neon 4.18.1 → 4.19.0

package/README.md

@@ -610,6 +610,8 @@ export default defineConfig({
 ? Which Neon services should neon.ts declare? (space to toggle, enter to confirm) ›
 ◯   Managed Better Auth
      Authentication with users and sessions stored in Postgres.
+◯   Data API
+     PostgREST-compatible HTTP API. Also declares Auth; the default provider needs it.
 ◯   Functions
      Long-running, without timeouts, and closer to your database.
 ◯   Object Storage
@@ -627,6 +629,9 @@ neon config init
 # Declare services with no prompt
 neon config init --services auth,functions,object-storage,ai-gateway
 
+# Data API also writes auth: true (the default provider requires it)
+neon config init --services data-api
+
 # Repeat the flag instead, and shorten it — every services flag takes all three spellings
 neon config init -s auth -s functions
 

package/dist/config_template.js

@@ -15,24 +15,21 @@ const REQUIRED_PACKAGES = [CONFIG_PACKAGE, ENV_PACKAGE];
 /**
 * The services `config init` can declare in the `neon.ts` it scaffolds — the subset of
 * {@link NEON_SERVICES} a policy has a field for. {@link renderNeonConfig} owns the mapping
-* from these names to the `neon.ts` fields (`aiGateway`, `buckets`).
+* from these names to the `neon.ts` fields (`aiGateway`, `buckets`, `dataApi`).
 *
-* Postgres is absent because every branch has it, so there is nothing to declare. `data-api`
-* is absent because enabling it with the default `authProvider: "neon"` requires `auth` — a
-* pairing the picker would have to enforce rather than offer.
+* Postgres is absent because every branch has it, so there is nothing to declare. Selecting
+* `data-api` also writes `auth: true`: the default Data API provider requires Neon Auth, and
+* `defineConfig` type-errors the file without it.
 */
-const CONFIG_INIT_SERVICES = NEON_SERVICES.filter((service) => service !== "postgres" && service !== "data-api");
+const CONFIG_INIT_SERVICES = NEON_SERVICES.filter((service) => service !== "postgres");
 /**
 * What `config init --services none` produces. One constant because it is both the help text
 * and what tells the parser `none` is a value here — passing the literal at each call site
 * lets the two drift into documenting something the parser does not accept.
 */
 const CONFIG_INIT_NONE_MEANS = "the bare starter policy";
-/** Why the two a policy cannot declare are not selectable, for the refusal message. */
-const CONFIG_INIT_UNAVAILABLE = {
-	postgres: "every branch has Postgres, so a policy has nothing to declare for it",
-	"data-api": "enabling it with the default provider requires auth, so declare auth here and turn the Data API on with `neon data-api create`"
-};
+/** Why a policy cannot declare a real Neon service, for the refusal message. */
+const CONFIG_INIT_UNAVAILABLE = { postgres: "every branch has Postgres, so a policy has nothing to declare for it" };
 /** Slug, display name, and source path of the function scaffolded for `functions`. */
 const FUNCTION_SLUG = "hello";
 const FUNCTION_NAME = "Hello World";
@@ -70,13 +67,19 @@ const renderPreview = (services) => {
 * policy — an explicit `auth: false`, no `preview` block, and a `branch` closure that gives
 * new non-default branches a 7-day TTL — so the picker's "skip everything" answer and a
 * non-interactive run produce the identical file.
+*
+* `data-api` writes `dataApi: true` and forces `auth: true`. The default provider is Neon
+* Auth; omitting auth is a `defineConfig` type error rather than a deploy-time surprise.
 */
-const renderNeonConfig = (services) => `import { defineConfig } from "${CONFIG_PACKAGE}/v1";
+const renderNeonConfig = (services) => {
+	const auth = services.includes("auth") || services.includes("data-api");
+	const dataApi = services.includes("data-api") ? "  dataApi: true,\n" : "";
+	return `import { defineConfig } from "${CONFIG_PACKAGE}/v1";
 
 export default defineConfig({
   // Declare your Neon services here
-  auth: ${services.includes("auth")},
-${renderPreview(services)}  // Branch policy: per-branch tuning
+  auth: ${auth},
+${dataApi}${renderPreview(services)}  // Branch policy: per-branch tuning
   branch: (branch) => {
     if (branch.isDefault) {
       // Default branch: no overrides, uses project defaults
@@ -92,6 +95,7 @@ ${renderPreview(services)}  // Branch policy: per-branch tuning
   },
 });
 `;
+};
 /** Render a scalar the way it has to appear in TypeScript source. */
 const renderScalar = (value) => typeof value === "string" ? `"${value}"` : String(value);
 /**

package/dist/utils/service_picker.js

@@ -12,6 +12,11 @@ const CHOICES = [
 		title: "Managed Better Auth",
 		description: "Authentication with users and sessions stored in Postgres."
 	},
+	{
+		value: "data-api",
+		title: "Data API",
+		description: "PostgREST-compatible HTTP API. Also declares Auth; the default provider needs it."
+	},
 	{
 		value: "functions",
 		title: "Functions",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "neon",
-  "version": "4.18.1",
+  "version": "4.19.0",
   "description": "CLI tool for Neon, the cloud backend primitives built around Lakebase Postgres",
   "keywords": [
     "neon",
@@ -98,9 +98,9 @@
     "typescript": "^5.9.0",
     "vitest": "^3.0.9",
     "@neon-internals/cli-core": "0.0.0",
-    "@neon/e2e-harness": "0.0.0",
     "@neon-internals/env-core": "0.0.17",
-    "@neon/functions": "0.10.0"
+    "@neon/e2e-harness": "0.0.0",
+    "@neon/functions": "0.11.0"
   },
   "publishConfig": {
     "access": "public",