neon 4.4.0 → 4.5.2

package/dist/commands/mcp.js

@@ -4,12 +4,13 @@ import { readContextFile } from "../context.js";
 import { getCliName } from "../utils/cli_name.js";
 import { writer } from "../writer.js";
 import { noPassthrough, single } from "../utils/flags.js";
-import { existingNeonApiKey, installNeonMcpServer, neonMcpUrl, parseMcpCategories, trackedProjectMcpConfig } from "../mcp/install.js";
+import { NEON_MCP_CATEGORIES, NEON_MCP_URL, existingNeonApiKey, installNeonMcpServer, neonMcpUrl, parseMcpCategories, trackedProjectMcpConfig } from "../mcp/install.js";
 import { mintMcpApiKey, mintedKeyRevokeCommand, withdrawMintedKey } from "../mcp/mint.js";
 import { canPickAgentsInteractively } from "../utils/agent_picker.js";
-import { resolveInstallTargets } from "../mcp/targets.js";
+import { mcpInstallableAgents, resolveInstallTargets } from "../mcp/targets.js";
 import { confirmMcpInstall } from "../mcp/wizard.js";
 import { resolveMcpPlan } from "../mcp/plan.js";
+import { helpCsv, helpEpilogue } from "../utils/help_text.js";
 //#region src/commands/mcp.ts
 var mcp_exports = /* @__PURE__ */ __exportAll({
 	builder: () => builder,
@@ -19,6 +20,9 @@ var mcp_exports = /* @__PURE__ */ __exportAll({
 });
 const command = "mcp";
 const describe = "Install the Neon MCP server into coding agents";
+const mcpGlobalAgents = mcpInstallableAgents("global");
+const mcpProjectAgents = mcpInstallableAgents("project");
+const mcpProjectDroppedAgents = mcpGlobalAgents.filter((id) => !mcpProjectAgents.includes(id));
 const builder = (argv) => argv.usage("$0 mcp [options]").options({
 	oauth: {
 		type: "boolean",
@@ -34,13 +38,13 @@ const builder = (argv) => argv.usage("$0 mcp [options]").options({
 		alias: "y",
 		type: "boolean",
 		default: false,
-		describe: "Skip prompts. Defaults to global config, every detected agent and a minted account-wide API key. --project, --oauth, --agent, --read-only, --project-id and --category still apply"
+		describe: "Skip prompts. Defaults listed below. --project, --oauth, --agent, --read-only, --project-id and --category still apply"
 	},
 	agent: {
 		alias: "a",
 		type: "array",
 		string: true,
-		describe: "Coding agent to install into (repeatable). Skips the agent picker",
+		describe: "Coding agent to install into (repeatable). Skips the agent picker. Values listed below",
 		coerce: (value) => {
 			if (value === void 0) return [];
 			const list = Array.isArray(value) ? value : [value];
@@ -65,7 +69,7 @@ const builder = (argv) => argv.usage("$0 mcp [options]").options({
 	category: {
 		type: "array",
 		string: true,
-		describe: "MCP tool category (repeatable or comma-separated). Default: all",
+		describe: "MCP tool category (repeatable or comma-separated). Default: all. Values listed below",
 		coerce: (value) => {
 			if (value === void 0) return [];
 			const list = Array.isArray(value) ? value : [value];
@@ -82,7 +86,7 @@ const builder = (argv) => argv.usage("$0 mcp [options]").options({
 			return parseMcpCategories(parts);
 		}
 	}
-}).example("$0 mcp", "Interactive: config location, agents, auth, then confirm").example("$0 mcp -y", "Global config, detected agents, minted API key").example("$0 mcp --oauth", "Install with OAuth; the agent signs in on first use").example("$0 mcp --project", "Write project-level config").example("$0 mcp --agent cursor --agent claude-code", "Install into specific agents").example("$0 mcp --read-only", "Hide write tools via ?readonly=true").example("$0 mcp --project-id <id>", "Pin tools to one project via ?projectId=").example("$0 mcp --category querying --category schema", "Limit tools to those categories").strict().check(noPassthrough("mcp"));
+}).example("$0 mcp", "Interactive: config location, agents, auth, then confirm").example("$0 mcp -y", "Global config, detected agents, reuse or mint an API key").example("$0 mcp --oauth", "Install with OAuth; the agent signs in on first use").example("$0 mcp --project", "Write project-level config").example("$0 mcp --agent cursor --agent claude-code", "Install into specific agents").example("$0 mcp --read-only", "Hide write tools via ?readonly=true").example("$0 mcp --project-id <id>", "Pin tools to one project via ?projectId=").example("$0 mcp --category querying --category schema", "Limit tools to those categories").epilogue(helpEpilogue(`Installs ${NEON_MCP_URL}`, helpCsv("Supported agents at global scope", mcpGlobalAgents), helpCsv("--project does not support", mcpProjectDroppedAgents), helpCsv("Supported categories", NEON_MCP_CATEGORIES), "neon mcp -y:", "  global config", "  every globally detected agent", "  reuse an existing Neon MCP API key, else mint an account-wide key", "  write tools on, all categories", "  no project pin (including from .neon)")).strict().check(noPassthrough("mcp"));
 const handler = async (props) => {
 	const cwd = process.cwd();
 	const interactive = canPickAgentsInteractively() && props.yes !== true;

