neon 2.47.0 → 3.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (198) hide show
  1. package/README.md +54 -0
  2. package/dist/_shared/auth_selection.js +76 -79
  3. package/dist/_shared/credentials.js +166 -187
  4. package/dist/_shared/env-core/env.js +395 -0
  5. package/dist/_shared/env-core/reuse-secrets.js +179 -0
  6. package/dist/_shared/paths.js +129 -126
  7. package/dist/_shared/profiles.js +192 -242
  8. package/dist/_shared/secure_file.js +36 -38
  9. package/dist/_virtual/_rolldown/runtime.js +13 -0
  10. package/dist/analytics.js +163 -207
  11. package/dist/api.js +815 -758
  12. package/dist/auth.js +121 -141
  13. package/dist/auth_context.js +39 -53
  14. package/dist/cli.js +4 -7
  15. package/dist/commands/api.js +220 -250
  16. package/dist/commands/api_keys.js +251 -314
  17. package/dist/commands/auth.js +283 -328
  18. package/dist/commands/bootstrap.js +372 -437
  19. package/dist/commands/branches.js +304 -455
  20. package/dist/commands/bucket.js +374 -514
  21. package/dist/commands/checkout.js +213 -298
  22. package/dist/commands/config.js +575 -658
  23. package/dist/commands/connection_string.js +137 -165
  24. package/dist/commands/data_api.js +238 -260
  25. package/dist/commands/databases.js +67 -76
  26. package/dist/commands/deploy.js +31 -25
  27. package/dist/commands/dev.js +642 -681
  28. package/dist/commands/diff.js +156 -200
  29. package/dist/commands/env.js +243 -303
  30. package/dist/commands/functions.js +275 -341
  31. package/dist/commands/index.js +70 -65
  32. package/dist/commands/init.js +84 -119
  33. package/dist/commands/inspect.js +55 -55
  34. package/dist/commands/ip_allow.js +88 -120
  35. package/dist/commands/link.js +874 -1019
  36. package/dist/commands/logs.js +291 -0
  37. package/dist/commands/neon_auth.js +725 -933
  38. package/dist/commands/operations.js +34 -25
  39. package/dist/commands/orgs.js +28 -18
  40. package/dist/commands/profile.js +614 -845
  41. package/dist/commands/projects.js +313 -373
  42. package/dist/commands/psql.js +60 -58
  43. package/dist/commands/roles.js +55 -58
  44. package/dist/commands/schema_diff.js +87 -131
  45. package/dist/commands/set_context.js +34 -26
  46. package/dist/commands/snapshots.js +288 -413
  47. package/dist/commands/status.js +41 -37
  48. package/dist/commands/user.js +21 -10
  49. package/dist/commands/vpc_endpoints.js +85 -113
  50. package/dist/config.js +7 -6
  51. package/dist/config_format.js +50 -66
  52. package/dist/config_template.js +128 -157
  53. package/dist/context.js +183 -235
  54. package/dist/current_branch_fast_path.js +40 -49
  55. package/dist/dev/env.js +313 -394
  56. package/dist/dev/functions.js +54 -64
  57. package/dist/dev/inputs.js +46 -58
  58. package/dist/dev/runtime.js +135 -164
  59. package/dist/dev/websocket.js +766 -959
  60. package/dist/env.js +27 -33
  61. package/dist/env_file.js +118 -132
  62. package/dist/env_services.js +36 -38
  63. package/dist/errors.js +57 -68
  64. package/dist/functions_api.js +45 -43
  65. package/dist/help.js +189 -140
  66. package/dist/index.js +182 -257
  67. package/dist/init/agents.js +137 -118
  68. package/dist/init/auth.js +58 -68
  69. package/dist/init/bootstrap.js +325 -396
  70. package/dist/init/build_config.js +4 -2
  71. package/dist/init/detect_agent.js +56 -101
  72. package/dist/init/editors.js +35 -52
  73. package/dist/init/enrich_output.js +51 -66
