neon 3.0.0 → 3.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (207) hide show
  1. package/README.md +70 -5
  2. package/dist/_chunks/auth_selection-DGgq6ifc.js +83 -0
  3. package/dist/_chunks/cmd_pipeline-CUbBO9U_.js +2818 -0
  4. package/dist/_chunks/credentials-MYdHdKah.js +188 -0
  5. package/dist/_chunks/env-NbA61JR3.js +585 -0
  6. package/dist/_chunks/env_services-Tz9G4JeT.js +531 -0
  7. package/dist/_chunks/paths-DMq0Lt7a.js +151 -0
  8. package/dist/_chunks/profiles-Ir29rqns.js +217 -0
  9. package/dist/_chunks/psql-DWH-kc69.js +2169 -0
  10. package/dist/_chunks/rolldown-runtime-D7D4PA-g.js +13 -0
  11. package/dist/_chunks/secure_file-BucZj4yQ.js +39 -0
  12. package/dist/analytics.js +163 -207
  13. package/dist/api.js +815 -758
  14. package/dist/auth.js +121 -141
  15. package/dist/auth_context.js +39 -53
  16. package/dist/cli.js +4 -7
  17. package/dist/commands/api.js +220 -250
  18. package/dist/commands/api_keys.js +251 -314
  19. package/dist/commands/auth.js +283 -328
  20. package/dist/commands/bootstrap.js +372 -437
  21. package/dist/commands/branches.js +304 -455
  22. package/dist/commands/bucket.js +374 -514
  23. package/dist/commands/checkout.js +213 -298
  24. package/dist/commands/config.js +573 -690
  25. package/dist/commands/connection_string.js +137 -165
  26. package/dist/commands/data_api.js +238 -260
  27. package/dist/commands/databases.js +67 -76
  28. package/dist/commands/deploy.js +31 -25
  29. package/dist/commands/dev.js +639 -719
  30. package/dist/commands/diff.js +156 -200
  31. package/dist/commands/env.js +255 -305
  32. package/dist/commands/functions.js +275 -355
  33. package/dist/commands/index.js +70 -65
  34. package/dist/commands/init.js +84 -119
  35. package/dist/commands/inspect.js +55 -55
  36. package/dist/commands/ip_allow.js +88 -120
  37. package/dist/commands/link.js +874 -1019
  38. package/dist/commands/logs.js +291 -0
  39. package/dist/commands/neon_auth.js +725 -933
  40. package/dist/commands/operations.js +34 -25
  41. package/dist/commands/orgs.js +28 -18
  42. package/dist/commands/profile.js +615 -846
  43. package/dist/commands/projects.js +313 -373
  44. package/dist/commands/psql.js +60 -58
  45. package/dist/commands/roles.js +55 -58
  46. package/dist/commands/schema_diff.js +87 -131
  47. package/dist/commands/set_context.js +34 -26
  48. package/dist/commands/snapshots.js +288 -413
  49. package/dist/commands/status.js +41 -37
  50. package/dist/commands/user.js +21 -10
  51. package/dist/commands/vpc_endpoints.js +85 -113
  52. package/dist/config.js +7 -6
  53. package/dist/config_format.js +50 -66
  54. package/dist/config_template.js +128 -157
  55. package/dist/context.js +183 -235
  56. package/dist/current_branch_fast_path.js +40 -49
  57. package/dist/dev/env.js +2 -446
  58. package/dist/dev/functions.js +54 -68
  59. package/dist/dev/inputs.js +46 -58
  60. package/dist/dev/runtime.js +135 -164
  61. package/dist/dev/websocket.js +766 -959
  62. package/dist/env.js +27 -33
  63. package/dist/env_file.js +118 -132
  64. package/dist/env_services.js +2 -51
  65. package/dist/errors.js +57 -68
  66. package/dist/functions_api.js +45 -43
  67. package/dist/help.js +189 -140
  68. package/dist/index.js +182 -257
  69. package/dist/init/agents.js +137 -118
  70. package/dist/init/auth.js +58 -68
  71. package/dist/init/bootstrap.js +325 -396
  72. package/dist/init/build_config.js +4 -2
  73. package/dist/init/detect_agent.js +56 -101