package/dist/commands/plugins.js

@@ -2,11 +2,14 @@ import { t as __exportAll } from "../_chunks/rolldown-runtime-8H4AJuhK.js";
 import { log } from "../log.js";
 import { writer } from "../writer.js";
 import { noPassthrough } from "../utils/flags.js";
+import { NEON_MCP_URL } from "../mcp/install.js";
 import { getAgentDisplayName } from "../mcp/agents.js";
 import "../init/agents.js";
 import { canPickAgentsInteractively } from "../utils/agent_picker.js";
+import { helpCsv, helpEpilogue } from "../utils/help_text.js";
+import { pluginsInstallableAgents } from "../plugins/targets.js";
 import { resolvePluginsPlan } from "../plugins/plan.js";
-import { NEON_PLUGIN_NAME, neonPluginsRetryCommand, pluginsAddArgs, runPluginsCli } from "../plugins/run.js";
+import { NEON_PLUGIN_NAME, PLUGIN_SKILLS, PLUGIN_SOURCE, neonPluginsRetryCommand, pluginsAddArgs, runPluginsCli } from "../plugins/run.js";
 import { confirmPluginsInstall } from "../plugins/wizard.js";
 //#region src/commands/plugins.ts
 var plugins_exports = /* @__PURE__ */ __exportAll({
@@ -27,6 +30,8 @@ const coerceAgents = (value) => {
 };
 const command = "plugins";
 const describe = "Install the Neon plugin into coding agents";
+const pluginProjectAgents = pluginsInstallableAgents("project");
+const pluginGlobalOnlyAgents = pluginsInstallableAgents("global").filter((id) => !pluginProjectAgents.includes(id));
 const builder = (argv) => argv.usage("$0 plugins [options]").options({
 	yes: {
 		alias: "y",
@@ -43,10 +48,10 @@ const builder = (argv) => argv.usage("$0 plugins [options]").options({
 		alias: "a",
 		type: "array",
 		string: true,
-		describe: "Coding agent to install into (repeatable). Skips the agent picker",
+		describe: "Coding agent to install into (repeatable). Skips the agent picker. Values listed below",
 		coerce: coerceAgents
 	}
-}).example("$0 plugins", "Interactive: agents, then confirm").example("$0 plugins -y", "Detected agents, skip prompts").example("$0 plugins --agent cursor --agent claude-code", "Install into specific agents").example("$0 plugins --global", "Install user-level").strict().check(noPassthrough("plugins"));
+}).example("$0 plugins", "Interactive: agents, then confirm").example("$0 plugins -y", "Detected agents, skip prompts").example("$0 plugins --agent cursor --agent claude-code", "Install into specific agents").example("$0 plugins --global", "Install user-level").epilogue(helpEpilogue(helpCsv("Supported agents at project scope", pluginProjectAgents), helpCsv("Also with --global", pluginGlobalOnlyAgents), `Currently one plugin: ${NEON_PLUGIN_NAME} from ${PLUGIN_SOURCE}.`, `It includes the Neon MCP server (${NEON_MCP_URL})`, helpCsv("and these skills", PLUGIN_SKILLS))).strict().check(noPassthrough("plugins"));
 const handler = async (props) => {
 	const cwd = process.cwd();
 	const yes = props.yes === true;