  74. package/dist/init/extension.js +134 -171
  75. package/dist/init/inspect.js +179 -266
  76. package/dist/init/interactive.js +510 -622
  77. package/dist/init/neonctl.js +117 -168
  78. package/dist/init/orchestrate.js +157 -173
  79. package/dist/init/phases/auth.js +188 -202
  80. package/dist/init/phases/cleanup.js +23 -23
  81. package/dist/init/phases/db.js +251 -277
  82. package/dist/init/phases/getting_started.js +213 -223
  83. package/dist/init/phases/mcp.js +174 -224
  84. package/dist/init/phases/migrations.js +247 -248
  85. package/dist/init/phases/neon_auth.js +114 -133
  86. package/dist/init/phases/setup.js +546 -703
  87. package/dist/init/phases/skills.js +75 -86
  88. package/dist/init/phases/status.js +72 -67
  89. package/dist/init/resolve_context.js +102 -99
  90. package/dist/init/route_command.js +91 -98
  91. package/dist/init/skills.js +174 -218
  92. package/dist/init/vsix.js +77 -99
  93. package/dist/log.js +17 -16
  94. package/dist/neon_services.js +104 -129
  95. package/dist/parameters.gen.js +481 -471
  96. package/dist/pkg.js +17 -19
  97. package/dist/profile_keys.js +44 -47
  98. package/dist/psql/cli.js +44 -47
  99. package/dist/psql/command/cmd_cond.js +231 -406
  100. package/dist/psql/command/cmd_connect.js +557 -764
  101. package/dist/psql/command/cmd_copy.js +727 -983
  102. package/dist/psql/command/cmd_describe.js +1499 -1688
  103. package/dist/psql/command/cmd_format.js +733 -905
  104. package/dist/psql/command/cmd_io.js +1293 -2082
  105. package/dist/psql/command/cmd_lo.js +297 -359
  106. package/dist/psql/command/cmd_meta.js +727 -878
  107. package/dist/psql/command/cmd_misc.js +138 -172
  108. package/dist/psql/command/cmd_pipeline.js +547 -1099
  109. package/dist/psql/command/cmd_restrict.js +119 -155
  110. package/dist/psql/command/cmd_show.js +529 -688
  111. package/dist/psql/command/dispatch.js +261 -325
  112. package/dist/psql/command/inputQueue.js +35 -33
  113. package/dist/psql/command/shared.js +49 -63
  114. package/dist/psql/complete/filenames.js +90 -133
  115. package/dist/psql/complete/index.js +59 -97
  116. package/dist/psql/complete/matcher.js +236 -300
  117. package/dist/psql/complete/psqlVars.js +218 -223
  118. package/dist/psql/complete/queries.js +159 -177
  119. package/dist/psql/complete/rules.js +1493 -2299
  120. package/dist/psql/core/common.js +762 -1180
  121. package/dist/psql/core/help.js +456 -546
  122. package/dist/psql/core/mainloop.js +692 -1302
  123. package/dist/psql/core/prompt.js +391 -408
  124. package/dist/psql/core/settings.js +429 -644
  125. package/dist/psql/core/sqlHelp.js +480 -554
  126. package/dist/psql/core/startup.js +626 -815
  127. package/dist/psql/core/syncVars.js +67 -110
  128. package/dist/psql/core/variables.js +156 -278
  129. package/dist/psql/describe/formatters.js +884 -1285
  130. package/dist/psql/describe/processNamePattern.js +173 -260
  131. package/dist/psql/describe/queries.js +1368 -2403
  132. package/dist/psql/describe/versionGate.js +32 -41
  133. package/dist/psql/index.js +1414 -1927
  134. package/dist/psql/io/history.js +232 -271
  135. package/dist/psql/io/input.js +103 -108
  136. package/dist/psql/io/lineEditor/buffer.js +238 -319
  137. package/dist/psql/io/lineEditor/complete.js +135 -213
  138. package/dist/psql/io/lineEditor/filename.js +139 -148
  139. package/dist/psql/io/lineEditor/index.js +653 -870
