctionDeployForm","FormData","readJsonBody","Response","DeployFunctionInput","NeonApi","CreateNeonAuthRestInput","auth_provider","database_name","createRealNeonApi","options","apiKey","baseUrl","retryOnLocked","maxAttempts","initialDelayMs","maxDelayMs","RetryConfig","fn","Promise","T","config","collectCursorPages","fetchPage","cursor","items","next","isPreviewFeatureUnavailable","err","customDomainsUnavailableError","previewUnavailableError","featureLabel","createNeonAuthRestInput","input","databaseName","buildFunctionDeployForm","FormData","readJsonBody","res","Response"],"sources":["../../src/lib/neon-api-real.ts"],"mappings":";;;A,UAiXUE,uBAAAA,C;;EAAAA,aAAAA,CAAAA,EAAAA,MAAAA;AAeV;AA4CC;AAeD;AAAmC;AAChBI;AAARC;AACFH,iBA7DOD,iBAAAA,CA6DPC,OAAAA,EAAAA;EACEE,MAAAA,EAAAA,MAAAA;EAARC,OAAAA,CAAAA,EAAAA,MAAAA;EAAO;AA6BV;AAAwC;AAGjBD;AAAjBC;EACKD,aAAAA,CAAAA,EAAAA;IAARC,WAAAA,CAAAA,EAAAA,MAAAA;IAAOqB,cAAA,CAAA,EAAA,MAAA;IAm6CMnB,UAAAA,CAAAA,EAAAA,MAAAA;EAgGAC,CAAAA;AAuDhB,CAAA,CAAA,EA5oDIT,OA4oDYU;AAqFhB,UAhsDUP,WAAAA,CAgsDMQ;EAoBAC,WAAAA,EAAAA,MAAAA;EAAuBe,cAAA,EAAA,MAAA;EAAQ5B,UAAAA,EAAAA,MAAAA;AAAsBc;AAAQ;AAwB7E;AAAkC;AAAME;AAAWT;AAAO;;A,iBA/tDpCF,a,cACXE,O,CAAQD,C,WACVF,W,GACNG,O,CAAQD,C;A,iBA6BWE,kB,+CAGhBD,O;E,OAAiBD,C;;A,KACpBC,O,CAAQD,C;;;;;;;;;;;;A,iBAm6CKG,2BAAAA,C;;;;;A,iBAgGAC,6BAAAA,C;;;;;;;;;;;;A,iBAuDAC,uBAAAA,C;A,iBAqFAC,uBAAAA,C;;A,IAEZV,uB;;;;;;;;;;;;A,iBAkBYW,uBAAAA,C,OAA+Bb,mB,GAAsBc,Q;;;;;;;;;;;A,iBAwB/CC,YAAAA,C,KAAkBC,Q,GAAWT,O"}
+{"version":3,"file":"neon-api-real.d.ts","names":["DeployFunctionInput","NeonApi","CreateNeonAuthRestInput","createRealNeonApi","RetryConfig","retryOnLocked","T","Promise","collectCursorPages","isPreviewFeatureUnavailable","customDomainsUnavailableError","previewUnavailableError","createNeonAuthRestInput","buildFunctionDeployForm","FormData","readJsonBody","Response","DeployFunctionInput","NeonApi","CreateNeonAuthRestInput","auth_provider","database_name","createRealNeonApi","options","apiKey","baseUrl","retryOnLocked","maxAttempts","initialDelayMs","maxDelayMs","RetryConfig","fn","Promise","T","config","collectCursorPages","fetchPage","cursor","items","next","isPreviewFeatureUnavailable","err","customDomainsUnavailableError","previewUnavailableError","featureLabel","createNeonAuthRestInput","input","databaseName","buildFunctionDeployForm","FormData","readJsonBody","res","Response"],"sources":["../../src/lib/neon-api-real.ts"],"mappings":";;;A,UAgZUE,uBAAAA,C;;EAAAA,aAAAA,CAAAA,EAAAA,MAAAA;AAeV;AA4CC;AAeD;AAAmC;AAChBI;AAARC;AACFH,iBA7DOD,iBAAAA,CA6DPC,OAAAA,EAAAA;EACEE,MAAAA,EAAAA,MAAAA;EAARC,OAAAA,CAAAA,EAAAA,MAAAA;EAAO;AA6BV;AAAwC;AAGjBD;AAAjBC;EACKD,aAAAA,CAAAA,EAAAA;IAARC,WAAAA,CAAAA,EAAAA,MAAAA;IAAOqB,cAAA,CAAA,EAAA,MAAA;IAm6CMnB,UAAAA,CAAAA,EAAAA,MAAAA;EAgGAC,CAAAA;AAuDhB,CAAA,CAAA,EA5oDIT,OA4oDYU;AAqFhB,UAhsDUP,WAAAA,CAgsDMQ;EAoBAC,WAAAA,EAAAA,MAAAA;EAAuBe,cAAA,EAAA,MAAA;EAAQ5B,UAAAA,EAAAA,MAAAA;AAAsBc;AAAQ;AAwB7E;AAAkC;AAAME;AAAWT;AAAO;;A,iBA/tDpCF,a,cACXE,O,CAAQD,C,WACVF,W,GACNG,O,CAAQD,C;A,iBA6BWE,kB,+CAGhBD,O;E,OAAiBD,C;;A,KACpBC,O,CAAQD,C;;;;;;;;;;;;A,iBAm6CKG,2BAAAA,C;;;;;A,iBAgGAC,6BAAAA,C;;;;;;;;;;;;A,iBAuDAC,uBAAAA,C;A,iBAqFAC,uBAAAA,C;;A,IAEZV,uB;;;;;;;;;;;;A,iBAkBYW,uBAAAA,C,OAA+Bb,mB,GAAsBc,Q;;;;;;;;;;;A,iBAwB/CC,YAAAA,C,KAAkBC,Q,GAAWT,O"}