package/dist/commands/profile.js

@@ -1,13 +1,14 @@
 import { t as __exportAll } from "../_chunks/rolldown-runtime-8H4AJuhK.js";
-import { _ as upsertProfile, a as canDropProfilesFile, b as writeSecretFile, c as listProfiles, d as newProfileLocation, f as profilesFilePath, g as selectProfileName, h as resolveProfile, i as assertValidProfileName, l as locationForName, m as readProfiles, n as KEYRING_CREDENTIALS, o as credentialsDisplay, p as profilesUsingPath, r as assertProfilesUsable, s as isKeyringPointer, u as locationOf, v as CRED_STORAGE_FILE, y as CRED_STORAGE_KEYRING } from "../_chunks/profiles-CVXNvU2r.js";
-import { c as describeScope, d as scopeOf, l as interpretCredentials, n as KEYRING_SERVICE, o as apiKeyCredentials, r as keyringAccount, s as credentialLabel, t as storeFor } from "../_chunks/credential_io-D2vw1UOw.js";
+import { t as writeSecretFile } from "../_chunks/secure_file-BucZj4yQ.js";
+import { c as describeScope, d as scopeOf, l as interpretCredentials, n as KEYRING_SERVICE, o as apiKeyCredentials, r as keyringAccount, s as credentialLabel, t as storeFor } from "../_chunks/credential_io-B1JxWELN.js";
 import { isCi } from "../env.js";
 import { log } from "../log.js";
 import { getApiClient, isNeonApiError } from "../api.js";
 import { o as isOwnedCredentialPath, r as credentialsPath } from "../_chunks/paths-g3DRqJiD.js";
 import { setAuthContext } from "../auth_context.js";
+import { _ as upsertProfile, a as canDropProfilesFile, c as listProfiles, d as newProfileLocation, f as profilesFilePath, g as selectProfileName, h as resolveProfile, i as assertValidProfileName, l as locationForName, m as readProfiles, n as KEYRING_CREDENTIALS, o as credentialsDisplay, p as profilesUsingPath, r as assertProfilesUsable, s as isKeyringPointer, u as locationOf, v as CRED_STORAGE_FILE, y as CRED_STORAGE_KEYRING } from "../_chunks/profiles-D95AeZ5v.js";
 import { auth, revokeToken } from "../auth.js";
-import { t as credentialInputs } from "../_chunks/auth_selection-Bx2NAgkk.js";
+import { t as credentialInputs } from "../_chunks/auth_selection-ktL6uoEe.js";
 import { readOutgoingCredential, retirePreviousCredential, revokeTokenSet, withdrawKey } from "../retire_credential.js";
 import { authFlow, usableCredential } from "./auth.js";
 import { writer } from "../writer.js";