  140. package/dist/psql/io/lineEditor/keymap.js +544 -702
  141. package/dist/psql/io/lineEditor/vt100.js +294 -341
  142. package/dist/psql/io/pgpass.js +158 -187
  143. package/dist/psql/io/pgservice.js +146 -183
  144. package/dist/psql/io/psqlrc.js +328 -403
  145. package/dist/psql/print/aligned.js +1020 -1683
  146. package/dist/psql/print/asciidoc.js +180 -214
  147. package/dist/psql/print/crosstab.js +281 -442
  148. package/dist/psql/print/csv.js +48 -70
  149. package/dist/psql/print/html.js +195 -226
  150. package/dist/psql/print/json.js +75 -88
  151. package/dist/psql/print/latex.js +291 -364
  152. package/dist/psql/print/pager.js +171 -242
  153. package/dist/psql/print/troff.js +194 -226
  154. package/dist/psql/print/unaligned.js +69 -95
  155. package/dist/psql/print/units.js +167 -169
  156. package/dist/psql/scanner/slash.js +428 -483
  157. package/dist/psql/scanner/sql.js +445 -889
  158. package/dist/psql/scanner/stringutils.js +309 -379
  159. package/dist/psql/types/index.js +2 -7
  160. package/dist/psql/types/scanner.js +25 -22
  161. package/dist/psql/wire/connection.js +2042 -2803
  162. package/dist/psql/wire/copy.js +84 -100
  163. package/dist/psql/wire/notify.js +39 -59
  164. package/dist/psql/wire/pipeline.js +305 -518
  165. package/dist/psql/wire/protocol.js +349 -417
  166. package/dist/psql/wire/sasl.js +180 -265
  167. package/dist/psql/wire/tls.js +400 -561
  168. package/dist/storage_api.js +115 -129
  169. package/dist/test_utils/fixtures.js +94 -113
  170. package/dist/test_utils/oauth_server.js +10 -7
  171. package/dist/test_utils/project_dir.js +33 -0
  172. package/dist/utils/ai_gateway_notice.js +131 -162
  173. package/dist/utils/api_enums.js +21 -28
  174. package/dist/utils/auth.js +10 -4
  175. package/dist/utils/branch_notice.js +20 -19
  176. package/dist/utils/branch_picker.js +83 -89
  177. package/dist/utils/cli_name.js +15 -12
  178. package/dist/utils/compute_units.js +20 -27
  179. package/dist/utils/config_diff.js +127 -158
  180. package/dist/utils/enrichers.js +95 -148
  181. package/dist/utils/esbuild.js +133 -147
  182. package/dist/utils/flags.js +35 -47
  183. package/dist/utils/formats.js +8 -15
  184. package/dist/utils/git_diff.js +69 -80
  185. package/dist/utils/inspect_db.js +101 -143
  186. package/dist/utils/inspect_queries.js +179 -142
  187. package/dist/utils/middlewares.js +37 -44
  188. package/dist/utils/openapi.js +87 -99
  189. package/dist/utils/package_manager.js +312 -110
  190. package/dist/utils/point_in_time.js +49 -53
  191. package/dist/utils/psql.js +89 -106
  192. package/dist/utils/service_picker.js +55 -58
  193. package/dist/utils/string.js +5 -5
  194. package/dist/utils/ui.js +38 -55
  195. package/dist/utils/write_sync.js +26 -35
  196. package/dist/utils/zip.js +4 -3
  197. package/dist/writer.js +67 -87
  198. package/package.json +9 -7
@@ -1,88 +1,77 @@
1
1
  import { NEON_SERVICES } from "./neon_services.js";
2
+ //#region src/config_template.ts
2
3
  /**
3
- * The published npm packages a `neon.ts` project needs — the `@neon/*` org names.
4
- *
5
- * ⚠️ These ship to users the next time `neonctl` is released, so do NOT release
6
- * neonctl until `@neon/config` and `@neon/env` are published to npm — otherwise
7
- * `config init` would install packages that don't exist yet. (The libraries are
8
- * mid-migration from `@neondatabase/*`; track their publish before cutting a CLI
9
- * release.)