  74. package/dist/init/editors.js +35 -52
  75. package/dist/init/enrich_output.js +51 -66
  76. package/dist/init/extension.js +134 -171
  77. package/dist/init/inspect.js +179 -266
  78. package/dist/init/interactive.js +510 -622
  79. package/dist/init/neonctl.js +117 -168
  80. package/dist/init/orchestrate.js +157 -173
  81. package/dist/init/phases/auth.js +188 -202
  82. package/dist/init/phases/cleanup.js +23 -23
  83. package/dist/init/phases/db.js +251 -277
  84. package/dist/init/phases/getting_started.js +213 -223
  85. package/dist/init/phases/mcp.js +174 -224
  86. package/dist/init/phases/migrations.js +247 -248
  87. package/dist/init/phases/neon_auth.js +114 -133
  88. package/dist/init/phases/setup.js +546 -703
  89. package/dist/init/phases/skills.js +75 -86
  90. package/dist/init/phases/status.js +72 -67
  91. package/dist/init/resolve_context.js +102 -99
  92. package/dist/init/route_command.js +91 -98
  93. package/dist/init/skills.js +174 -218
  94. package/dist/init/vsix.js +77 -99
  95. package/dist/log.js +17 -16
  96. package/dist/neon_services.js +104 -129
  97. package/dist/parameters.gen.js +481 -471
  98. package/dist/pkg.js +17 -19
  99. package/dist/profile_keys.js +44 -47
  100. package/dist/psql/cli.js +44 -47
  101. package/dist/psql/command/cmd_cond.js +231 -406
  102. package/dist/psql/command/cmd_connect.js +557 -764
  103. package/dist/psql/command/cmd_copy.js +728 -984
  104. package/dist/psql/command/cmd_describe.js +1499 -1688
  105. package/dist/psql/command/cmd_format.js +733 -905
  106. package/dist/psql/command/cmd_io.js +2 -2193
  107. package/dist/psql/command/cmd_lo.js +297 -359
  108. package/dist/psql/command/cmd_meta.js +727 -878
  109. package/dist/psql/command/cmd_misc.js +138 -172
  110. package/dist/psql/command/cmd_pipeline.js +2 -1148
  111. package/dist/psql/command/cmd_restrict.js +119 -155
  112. package/dist/psql/command/cmd_show.js +529 -688
  113. package/dist/psql/command/dispatch.js +260 -325
  114. package/dist/psql/command/inputQueue.js +35 -33
  115. package/dist/psql/command/shared.js +49 -63
  116. package/dist/psql/complete/filenames.js +90 -133
  117. package/dist/psql/complete/index.js +59 -97
  118. package/dist/psql/complete/matcher.js +236 -300
  119. package/dist/psql/complete/psqlVars.js +218 -223
  120. package/dist/psql/complete/queries.js +159 -177
  121. package/dist/psql/complete/rules.js +1493 -2299
  122. package/dist/psql/core/common.js +2 -1253
  123. package/dist/psql/core/help.js +456 -546
  124. package/dist/psql/core/mainloop.js +692 -1303
  125. package/dist/psql/core/prompt.js +391 -408
  126. package/dist/psql/core/settings.js +429 -644
  127. package/dist/psql/core/sqlHelp.js +480 -554
  128. package/dist/psql/core/startup.js +2 -846
  129. package/dist/psql/core/syncVars.js +67 -110
  130. package/dist/psql/core/variables.js +156 -278
  131. package/dist/psql/describe/formatters.js +884 -1285
  132. package/dist/psql/describe/processNamePattern.js +173 -260
  133. package/dist/psql/describe/queries.js +1368 -2403
  134. package/dist/psql/describe/versionGate.js +32 -41
  135. package/dist/psql/index.js +2 -2030
  136. package/dist/psql/io/history.js +232 -271
  137. package/dist/psql/io/input.js +103 -108
  138. package/dist/psql/io/lineEditor/buffer.js +238 -319
  139. package/dist/psql/io/lineEditor/complete.js +135 -213
  140. package/dist/psql/io/lineEditor/filename.js +139 -148
  141. package/dist/psql/io/lineEditor/index.js +653 -870