package/dist/commands/skills.js

@@ -5,7 +5,9 @@ import { noPassthrough } from "../utils/flags.js";
 import { getAgentDisplayName } from "../mcp/agents.js";
 import "../init/agents.js";
 import { canPickAgentsInteractively } from "../utils/agent_picker.js";
-import { mappedSkillsAgentNames } from "../skills/targets.js";
+import { helpCsv, helpEpilogue } from "../utils/help_text.js";
+import { skillsHelpValues, skillsYesHelp } from "../skills/catalog.js";
+import { mappedSkillsAgentNames, skillsInstallableAgents } from "../skills/targets.js";
 import { confirmSkillsInstall, confirmSkillsUpdate } from "../skills/wizard.js";
 import { assertSkillsCanRun, resolveSkillsPlan } from "../skills/plan.js";
 import { assertSkillsNode, neonSkillsRetryCommand, neonSkillsUpdateRetryCommand, runSkillsCli, skillsAddArgs, skillsMetadata, skillsUpdateArgs, skillsUpdateDetail, skillsUpdateHadNothing } from "../skills/run.js";
@@ -64,17 +66,17 @@ const builder = (argv) => argv.usage("$0 skills [command] [options]").command("u
 		alias: "a",
 		type: "array",
 		string: true,
-		describe: "Coding agent to install into (repeatable). Skips the agent picker",
+		describe: "Coding agent to install into (repeatable). Skips the agent picker. Values listed below",
 		coerce: coerceAgents
 	},
 	skill: {
 		alias: "s",
 		type: "array",
 		string: true,
-		describe: "Skill to install (repeatable). Skips the skill picker",
+		describe: "Skill to install (repeatable). Skips the skill picker. Values listed below",
 		coerce: coerceSkills
 	}
-}).example("$0 skills", "Interactive: this directory, agents, skills, then confirm").example("$0 skills -y", "This directory, detected agents, the default skills").example("$0 skills -s neon -s neon-ai-gateway --agent cursor", "Install named skills into specific agents").example("$0 skills --global", "Install user-level skills").strict().check(noPassthrough("skills"));
+}).example("$0 skills", "Interactive: this directory, agents, skills, then confirm").example("$0 skills -y", "This directory, detected agents, the default skills").example("$0 skills -s neon -s neon-ai-gateway --agent cursor", "Install named skills into specific agents").example("$0 skills --global", "Install user-level skills").epilogue(helpEpilogue(helpCsv("Supported agents", skillsInstallableAgents()), "Supported skills, by source repo:", skillsHelpValues(), skillsYesHelp())).strict().check(noPassthrough("skills"));
 const handler = async (props) => {
 	assertSkillsNode();
 	const cwd = process.cwd();

package/dist/config_services.js

@@ -0,0 +1,18 @@
+//#region src/config_services.ts
+const isToggleEnabled = (toggle) => {
+	if (toggle === void 0) return false;
+	if (typeof toggle === "boolean") return toggle;
+	return toggle.enabled !== false;
+};
+/** Postgres is omitted because every project includes it. */
+const declaredNeonServices = (config) => {
+	const services = [];
+	if (isToggleEnabled(config.auth)) services.push("auth");
+	if (isToggleEnabled(config.dataApi)) services.push("data-api");
+	if (Object.keys(config.preview?.buckets ?? {}).length > 0) services.push("object-storage");
+	if (Object.keys(config.preview?.functions ?? {}).length > 0) services.push("functions");
+	if (isToggleEnabled(config.preview?.aiGateway)) services.push("ai-gateway");
+	return services;
+};
+//#endregion
+export { declaredNeonServices };

package/dist/context.js

@@ -45,6 +45,7 @@ const isConfigInit = (args) => args._[0] === "config" && args._[1] === "init" &&
 * access has already lapsed is the main reason to remove one.
 */
 const isProfileCommand = (args) => args._[0] === "profile" || args._[0] === "profiles";
+const isClaimCommand = (args) => args._[0] === "claim" || args._[0] === "claimable";
 /**
 * `neon api-keys …`, under either spelling. Exempts the group from context enrichment: how
 * far a credential reaches must come from an explicit flag, never from `.neon`.
@@ -133,6 +134,7 @@ const enrichFromContext = (args) => {
 	if (isProfileCommand(args)) return;
 	if (isMcpCommand(args)) return;
 	if (isSkillsCommand(args) || isPluginsCommand(args)) return;
+	if (isClaimCommand(args)) return;
 	const context = readContextFile(args.contextFile);
 	if (!args.orgId) args.orgId = context.orgId;
 	if (!args.projectId) args.projectId = context.projectId;
@@ -238,4 +240,4 @@ const globToRegExp = (pattern) => {
 	return new RegExp(`^${source}$`);
 };
 //#endregion
-export { applyContext, contextBranch, currentContextFile, enrichFromContext, ensureGitignored, isApiKeysCommand, isConfigInit, isCurrentBranchProbe, isMcpCommand, isMcpOauth, isPluginsCommand, isProfileCommand, isSkillsCommand, readContextFile, setContext, updateContextFile, walkContextFile };
+export { applyContext, contextBranch, currentContextFile, enrichFromContext, ensureGitignored, isApiKeysCommand, isClaimCommand, isConfigInit, isCurrentBranchProbe, isMcpCommand, isMcpOauth, isPluginsCommand, isProfileCommand, isSkillsCommand, readContextFile, setContext, updateContextFile, walkContextFile };