10
- */
11
- export const CONFIG_PACKAGE = "@neon/config";
12
- export const ENV_PACKAGE = "@neon/env";
13
- export const REQUIRED_PACKAGES = [CONFIG_PACKAGE, ENV_PACKAGE];
4
+ * The published npm packages a `neon.ts` project needs — the `@neon/*` org names.
5
+ *
6
+ * ⚠️ These ship to users the next time `neonctl` is released, so do NOT release
7
+ * neonctl until `@neon/config` and `@neon/env` are published to npm — otherwise
8
+ * `config init` would install packages that don't exist yet. (The libraries are
9
+ * mid-migration from `@neondatabase/*`; track their publish before cutting a CLI
10
+ * release.)
11
+ */
12
+ const CONFIG_PACKAGE = "@neon/config";
13
+ const ENV_PACKAGE = "@neon/env";
14
+ const REQUIRED_PACKAGES = [CONFIG_PACKAGE, ENV_PACKAGE];
14
15
  /**
15
- * The services `config init` can declare in the `neon.ts` it scaffolds — the subset of
16
- * {@link NEON_SERVICES} a policy has a field for. {@link renderNeonConfig} owns the mapping
17
- * from these names to the `neon.ts` fields (`aiGateway`, `buckets`).
18
- *
19
- * Postgres is absent because every branch has it, so there is nothing to declare. `data-api`
20
- * is absent because enabling it with the default `authProvider: "neon"` requires `auth` — a
21
- * pairing the picker would have to enforce rather than offer.
22
- */
23
- export const CONFIG_INIT_SERVICES = NEON_SERVICES.filter((service) => service !== "postgres" && service !== "data-api");
16
+ * The services `config init` can declare in the `neon.ts` it scaffolds — the subset of
17
+ * {@link NEON_SERVICES} a policy has a field for. {@link renderNeonConfig} owns the mapping
18
+ * from these names to the `neon.ts` fields (`aiGateway`, `buckets`).
19
+ *
20
+ * Postgres is absent because every branch has it, so there is nothing to declare. `data-api`
21
+ * is absent because enabling it with the default `authProvider: "neon"` requires `auth` — a
22
+ * pairing the picker would have to enforce rather than offer.
23
+ */
24
+ const CONFIG_INIT_SERVICES = NEON_SERVICES.filter((service) => service !== "postgres" && service !== "data-api");
24
25
  /**
25
- * What `config init --services none` produces. One constant because it is both the help text
26
- * and what tells the parser `none` is a value here — passing the literal at each call site
27
- * lets the two drift into documenting something the parser does not accept.
28
- */
29
- export const CONFIG_INIT_NONE_MEANS = "the bare starter policy";
26
+ * What `config init --services none` produces. One constant because it is both the help text
27
+ * and what tells the parser `none` is a value here — passing the literal at each call site
28
+ * lets the two drift into documenting something the parser does not accept.
29
+ */
30
+ const CONFIG_INIT_NONE_MEANS = "the bare starter policy";
30
31
  /** Why the two a policy cannot declare are not selectable, for the refusal message. */
31
- export const CONFIG_INIT_UNAVAILABLE = {
32
- postgres: "every branch has Postgres, so a policy has nothing to declare for it",
33
- "data-api": "enabling it with the default provider requires auth, so declare auth here and turn the Data API on with `neon data-api create`",
32
+ const CONFIG_INIT_UNAVAILABLE = {
33
+ postgres: "every branch has Postgres, so a policy has nothing to declare for it",
34
+ "data-api": "enabling it with the default provider requires auth, so declare auth here and turn the Data API on with `neon data-api create`"
34
35
  };
35
36
  /** Slug, display name, and source path of the function scaffolded for `functions`. */
36
- export const FUNCTION_SLUG = "hello";
37
- export const FUNCTION_NAME = "Hello World";
38
- export const FUNCTION_FILENAME = "hello.ts";
37
+ const FUNCTION_SLUG = "hello";
38
+ const FUNCTION_NAME = "Hello World";
39
+ const FUNCTION_FILENAME = "hello.ts";
39
40
  /** Name of the bucket scaffolded for `storage`. */
40
- export const BUCKET_NAME = "assets";
41
+ const BUCKET_NAME = "assets";
41
42
  /**
42
- * One indentation level in the emitted `neon.ts`. Two spaces, which is what every renderer
43
- * here produces and what `config_template.format.test.ts` holds them to.