package/dist/lib/neon-api-real.js

@@ -4,7 +4,7 @@ import { wrapNeonError } from "./wrap-neon-error.js";
 import { z } from "zod";
 import { createNeonClient } from "@neon/sdk";
 import { createProject, createProjectBranch, createProjectBranchDataApi, deleteProjectBranchDataApi, disableProjectBranchRealtime, enableProjectBranchRealtime, getConnectionUri, getNeonAuth, getProject, getProjectBranchDataApi, getProjectBranchRealtime, getProjectBranchRealtimeSecret, listProjectBranchDatabases, listProjectBranchRoles, listProjectBranches, listProjectEndpoints, listProjects, updateProject, updateProjectBranch, updateProjectBranchDataApi, updateProjectEndpoint } from "@neon/sdk/raw";
-//#region src/lib/neon-api-real.ts
+// src/lib/neon-api-real.ts
 const DEFAULT_NEON_API_BASE_URL = "https://console.neon.tech/api/v2";
 /**
 * Unwrap a `@neon/sdk` raw `{ data, error, response }` result into the bare body, throwing
@@ -79,12 +79,22 @@ function dataApiCreateRequest(input) {
 	}
 	return req;
 }
+const REMOTE_DATA_API_AUTH_PROVIDERS = /* @__PURE__ */ new Set([
+	"neon_auth",
+	"external",
+	"none"
+]);
 /** Map a `DataAPIReponse` (GET) onto our {@link NeonDataApiSnapshot}. */
 function dataApiSnapshotFromResponse(data) {
 	const snapshot = { url: data.url };
 	if (data.status !== void 0) snapshot.status = data.status;
 	const settings = dataApiSettingsFromApi(data.settings);
 	if (settings) snapshot.settings = settings;
+	const auth = data;
+	if (typeof auth.auth_provider === "string" && REMOTE_DATA_API_AUTH_PROVIDERS.has(auth.auth_provider)) snapshot.authProvider = auth.auth_provider;
+	if (typeof auth.jwks_url === "string") snapshot.jwksUrl = auth.jwks_url;
+	if (typeof auth.provider_name === "string") snapshot.providerName = auth.provider_name;
+	if (typeof auth.jwt_audience === "string") snapshot.jwtAudience = auth.jwt_audience;
 	return snapshot;
 }
 function realtimeOptionsToApi(input) {
@@ -1352,7 +1362,6 @@ function defaultsToComputeSettings(defaults) {
 	if (defaults.suspend_timeout_seconds !== void 0) out.suspendTimeout = formatSuspendTimeout(defaults.suspend_timeout_seconds);
 	return Object.keys(out).length > 0 ? out : void 0;
 }
-//#endregion
 export { buildFunctionDeployForm, collectCursorPages, createNeonAuthRestInput, createRealNeonApi, customDomainsUnavailableError, isPreviewFeatureUnavailable, previewUnavailableError, readJsonBody, retryOnLocked };
 
 //# sourceMappingURL=neon-api-real.js.map