package/dist/credential_io.js

@@ -1,2 +1,2 @@
-import { t as storeFor } from "./_chunks/credential_io-D2vw1UOw.js";
+import { t as storeFor } from "./_chunks/credential_io-B1JxWELN.js";
 export { storeFor };

package/dist/init/auth.js

@@ -1,5 +1,5 @@
-import { l as locationForName } from "../_chunks/profiles-CVXNvU2r.js";
-import { l as interpretCredentials, t as storeFor } from "../_chunks/credential_io-D2vw1UOw.js";
+import { l as interpretCredentials, t as storeFor } from "../_chunks/credential_io-B1JxWELN.js";
+import { l as locationForName } from "../_chunks/profiles-D95AeZ5v.js";
 import { npxNeonArgs, selectedConfigDir, selectedProfileName } from "./profile_cli.js";
 import { log } from "@clack/prompts";
 import { execa } from "execa";

package/dist/init/profile_cli.js

@@ -1,6 +1,6 @@
-import { t as DEFAULT_PROFILE } from "../_chunks/profiles-CVXNvU2r.js";
 import { n as configDir } from "../_chunks/paths-g3DRqJiD.js";
-import { i as selectCredential, t as credentialInputs } from "../_chunks/auth_selection-Bx2NAgkk.js";
+import { t as DEFAULT_PROFILE } from "../_chunks/profiles-D95AeZ5v.js";
+import { i as selectCredential, t as credentialInputs } from "../_chunks/auth_selection-ktL6uoEe.js";
 //#region src/init/profile_cli.ts
 /**
 * API-key selections fall back to DEFAULT because init authenticates from stored credentials.

package/dist/plugins/run.js

@@ -4,6 +4,15 @@ import { execa } from "execa";
 const TELEMETRY_BLOCKERS = ["DISABLE_TELEMETRY", "DO_NOT_TRACK"];
 const PLUGIN_SOURCE = "neondatabase/agent-skills";
 const NEON_PLUGIN_NAME = "neon-postgres";
+const PLUGIN_SKILLS = [
+	"neon",
+	"neon-ai-gateway",
+	"neon-functions",
+	"neon-object-storage",
+	"neon-postgres",
+	"neon-postgres-branches",
+	"neon-postgres-egress-optimizer"
+];
 const PLUGINS_CLI_TIMEOUT_MS = 12e4;
 const pluginsChildEnv = (base = process.env) => {
 	const env = { ...base };
@@ -120,4 +129,4 @@ const killProcessTree = (pid) => {
 const isCommandMissing = (error) => typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
 const isExecaFailure = (error) => typeof error === "object" && error !== null && "shortMessage" in error && typeof error.shortMessage === "string";
 //#endregion
-export { NEON_PLUGIN_NAME, PLUGINS_CLI_TIMEOUT_MS, PLUGIN_SOURCE, neonPluginsRetryCommand, pluginsAddArgs, pluginsChildEnv, pluginsCliFailureMessage, pluginsScopeFlag, quoteNpxArg, runPluginsCli };
+export { NEON_PLUGIN_NAME, PLUGINS_CLI_TIMEOUT_MS, PLUGIN_SKILLS, PLUGIN_SOURCE, neonPluginsRetryCommand, pluginsAddArgs, pluginsChildEnv, pluginsCliFailureMessage, pluginsScopeFlag, quoteNpxArg, runPluginsCli };

package/dist/retire_credential.js

@@ -1,4 +1,4 @@
-import { a as OAUTH, d as scopeOf, i as API_KEY, l as interpretCredentials, t as storeFor, u as isSameCredential } from "./_chunks/credential_io-D2vw1UOw.js";
+import { a as OAUTH, d as scopeOf, i as API_KEY, l as interpretCredentials, t as storeFor, u as isSameCredential } from "./_chunks/credential_io-B1JxWELN.js";
 import { log } from "./log.js";
 import { getApiClient } from "./api.js";
 import { revokeToken } from "./auth.js";