44
- */
43
+ * One indentation level in the emitted `neon.ts`. Two spaces, which is what every renderer
44
+ * here produces and what `config_template.format.test.ts` holds them to.
45
+ */
45
46
  const INDENT = " ";
46
47
  /**
47
- * Prefix each line with `level` indentation levels. Nesting is expressed as a number at the
48
- * one place that knows the structure, rather than as literal spaces at every push site — a
49
- * miscounted space is otherwise invisible in review and only shows up in a user's file.
50
- */
48
+ * Prefix each line with `level` indentation levels. Nesting is expressed as a number at the
49
+ * one place that knows the structure, rather than as literal spaces at every push site — a
50
+ * miscounted space is otherwise invisible in review and only shows up in a user's file.
51
+ */
51
52
  const at = (level, ...lines) => lines.map((line) => INDENT.repeat(level) + line);
52
53
  /** Wrap `body` in an object-literal block named `key`, indented from `level`. */
53
54
  const block = (level, key, body) => [
54
- ...at(level, `${key}: {`),
55
- ...body,
56
- ...at(level, "},"),
55
+ ...at(level, `${key}: {`),
56
+ ...body,
57
+ ...at(level, "},")
57
58
  ];
58
59
  /** The `preview` block for the selected services, or "" when none of them is a preview feature. */
59
60
  const renderPreview = (services) => {
60
- const lines = [];
61
- if (services.includes("ai-gateway")) {
62
- lines.push(...at(2, "aiGateway: true,"));
63
- }
64
- if (services.includes("functions")) {
65
- lines.push(...block(2, "functions", [
66
- ...at(3, `${FUNCTION_SLUG}: { name: "${FUNCTION_NAME}", source: "./${FUNCTION_FILENAME}" },`),
67
- ]));
68
- }
69
- if (services.includes("object-storage")) {
70
- lines.push(...block(2, "buckets", [
71
- ...at(3, `// "private" is the default; use "public_read" for anonymous reads`, `${BUCKET_NAME}: { access: "private" },`),
72
- ]));
73
- }
74
- if (lines.length === 0) {
75
- return "";
76
- }
77
- return `${block(1, "preview", lines).join("\n")}\n`;
61
+ const lines = [];
62
+ if (services.includes("ai-gateway")) lines.push(...at(2, "aiGateway: true,"));
63
+ if (services.includes("functions")) lines.push(...block(2, "functions", [...at(3, `${FUNCTION_SLUG}: { name: "${FUNCTION_NAME}", source: "./${FUNCTION_FILENAME}" },`)]));
64
+ if (services.includes("object-storage")) lines.push(...block(2, "buckets", [...at(3, `// "private" is the default; use "public_read" for anonymous reads`, `${BUCKET_NAME}: { access: "private" },`)]));
65
+ if (lines.length === 0) return "";
66
+ return `${block(1, "preview", lines).join("\n")}\n`;
78
67
  };
79
68
  /**
80
- * Render the `neon.ts` policy `config init` writes. With no services this is the starter
81
- * policy — an explicit `auth: false`, no `preview` block, and a `branch` closure that gives
82
- * new non-default branches a 7-day TTL — so the picker's "skip everything" answer and a
83
- * non-interactive run produce the identical file.
84
- */
85
- export const renderNeonConfig = (services) => `import { defineConfig } from "${CONFIG_PACKAGE}/v1";
69
+ * Render the `neon.ts` policy `config init` writes. With no services this is the starter
70
+ * policy — an explicit `auth: false`, no `preview` block, and a `branch` closure that gives
71
+ * new non-default branches a 7-day TTL — so the picker's "skip everything" answer and a
72
+ * non-interactive run produce the identical file.