  142. package/dist/psql/io/lineEditor/keymap.js +544 -702
  143. package/dist/psql/io/lineEditor/vt100.js +294 -341
  144. package/dist/psql/io/pgpass.js +158 -187
  145. package/dist/psql/io/pgservice.js +146 -183
  146. package/dist/psql/io/psqlrc.js +328 -403
  147. package/dist/psql/print/aligned.js +1020 -1683
  148. package/dist/psql/print/asciidoc.js +180 -214
  149. package/dist/psql/print/crosstab.js +281 -442
  150. package/dist/psql/print/csv.js +48 -70
  151. package/dist/psql/print/html.js +195 -226
  152. package/dist/psql/print/json.js +75 -88
  153. package/dist/psql/print/latex.js +291 -364
  154. package/dist/psql/print/pager.js +171 -242
  155. package/dist/psql/print/troff.js +194 -226
  156. package/dist/psql/print/unaligned.js +69 -95
  157. package/dist/psql/print/units.js +167 -169
  158. package/dist/psql/scanner/slash.js +428 -483
  159. package/dist/psql/scanner/sql.js +445 -889
  160. package/dist/psql/scanner/stringutils.js +309 -379
  161. package/dist/psql/types/index.js +8 -7
  162. package/dist/psql/types/scanner.js +25 -22
  163. package/dist/psql/wire/connection.js +2042 -2803
  164. package/dist/psql/wire/copy.js +84 -100
  165. package/dist/psql/wire/notify.js +39 -59
  166. package/dist/psql/wire/pipeline.js +305 -518
  167. package/dist/psql/wire/protocol.js +349 -417
  168. package/dist/psql/wire/sasl.js +180 -265
  169. package/dist/psql/wire/tls.js +400 -561
  170. package/dist/storage_api.js +115 -129
  171. package/dist/test_utils/fixtures.js +94 -113
  172. package/dist/test_utils/oauth_server.js +10 -7
  173. package/dist/test_utils/project_dir.js +33 -0
  174. package/dist/utils/ai_gateway_notice.js +131 -162
  175. package/dist/utils/api_enums.js +21 -28
  176. package/dist/utils/auth.js +10 -4
  177. package/dist/utils/branch_notice.js +20 -19
  178. package/dist/utils/branch_picker.js +83 -89
  179. package/dist/utils/cli_name.js +15 -12
  180. package/dist/utils/compute_units.js +20 -27
  181. package/dist/utils/config_diff.js +127 -158
  182. package/dist/utils/enrichers.js +95 -148
  183. package/dist/utils/esbuild.js +130 -189
  184. package/dist/utils/flags.js +35 -47
  185. package/dist/utils/formats.js +8 -15
  186. package/dist/utils/git_diff.js +69 -80
  187. package/dist/utils/inspect_db.js +101 -143
  188. package/dist/utils/inspect_queries.js +179 -142
  189. package/dist/utils/middlewares.js +39 -45
  190. package/dist/utils/openapi.js +87 -99
  191. package/dist/utils/package_manager.js +312 -110
  192. package/dist/utils/point_in_time.js +49 -53
  193. package/dist/utils/psql.js +89 -106
  194. package/dist/utils/service_picker.js +55 -58
  195. package/dist/utils/string.js +5 -5
  196. package/dist/utils/ui.js +38 -55
  197. package/dist/utils/write_sync.js +26 -35
  198. package/dist/utils/zip.js +4 -3
  199. package/dist/writer.js +67 -87
  200. package/package.json +11 -6
  201. package/dist/_shared/auth_selection.js +0 -86
  202. package/dist/_shared/credentials.js +0 -209
  203. package/dist/_shared/env-core/env.js +0 -558
  204. package/dist/_shared/env-core/reuse-secrets.js +0 -223
  205. package/dist/_shared/paths.js +0 -148
  206. package/dist/_shared/profiles.js +0 -276
  207. package/dist/_shared/secure_file.js +0 -43
@@ -1,88 +1,77 @@
1
1
  import { NEON_SERVICES } from "./neon_services.js";
2
+ //#region src/config_template.ts
2
3
  /**
3
- * The published npm packages a `neon.ts` project needs — the `@neon/*` org names.