package/dist/skills/catalog.js

@@ -1,3 +1,4 @@
+import { helpCsv } from "../utils/help_text.js";
 //#region src/skills/catalog.ts
 const AGENT_SKILLS_SOURCE = "neondatabase/agent-skills";
 const PLATFORMS_SKILLS_SOURCE = "neondatabase/neon-for-agent-platforms";
@@ -97,5 +98,11 @@ const invocationsForSelection = (selected) => {
 	});
 };
 const yesInstallInvocations = () => invocationsForSelection(defaultSkillEntries());
+const skillsHelpValues = () => invocationsForSelection(NEON_SKILL_CATALOG).map((group) => helpCsv(`  ${group.source}`, group.skills)).join("\n");
+const skillsYesHelp = () => {
+	const omitted = NEON_SKILL_CATALOG.filter((entry) => !entry.defaultSelected).map((entry) => entry.skill);
+	if (omitted.length === 0) return "neon skills -y installs every listed skill";
+	return `neon skills -y installs every listed skill except ${omitted.join(", ")}`;
+};
 //#endregion
-export { AGENT_SKILLS_SOURCE, NEON_SKILL_CATALOG, PLATFORMS_SKILLS_SOURCE, defaultSkillEntries, invocationsForSelection, listSkillIds, resolveSkillId, uniqueSkillEntries, yesInstallInvocations };
+export { AGENT_SKILLS_SOURCE, NEON_SKILL_CATALOG, PLATFORMS_SKILLS_SOURCE, defaultSkillEntries, invocationsForSelection, listSkillIds, resolveSkillId, skillsHelpValues, skillsYesHelp, uniqueSkillEntries, yesInstallInvocations };

package/dist/utils/help_text.js

@@ -0,0 +1,29 @@
+//#region src/utils/help_text.ts
+const HELP_WRAP = 78;
+const WRAP_INDENT = "    ";
+const helpWidth = () => {
+	const columns = process.stderr.columns ?? process.stdout.columns;
+	if (typeof columns !== "number" || !Number.isFinite(columns) || columns < 1) return 78;
+	return Math.max(24, columns - 1);
+};
+const helpCsv = (label, items, width = helpWidth()) => {
+	if (items.length === 0) return "";
+	const prefix = `${label}:`;
+	const lines = [];
+	let line = prefix;
+	for (const item of items) {
+		const addition = line === prefix ? ` ${item}` : `, ${item}`;
+		if (line.length + addition.length <= width) {
+			line += addition;
+			continue;
+		}
+		if (line === prefix) lines.push(prefix);
+		else lines.push(`${line},`);
+		line = `${WRAP_INDENT}${item}`;
+	}
+	lines.push(line);
+	return lines.join("\n");
+};
+const helpEpilogue = (...blocks) => ["", ...blocks.filter((block) => block !== "")].join("\n");
+//#endregion
+export { HELP_WRAP, helpCsv, helpEpilogue, helpWidth };

package/dist/utils/middlewares.js

@@ -1,4 +1,4 @@
-import { r as recordCredentialInputs } from "../_chunks/auth_selection-Bx2NAgkk.js";
+import { r as recordCredentialInputs } from "../_chunks/auth_selection-ktL6uoEe.js";
 //#region src/utils/middlewares.ts
 /**
 * Forwarding Yargs's default would turn ambient configuration into an explicit child override.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "neon",
-  "version": "4.4.0",
+  "version": "4.5.2",
   "description": "CLI tool for Neon, the cloud backend primitives built around Lakebase Postgres",
   "keywords": [
     "neon",
@@ -63,9 +63,9 @@
     "yaml": "^2.9.0",
     "yargs": "17.7.2",
     "yoctocolors": "^2.1.2",
-    "@neon/config-runtime": "1.0.2",
-    "@neon/sdk": "2.2.0",
-    "@neon/config": "1.0.2"
+    "@neon/config": "1.0.4",
+    "@neon/config-runtime": "1.0.4",
+    "@neon/sdk": "2.3.0"
   },
   "optionalDependencies": {
     "@napi-rs/keyring": "1.3.0",
@@ -97,7 +97,7 @@
     "typescript": "^5.9.0",
     "vitest": "^3.0.9",
     "@neon-internals/cli-core": "0.0.0",
-    "@neon-internals/env-core": "0.0.2",
+    "@neon-internals/env-core": "0.0.4",
     "@neon/e2e-harness": "0.0.0"
   },
   "publishConfig": {