73
+ */
74
+ const renderNeonConfig = (services) => `import { defineConfig } from "${CONFIG_PACKAGE}/v1";
86
75
 
87
76
  export default defineConfig({
88
77
  // Declare your Neon services here
@@ -106,93 +95,73 @@ ${renderPreview(services)} // Branch policy: per-branch tuning
106
95
  /** Render a scalar the way it has to appear in TypeScript source. */
107
96
  const renderScalar = (value) => typeof value === "string" ? `"${value}"` : String(value);
108
97
  /**
109
- * Render an object key. Live names are not identifiers: a Neon bucket may be called
110
- * `smoke-uploads`, which as a bare key is a subtraction and a syntax error. Anything that
111
- * isn't a plain identifier gets quoted.
112
- */
98
+ * Render an object key. Live names are not identifiers: a Neon bucket may be called
99
+ * `smoke-uploads`, which as a bare key is a subtraction and a syntax error. Anything that
100
+ * isn't a plain identifier gets quoted.
101
+ */
113
102
  const renderKey = (name) => /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(name) ? name : JSON.stringify(name);
114
103
  /**
115
- * The `branch` closure for a policy seeded from live state, or "" when the branch carries no
116
- * tuning worth declaring.
117
- *
118
- * `protected` is read but never declared: it is a fact about one branch, while a policy
119
- * `protected` applies to every branch the policy runs against. It becomes a comment instead.
120
- */
104
+ * The `branch` closure for a policy seeded from live state, or "" when the branch carries no
105
+ * tuning worth declaring.
106
+ *
107
+ * `protected` is read but never declared: it is a fact about one branch, while a policy
108
+ * `protected` applies to every branch the policy runs against. It becomes a comment instead.
109
+ */
121
110
  const renderSeededBranch = (view) => {
122
- const settings = [];
123
- if (view.branch?.parent !== undefined) {
124
- settings.push(...at(2, `parent: ${renderScalar(view.branch.parent)},`));
125
- }
126
- if (view.branch?.ttl !== undefined) {
127
- settings.push(...at(2, `ttl: ${renderScalar(view.branch.ttl)},`));
128
- }
129
- const compute = view.branch?.postgres?.computeSettings;
130
- const computeFields = Object.entries(compute ?? {}).filter(([, value]) => value !== undefined);
131
- if (computeFields.length > 0) {
132
- settings.push(...block(2, "postgres", [
133
- ...block(3, "computeSettings", computeFields.flatMap(([field, value]) => at(4, `${field}: ${renderScalar(value)},`))),
134
- ]));
135
- }
136
- if (settings.length === 0) {
137
- return "";
138
- }
139
- // An arrow returning an object literal, so the closing line is `}),` rather than `},`.
140
- return `${[...at(1, "branch: () => ({"), ...settings, ...at(1, "}),")].join("\n")}\n`;
111
+ const settings = [];
112
+ if (view.branch?.parent !== void 0) settings.push(...at(2, `parent: ${renderScalar(view.branch.parent)},`));
113
+ if (view.branch?.ttl !== void 0) settings.push(...at(2, `ttl: ${renderScalar(view.branch.ttl)},`));
114
+ const compute = view.branch?.postgres?.computeSettings;
115
+ const computeFields = Object.entries(compute ?? {}).filter(([, value]) => value !== void 0);
116
+ if (computeFields.length > 0) settings.push(...block(2, "postgres", [...block(3, "computeSettings", computeFields.flatMap(([field, value]) => at(4, `${field}: ${renderScalar(value)},`)))]));
117
+ if (settings.length === 0) return "";
118
+ return `${[
119
+ ...at(1, "branch: () => ({"),
120
+ ...settings,
121
+ ...at(1, "}),")
122
+ ].join("\n")}\n`;
141
123
  };
142
124
  /** The `preview` block for a policy seeded from live state. */
143
125
  const renderSeededPreview = (view, branchName) => {
144
- const lines = [];
145
- const buckets = Object.entries(view.preview?.buckets ?? {});
146
- if (buckets.length > 0) {
147
- lines.push(...block(2, "buckets", buckets.flatMap(([name, bucket]) => at(3, `${renderKey(name)}: { access: "${bucket.access}" },`))));
148
- }
149
- // A deployed function cannot be declared from live state: `source` is a path in the
150
- // user's project and the branch only knows the uploaded bundle. Listing the slugs as a
151
- // commented-out block is the most a read-back can honestly produce.