4
- *
5
- * ⚠️ These ship to users the next time `neonctl` is released, so do NOT release
6
- * neonctl until `@neon/config` and `@neon/env` are published to npm — otherwise
7
- * `config init` would install packages that don't exist yet. (The libraries are
8
- * mid-migration from `@neondatabase/*`; track their publish before cutting a CLI
9
- * release.)
10
- */
11
- export const CONFIG_PACKAGE = "@neon/config";
12
- export const ENV_PACKAGE = "@neon/env";
13
- export const REQUIRED_PACKAGES = [CONFIG_PACKAGE, ENV_PACKAGE];
4
+ * The published npm packages a `neon.ts` project needs — the `@neon/*` org names.
5
+ *
6
+ * ⚠️ These ship to users the next time `neonctl` is released, so do NOT release
7
+ * neonctl until `@neon/config` and `@neon/env` are published to npm — otherwise
8
+ * `config init` would install packages that don't exist yet. (The libraries are
9
+ * mid-migration from `@neondatabase/*`; track their publish before cutting a CLI
10
+ * release.)
11
+ */
12
+ const CONFIG_PACKAGE = "@neon/config";
13
+ const ENV_PACKAGE = "@neon/env";
14
+ const REQUIRED_PACKAGES = [CONFIG_PACKAGE, ENV_PACKAGE];
14
15
  /**
15
- * The services `config init` can declare in the `neon.ts` it scaffolds — the subset of
16
- * {@link NEON_SERVICES} a policy has a field for. {@link renderNeonConfig} owns the mapping
17
- * from these names to the `neon.ts` fields (`aiGateway`, `buckets`).
18
- *
19
- * Postgres is absent because every branch has it, so there is nothing to declare. `data-api`
20
- * is absent because enabling it with the default `authProvider: "neon"` requires `auth` — a
21
- * pairing the picker would have to enforce rather than offer.
22
- */
23
- export const CONFIG_INIT_SERVICES = NEON_SERVICES.filter((service) => service !== "postgres" && service !== "data-api");
16
+ * The services `config init` can declare in the `neon.ts` it scaffolds — the subset of
17
+ * {@link NEON_SERVICES} a policy has a field for. {@link renderNeonConfig} owns the mapping
18
+ * from these names to the `neon.ts` fields (`aiGateway`, `buckets`).
19
+ *
20
+ * Postgres is absent because every branch has it, so there is nothing to declare. `data-api`
21
+ * is absent because enabling it with the default `authProvider: "neon"` requires `auth` — a
22
+ * pairing the picker would have to enforce rather than offer.
23
+ */
24
+ const CONFIG_INIT_SERVICES = NEON_SERVICES.filter((service) => service !== "postgres" && service !== "data-api");
24
25
  /**
25
- * What `config init --services none` produces. One constant because it is both the help text
26
- * and what tells the parser `none` is a value here — passing the literal at each call site
27
- * lets the two drift into documenting something the parser does not accept.
28
- */
29
- export const CONFIG_INIT_NONE_MEANS = "the bare starter policy";
26
+ * What `config init --services none` produces. One constant because it is both the help text
27
+ * and what tells the parser `none` is a value here — passing the literal at each call site
28
+ * lets the two drift into documenting something the parser does not accept.