152
- const functions = Object.entries(view.preview?.functions ?? {});
153
- if (functions.length > 0) {
154
- lines.push(...at(2, `// ${branchName} has ${functions.length} deployed function${functions.length === 1 ? "" : "s"}.`, "// Declaring one needs the local source path, which the branch does not know:", "// functions: {", ...functions.map(([slug, fn]) => `// ${renderKey(slug)}: { name: "${fn.name}", source: "./${slug}.ts" },`), "// },"));
155
- }
156
- if (lines.length === 0) {
157
- return "";
158
- }
159
- return `${block(1, "preview", lines).join("\n")}\n`;
126
+ const lines = [];
127
+ const buckets = Object.entries(view.preview?.buckets ?? {});
128
+ if (buckets.length > 0) lines.push(...block(2, "buckets", buckets.flatMap(([name, bucket]) => at(3, `${renderKey(name)}: { access: "${bucket.access}" },`))));
129
+ const functions = Object.entries(view.preview?.functions ?? {});
130
+ if (functions.length > 0) lines.push(...at(2, `// ${branchName} has ${functions.length} deployed function${functions.length === 1 ? "" : "s"}.`, "// Declaring one needs the local source path, which the branch does not know:", "// functions: {", ...functions.map(([slug, fn]) => `// ${renderKey(slug)}: { name: "${fn.name}", source: "./${slug}.ts" },`), "// },"));
131
+ if (lines.length === 0) return "";
132
+ return `${block(1, "preview", lines).join("\n")}\n`;
160
133
  };
161
134
  /**
162
- * Render a `neon.ts` from a branch's live state (`config init --from-branch`).
163
- *
164
- * Only what the branch can actually report is declared. Three things are deliberately
165
- * absent, each for its own reason:
166
- *
167
- * - **The AI Gateway** has no branch-level enabled state to read — it is always available and
168
- * credential-gated — so `pullConfig` cannot tell whether a policy would enable it.
169
- * - **Functions** cannot round-trip (no `source` path on the remote); they are listed as a
170
- * commented-out block.
171
- * - **`protected`** is branch state rather than policy intent, so it is reported as a comment.
172
- *
173
- * A branch with nothing to report (no services, no tuning) renders the starter policy rather
174
- * than an empty `defineConfig({})`: seeding found nothing, and the caller says so.
175
- */
176
- export const renderNeonConfigFromView = (view, branchName) => {
177
- const services = [
178
- view.auth ? " auth: true," : "",
179
- view.dataApi ? " dataApi: true," : "",
180
- ].filter((line) => line !== "");
181
- const preview = renderSeededPreview(view, branchName);
182
- const branch = renderSeededBranch(view);
183
- if (services.length === 0 && preview === "" && branch === "") {
184
- return { source: renderNeonConfig([]), seeded: false };
185
- }
186
- const protectedNote = view.branch?.protected
187
- ? `// ${branchName} is protected on Neon. Not declared here: a policy \`protected\` would\n// apply to every branch this policy is applied to.\n`
188
- : "";
189
- const body = [
190
- ...services,
191
- ...(preview === "" ? [] : [preview.trimEnd()]),
192
- ...(branch === "" ? [] : [branch.trimEnd()]),
193
- ].join("\n");
194
- return {
195
- source: `import { defineConfig } from "${CONFIG_PACKAGE}/v1";
135
+ * Render a `neon.ts` from a branch's live state (`config init --from-branch`).
136
+ *
137
+ * Only what the branch can actually report is declared. Three things are deliberately
138
+ * absent, each for its own reason:
139
+ *
140
+ * - **The AI Gateway** has no branch-level enabled state to read — it is always available and
141
+ * credential-gated — so `pullConfig` cannot tell whether a policy would enable it.
142
+ * - **Functions** cannot round-trip (no `source` path on the remote); they are listed as a
143
+ * commented-out block.
144
+ * - **`protected`** is branch state rather than policy intent, so it is reported as a comment.
145
+ *
146
+ * A branch with nothing to report (no services, no tuning) renders the starter policy rather
147
+ * than an empty `defineConfig({})`: seeding found nothing, and the caller says so.
148
+ */
149
+ const renderNeonConfigFromView = (view, branchName) => {
150
+ const services = [view.auth ? " auth: true," : "", view.dataApi ? " dataApi: true," : ""].filter((line) => line !== "");
151
+ const preview = renderSeededPreview(view, branchName);
152
+ const branch = renderSeededBranch(view);
153
+ if (services.length === 0 && preview === "" && branch === "") return {
154
+ source: renderNeonConfig([]),
155
+ seeded: false
156
+ };
157
+ const protectedNote = view.branch?.protected ? `// ${branchName} is protected on Neon. Not declared here: a policy \`protected\` would\n// apply to every branch this policy is applied to.\n` : "";
158
+ const body = [
159
+ ...services,
160
+ ...preview === "" ? [] : [preview.trimEnd()],
161
+ ...branch === "" ? [] : [branch.trimEnd()]
162
+ ].join("\n");
163
+ return {
164
+ source: `import { defineConfig } from "${CONFIG_PACKAGE}/v1";
196
165
 
197
166
  // Seeded by \`neon config init --from-branch\` from ${branchName}.
198
167
  // The AI Gateway is not readable from a branch (always available, credential-gated), so add
@@ -201,20 +170,22 @@ ${protectedNote}export default defineConfig({
201
170
  ${body}
202
171
  });
203
172
  `,
204
- seeded: true,
205
- };
173
+ seeded: true
174
+ };
206
175
  };
207
176
  /**
208
- * The handler written alongside `neon.ts` when `functions` is selected. It has to exist:
209
- * `FunctionDef.source` is only resolved when `config apply` / `deploy` bundles it, so a
210
- * declared function with no file on disk fails at deploy time rather than at authoring time.
211
- *
212
- * A default-exported function rather than `export default { fetch }`: both are resolved (see
213
- * `resolveFetchHandler`), and the bare function is less to read and less to get wrong. It is
214
- * named rather than anonymous so a project's linter has nothing to say about it, and takes no
215
- * parameter because a scaffold shipping an unused `req` fails a `noUnusedParameters` project.
216
- */
217
- export const FUNCTION_TEMPLATE = `export default async function hello(): Promise<Response> {
177
+ * The handler written alongside `neon.ts` when `functions` is selected. It has to exist:
178
+ * `FunctionDef.source` is only resolved when `config apply` / `deploy` bundles it, so a
179
+ * declared function with no file on disk fails at deploy time rather than at authoring time.
180
+ *
181
+ * A default-exported function rather than `export default { fetch }`: both are resolved (see
182
+ * `resolveFetchHandler`), and the bare function is less to read and less to get wrong. It is
183
+ * named rather than anonymous so a project's linter has nothing to say about it, and takes no
184
+ * parameter because a scaffold shipping an unused `req` fails a `noUnusedParameters` project.
185
+ */
186
+ const FUNCTION_TEMPLATE = `export default async function hello(): Promise<Response> {
218
187
  return new Response("Hello from Neon Functions");
219
188
  }
220
189
  `;
190
+ //#endregion
191
+ export { BUCKET_NAME, CONFIG_INIT_NONE_MEANS, CONFIG_INIT_SERVICES, CONFIG_INIT_UNAVAILABLE, CONFIG_PACKAGE, ENV_PACKAGE, FUNCTION_FILENAME, FUNCTION_NAME, FUNCTION_SLUG, FUNCTION_TEMPLATE, REQUIRED_PACKAGES, renderNeonConfig, renderNeonConfigFromView };