29
+ */
30
+ const CONFIG_INIT_NONE_MEANS = "the bare starter policy";
30
31
  /** Why the two a policy cannot declare are not selectable, for the refusal message. */
31
- export const CONFIG_INIT_UNAVAILABLE = {
32
- postgres: "every branch has Postgres, so a policy has nothing to declare for it",
33
- "data-api": "enabling it with the default provider requires auth, so declare auth here and turn the Data API on with `neon data-api create`",
32
+ const CONFIG_INIT_UNAVAILABLE = {
33
+ postgres: "every branch has Postgres, so a policy has nothing to declare for it",
34
+ "data-api": "enabling it with the default provider requires auth, so declare auth here and turn the Data API on with `neon data-api create`"
34
35
  };
35
36
  /** Slug, display name, and source path of the function scaffolded for `functions`. */
36
- export const FUNCTION_SLUG = "hello";
37
- export const FUNCTION_NAME = "Hello World";
38
- export const FUNCTION_FILENAME = "hello.ts";
37
+ const FUNCTION_SLUG = "hello";
38
+ const FUNCTION_NAME = "Hello World";
39
+ const FUNCTION_FILENAME = "hello.ts";
39
40
  /** Name of the bucket scaffolded for `storage`. */
40
- export const BUCKET_NAME = "assets";
41
+ const BUCKET_NAME = "assets";
41
42
  /**
42
- * One indentation level in the emitted `neon.ts`. Two spaces, which is what every renderer
43
- * here produces and what `config_template.format.test.ts` holds them to.
44
- */
43
+ * One indentation level in the emitted `neon.ts`. Two spaces, which is what every renderer
44
+ * here produces and what `config_template.format.test.ts` holds them to.
45
+ */
45
46
  const INDENT = " ";
46
47
  /**
47
- * Prefix each line with `level` indentation levels. Nesting is expressed as a number at the
48
- * one place that knows the structure, rather than as literal spaces at every push site — a
49
- * miscounted space is otherwise invisible in review and only shows up in a user's file.
50
- */
48
+ * Prefix each line with `level` indentation levels. Nesting is expressed as a number at the
49
+ * one place that knows the structure, rather than as literal spaces at every push site — a
50
+ * miscounted space is otherwise invisible in review and only shows up in a user's file.
51
+ */
51
52
  const at = (level, ...lines) => lines.map((line) => INDENT.repeat(level) + line);
52
53
  /** Wrap `body` in an object-literal block named `key`, indented from `level`. */
53
54
  const block = (level, key, body) => [
54
- ...at(level, `${key}: {`),
55
- ...body,
56
- ...at(level, "},"),
55
+ ...at(level, `${key}: {`),
56
+ ...body,
57
+ ...at(level, "},")
57
58
  ];
58
59
  /** The `preview` block for the selected services, or "" when none of them is a preview feature. */
59
60
  const renderPreview = (services) => {
60
- const lines = [];
61
- if (services.includes("ai-gateway")) {
62
- lines.push(...at(2, "aiGateway: true,"));
63
- }
64
- if (services.includes("functions")) {
65
- lines.push(...block(2, "functions", [
66
- ...at(3, `${FUNCTION_SLUG}: { name: "${FUNCTION_NAME}", source: "./${FUNCTION_FILENAME}" },`),
67
- ]));
68
- }
69
- if (services.includes("object-storage")) {
70
- lines.push(...block(2, "buckets", [
71
- ...at(3, `// "private" is the default; use "public_read" for anonymous reads`, `${BUCKET_NAME}: { access: "private" },`),
72
- ]));
73
- }
74
- if (lines.length === 0) {
75
- return "";
76
- }
77
- return `${block(1, "preview", lines).join("\n")}\n`;
61
+ const lines = [];
62
+ if (services.includes("ai-gateway")) lines.push(...at(2, "aiGateway: true,"));
63
+ if (services.includes("functions")) lines.push(...block(2, "functions", [...at(3, `${FUNCTION_SLUG}: { name: "${FUNCTION_NAME}", source: "./${FUNCTION_FILENAME}" },`)]));
64
+ if (services.includes("object-storage")) lines.push(...block(2, "buckets", [...at(3, `// "private" is the default; use "public_read" for anonymous reads`, `${BUCKET_NAME}: { access: "private" },`)]));
65
+ if (lines.length === 0) return "";
66
+ return `${block(1, "preview", lines).join("\n")}\n`;
78
67
  };
79
68
  /**
80
- * Render the `neon.ts` policy `config init` writes. With no services this is the starter
81
- * policy — an explicit `auth: false`, no `preview` block, and a `branch` closure that gives
82
- * new non-default branches a 7-day TTL — so the picker's "skip everything" answer and a
83
- * non-interactive run produce the identical file.
84
- */
85
- export const renderNeonConfig = (services) => `import { defineConfig } from "${CONFIG_PACKAGE}/v1";
69
+ * Render the `neon.ts` policy `config init` writes. With no services this is the starter
70
+ * policy — an explicit `auth: false`, no `preview` block, and a `branch` closure that gives
71
+ * new non-default branches a 7-day TTL — so the picker's "skip everything" answer and a
72
+ * non-interactive run produce the identical file.
73
+ */
74
+ const renderNeonConfig = (services) => `import { defineConfig } from "${CONFIG_PACKAGE}/v1";
86
75
 
87
76
  export default defineConfig({
88
77
  // Declare your Neon services here
@@ -106,93 +95,73 @@ ${renderPreview(services)} // Branch policy: per-branch tuning
106
95
  /** Render a scalar the way it has to appear in TypeScript source. */
107
96
  const renderScalar = (value) => typeof value === "string" ? `"${value}"` : String(value);
108
97
  /**
109
- * Render an object key. Live names are not identifiers: a Neon bucket may be called
110
- * `smoke-uploads`, which as a bare key is a subtraction and a syntax error. Anything that
111
- * isn't a plain identifier gets quoted.
112
- */
98
+ * Render an object key. Live names are not identifiers: a Neon bucket may be called
99
+ * `smoke-uploads`, which as a bare key is a subtraction and a syntax error. Anything that
100
+ * isn't a plain identifier gets quoted.
101
+ */
113
102
  const renderKey = (name) => /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(name) ? name : JSON.stringify(name);
114
103
  /**
115
- * The `branch` closure for a policy seeded from live state, or "" when the branch carries no
116
- * tuning worth declaring.
117
- *
118
- * `protected` is read but never declared: it is a fact about one branch, while a policy
119
- * `protected` applies to every branch the policy runs against. It becomes a comment instead.
120
- */
104
+ * The `branch` closure for a policy seeded from live state, or "" when the branch carries no
105
+ * tuning worth declaring.
106
+ *
107
+ * `protected` is read but never declared: it is a fact about one branch, while a policy
108
+ * `protected` applies to every branch the policy runs against. It becomes a comment instead.
109
+ */
121
110
  const renderSeededBranch = (view) => {
122
- const settings = [];
123
- if (view.branch?.parent !== undefined) {
124
- settings.push(...at(2, `parent: ${renderScalar(view.branch.parent)},`));
125
- }
126
- if (view.branch?.ttl !== undefined) {
127
- settings.push(...at(2, `ttl: ${renderScalar(view.branch.ttl)},`));
128
- }
129
- const compute = view.branch?.postgres?.computeSettings;
130
- const computeFields = Object.entries(compute ?? {}).filter(([, value]) => value !== undefined);
131
- if (computeFields.length > 0) {
132
- settings.push(...block(2, "postgres", [
133
- ...block(3, "computeSettings", computeFields.flatMap(([field, value]) => at(4, `${field}: ${renderScalar(value)},`))),
134
- ]));
135
- }
136
- if (settings.length === 0) {
137
- return "";
138
- }
139
- // An arrow returning an object literal, so the closing line is `}),` rather than `},`.
140
- return `${[...at(1, "branch: () => ({"), ...settings, ...at(1, "}),")].join("\n")}\n`;
111
+ const settings = [];
112
+ if (view.branch?.parent !== void 0) settings.push(...at(2, `parent: ${renderScalar(view.branch.parent)},`));
113
+ if (view.branch?.ttl !== void 0) settings.push(...at(2, `ttl: ${renderScalar(view.branch.ttl)},`));
114
+ const compute = view.branch?.postgres?.computeSettings;
115
+ const computeFields = Object.entries(compute ?? {}).filter(([, value]) => value !== void 0);
116
+ if (computeFields.length > 0) settings.push(...block(2, "postgres", [...block(3, "computeSettings", computeFields.flatMap(([field, value]) => at(4, `${field}: ${renderScalar(value)},`)))]));
117
+ if (settings.length === 0) return "";
118
+ return `${[
119
+ ...at(1, "branch: () => ({"),
120
+ ...settings,
121
+ ...at(1, "}),")
122
+ ].join("\n")}\n`;
141
123
  };
142
124
  /** The `preview` block for a policy seeded from live state. */
143
125
  const renderSeededPreview = (view, branchName) => {
144
- const lines = [];
145
- const buckets = Object.entries(view.preview?.buckets ?? {});
146
- if (buckets.length > 0) {
147
- lines.push(...block(2, "buckets", buckets.flatMap(([name, bucket]) => at(3, `${renderKey(name)}: { access: "${bucket.access}" },`))));
148
- }
149
- // A deployed function cannot be declared from live state: `source` is a path in the
150
- // user's project and the branch only knows the uploaded bundle. Listing the slugs as a
151
- // commented-out block is the most a read-back can honestly produce.
152
- const functions = Object.entries(view.preview?.functions ?? {});
153
- if (functions.length > 0) {
154
- lines.push(...at(2, `// ${branchName} has ${functions.length} deployed function${functions.length === 1 ? "" : "s"}.`, "// Declaring one needs the local source path, which the branch does not know:", "// functions: {", ...functions.map(([slug, fn]) => `// ${renderKey(slug)}: { name: "${fn.name}", source: "./${slug}.ts" },`), "// },"));
155
- }
156
- if (lines.length === 0) {
157
- return "";
158
- }
159
- return `${block(1, "preview", lines).join("\n")}\n`;
126
+ const lines = [];
127
+ const buckets = Object.entries(view.preview?.buckets ?? {});
128
+ if (buckets.length > 0) lines.push(...block(2, "buckets", buckets.flatMap(([name, bucket]) => at(3, `${renderKey(name)}: { access: "${bucket.access}" },`))));
129
+ const functions = Object.entries(view.preview?.functions ?? {});
130
+ if (functions.length > 0) lines.push(...at(2, `// ${branchName} has ${functions.length} deployed function${functions.length === 1 ? "" : "s"}.`, "// Declaring one needs the local source path, which the branch does not know:", "// functions: {", ...functions.map(([slug, fn]) => `// ${renderKey(slug)}: { name: "${fn.name}", source: "./${slug}.ts" },`), "// },"));
131
+ if (lines.length === 0) return "";
132
+ return `${block(1, "preview", lines).join("\n")}\n`;
160
133
  };
161
134
  /**
162
- * Render a `neon.ts` from a branch's live state (`config init --from-branch`).
163
- *
164
- * Only what the branch can actually report is declared. Three things are deliberately
165
- * absent, each for its own reason:
166
- *
167
- * - **The AI Gateway** has no branch-level enabled state to read — it is always available and
168
- * credential-gated — so `pullConfig` cannot tell whether a policy would enable it.
169
- * - **Functions** cannot round-trip (no `source` path on the remote); they are listed as a
170
- * commented-out block.
171
- * - **`protected`** is branch state rather than policy intent, so it is reported as a comment.
172
- *
173
- * A branch with nothing to report (no services, no tuning) renders the starter policy rather
174
- * than an empty `defineConfig({})`: seeding found nothing, and the caller says so.
175
- */
176
- export const renderNeonConfigFromView = (view, branchName) => {
177
- const services = [
178
- view.auth ? " auth: true," : "",
179
- view.dataApi ? " dataApi: true," : "",
180
- ].filter((line) => line !== "");
181
- const preview = renderSeededPreview(view, branchName);
182
- const branch = renderSeededBranch(view);
183
- if (services.length === 0 && preview === "" && branch === "") {
184
- return { source: renderNeonConfig([]), seeded: false };
185
- }
186
- const protectedNote = view.branch?.protected
187
- ? `// ${branchName} is protected on Neon. Not declared here: a policy \`protected\` would\n// apply to every branch this policy is applied to.\n`
188
- : "";
189
- const body = [
190
- ...services,
191
- ...(preview === "" ? [] : [preview.trimEnd()]),
192
- ...(branch === "" ? [] : [branch.trimEnd()]),
193
- ].join("\n");
194
- return {
195
- source: `import { defineConfig } from "${CONFIG_PACKAGE}/v1";
135
+ * Render a `neon.ts` from a branch's live state (`config init --from-branch`).
136
+ *
137
+ * Only what the branch can actually report is declared. Three things are deliberately
138
+ * absent, each for its own reason:
139
+ *
140
+ * - **The AI Gateway** has no branch-level enabled state to read — it is always available and
141
+ * credential-gated — so `pullConfig` cannot tell whether a policy would enable it.
142
+ * - **Functions** cannot round-trip (no `source` path on the remote); they are listed as a
143
+ * commented-out block.
144
+ * - **`protected`** is branch state rather than policy intent, so it is reported as a comment.
145
+ *
146
+ * A branch with nothing to report (no services, no tuning) renders the starter policy rather
147
+ * than an empty `defineConfig({})`: seeding found nothing, and the caller says so.
148
+ */
149
+ const renderNeonConfigFromView = (view, branchName) => {
150
+ const services = [view.auth ? " auth: true," : "", view.dataApi ? " dataApi: true," : ""].filter((line) => line !== "");
151
+ const preview = renderSeededPreview(view, branchName);
152
+ const branch = renderSeededBranch(view);
153
+ if (services.length === 0 && preview === "" && branch === "") return {
154
+ source: renderNeonConfig([]),
155
+ seeded: false
156
+ };
157
+ const protectedNote = view.branch?.protected ? `// ${branchName} is protected on Neon. Not declared here: a policy \`protected\` would\n// apply to every branch this policy is applied to.\n` : "";
158
+ const body = [
159
+ ...services,
160
+ ...preview === "" ? [] : [preview.trimEnd()],
161
+ ...branch === "" ? [] : [branch.trimEnd()]
162
+ ].join("\n");
163
+ return {
164
+ source: `import { defineConfig } from "${CONFIG_PACKAGE}/v1";
196
165
 
197
166
  // Seeded by \`neon config init --from-branch\` from ${branchName}.
198
167
  // The AI Gateway is not readable from a branch (always available, credential-gated), so add
@@ -201,20 +170,22 @@ ${protectedNote}export default defineConfig({
201
170
  ${body}
202
171
  });
203
172
  `,
204
- seeded: true,
205
- };
173
+ seeded: true
174
+ };
206
175
  };
207
176
  /**
208
- * The handler written alongside `neon.ts` when `functions` is selected. It has to exist:
209
- * `FunctionDef.source` is only resolved when `config apply` / `deploy` bundles it, so a
210
- * declared function with no file on disk fails at deploy time rather than at authoring time.
211
- *
212
- * A default-exported function rather than `export default { fetch }`: both are resolved (see
213
- * `resolveFetchHandler`), and the bare function is less to read and less to get wrong. It is
214
- * named rather than anonymous so a project's linter has nothing to say about it, and takes no
215
- * parameter because a scaffold shipping an unused `req` fails a `noUnusedParameters` project.
216
- */
217
- export const FUNCTION_TEMPLATE = `export default async function hello(): Promise<Response> {
177
+ * The handler written alongside `neon.ts` when `functions` is selected. It has to exist:
178
+ * `FunctionDef.source` is only resolved when `config apply` / `deploy` bundles it, so a
179
+ * declared function with no file on disk fails at deploy time rather than at authoring time.
180
+ *
181
+ * A default-exported function rather than `export default { fetch }`: both are resolved (see
182
+ * `resolveFetchHandler`), and the bare function is less to read and less to get wrong. It is
183
+ * named rather than anonymous so a project's linter has nothing to say about it, and takes no
184
+ * parameter because a scaffold shipping an unused `req` fails a `noUnusedParameters` project.
185
+ */
186
+ const FUNCTION_TEMPLATE = `export default async function hello(): Promise<Response> {
218
187
  return new Response("Hello from Neon Functions");
219
188
  }
220
189
  `;
190
+ //#endregion
191
+ export { BUCKET_NAME, CONFIG_INIT_NONE_MEANS, CONFIG_INIT_SERVICES, CONFIG_INIT_UNAVAILABLE, CONFIG_PACKAGE, ENV_PACKAGE, FUNCTION_FILENAME, FUNCTION_NAME, FUNCTION_SLUG, FUNCTION_TEMPLATE, REQUIRED_PACKAGES, renderNeonConfig, renderNeonConfigFromView };