neon 6.2.3 → 6.3.0

package/dist/init/wizard.js

@@ -1,10 +1,10 @@
 import { CONFIG_INIT_SERVICES } from "../config_template.js";
-import { AGENT_DETECTED_DESCRIPTION, AGENT_OTHER_DESCRIPTION, AGENT_PICKER_MESSAGE, AGENT_SETUP_MESSAGE, AGENT_SETUP_PLUGIN_DESCRIPTION, AGENT_SETUP_PLUGIN_TITLE, AGENT_SETUP_SKILLS_DESCRIPTION, AGENT_SETUP_SKILLS_TITLE, AGENT_SETUP_SKIP_DESCRIPTION, AGENT_SETUP_SKIP_TITLE, CONFIG_CONFIRM_HINT, CONFIG_CONFIRM_MESSAGE, MCP_AUTH_API_KEY_DESCRIPTION, MCP_AUTH_API_KEY_TITLE, MCP_AUTH_MESSAGE, MCP_AUTH_OAUTH_DESCRIPTION, MCP_AUTH_OAUTH_TITLE, MCP_SCOPE_GLOBAL_DESCRIPTION, MCP_SCOPE_GLOBAL_TITLE, MCP_SCOPE_MESSAGE, MCP_SCOPE_PROJECT_DESCRIPTION, MCP_SCOPE_PROJECT_TITLE, MODE_CUSTOM_DESCRIPTION, MODE_CUSTOM_TITLE, MODE_MESSAGE, MODE_RECOMMENDED_DESCRIPTION, MODE_RECOMMENDED_TITLE, PACKAGE_MANAGER_MESSAGE, PROJECT_SETUP_CLAIMABLE_DESCRIPTION, PROJECT_SETUP_CLAIMABLE_TITLE, PROJECT_SETUP_LINK_DESCRIPTION, PROJECT_SETUP_LINK_TITLE, PROJECT_SETUP_MESSAGE, SERVICES_HINT, SERVICES_MESSAGE, SKILLS_PICKER_MESSAGE } from "./copy.js";
+import { AGENT_DETECTED_DESCRIPTION, AGENT_MCP_PICKER_MESSAGE, AGENT_MCP_SKIP_MESSAGE, AGENT_OTHER_DESCRIPTION, AGENT_PICKER_MESSAGE, AGENT_PLUGIN_SKIP_MESSAGE, AGENT_SETUP_MESSAGE, AGENT_SETUP_PLUGIN_DESCRIPTION, AGENT_SETUP_PLUGIN_TITLE, AGENT_SETUP_SKILLS_DESCRIPTION, AGENT_SETUP_SKILLS_TITLE, AGENT_SETUP_SKIP_DESCRIPTION, AGENT_SETUP_SKIP_TITLE, AGENT_SKILLS_PICKER_MESSAGE, AGENT_SKILLS_SKIP_MESSAGE, CONFIG_CONFIRM_HINT, CONFIG_CONFIRM_MESSAGE, MCP_AUTH_API_KEY_DESCRIPTION, MCP_AUTH_API_KEY_TITLE, MCP_AUTH_MESSAGE, MCP_AUTH_OAUTH_DESCRIPTION, MCP_AUTH_OAUTH_TITLE, MCP_SCOPE_GLOBAL_DESCRIPTION, MCP_SCOPE_GLOBAL_TITLE, MCP_SCOPE_MESSAGE, MCP_SCOPE_PROJECT_DESCRIPTION, MCP_SCOPE_PROJECT_TITLE, MODE_CUSTOM_DESCRIPTION, MODE_CUSTOM_TITLE, MODE_MESSAGE, MODE_RECOMMENDED_DESCRIPTION, MODE_RECOMMENDED_TITLE, PACKAGE_MANAGER_MESSAGE, PROJECT_SETUP_CLAIMABLE_DESCRIPTION, PROJECT_SETUP_CLAIMABLE_TITLE, PROJECT_SETUP_LINK_DESCRIPTION, PROJECT_SETUP_LINK_TITLE, PROJECT_SETUP_MESSAGE, SERVICES_HINT, SERVICES_MESSAGE, SKILLS_PICKER_MESSAGE, agentMissingCommandDescription } from "./copy.js";
 import { installedPackageManagers } from "../utils/package_manager.js";
 import { POSTGRES_SERVICE_CHOICE, keepPostgresSelected } from "../utils/service_picker.js";
 import { getAgentDisplayName, listMcpAgentIds } from "../mcp/agents.js";
 import { INIT_NEEDS_YES_OR_TERMINAL } from "./plan.js";
-import { canPickAgentsInteractively } from "../utils/agent_picker.js";
+import { canPickAgentsInteractively, pickAgentsInteractively } from "../utils/agent_picker.js";
 import { NEON_SKILL_CATALOG, listSkillIds } from "../skills/catalog.js";
 import { InitCancelled, restoreCursorVisibilityOnAbort } from "./cancelled.js";
 import chalk from "chalk";
@@ -71,24 +71,23 @@ const pickAgentSetupInteractively = async () => {
 };
 const pickInitAgentsInteractively = async (input) => {
 	requireInteractive();
-	if (input.available.length === 0) throw new Error("No coding agents are available to pick.");
 	const detected = new Set(input.detected);
-	const { agents } = await prompts({
-		onState: restoreCursorOnAbort,
-		type: "multiselect",
-		name: "agents",
-		message: AGENT_PICKER_MESSAGE,
-		instructions: false,
-		min: 1,
-		choices: input.available.map((id) => ({
-			value: id,
-			title: `${getAgentDisplayName(id)} (${id})`,
-			description: detected.has(id) ? AGENT_DETECTED_DESCRIPTION : AGENT_OTHER_DESCRIPTION,
-			selected: detected.has(id)
-		}))
+	const missing = new Map((input.missingCommands ?? []).map((row) => [row.agent, row.command]));
+	const selected = await pickAgentsInteractively({
+		onCancel: aborted,
+		message: input.setup === "skills" ? AGENT_SKILLS_PICKER_MESSAGE : input.setup === "mcp" ? AGENT_MCP_PICKER_MESSAGE : AGENT_PICKER_MESSAGE,
+		skipMessage: input.setup === "plugin" ? AGENT_PLUGIN_SKIP_MESSAGE : input.setup === "skills" ? AGENT_SKILLS_SKIP_MESSAGE : AGENT_MCP_SKIP_MESSAGE,
+		selected: input.preselected ?? input.detected,
+		choices: input.available.map((id) => {
+			const command = missing.get(id);
+			return {
+				id,
+				title: `${getAgentDisplayName(id)} (${id})`,
+				description: command !== void 0 ? agentMissingCommandDescription(command) : detected.has(id) ? AGENT_DETECTED_DESCRIPTION : AGENT_OTHER_DESCRIPTION
+			};
+		})
 	});
-	if (!Array.isArray(agents)) return aborted();
-	return agents.filter((id) => typeof id === "string");
+	return selected.length > 0 ? selected : void 0;
 };
 const pickInitSkillsInteractively = async () => {
 	requireInteractive();

package/dist/plugins/plan.js

@@ -1,14 +1,19 @@
 import { getAgentDisplayName, tryResolveAddMcpAgentId } from "../mcp/agents.js";
 import "../init/agents.js";
-import { detectPluginsAgents, getPluginsTargetName, isUserScopeOnlyPluginsTarget, mappedPluginsTargets, pluginsInstallableAgents } from "./targets.js";
+import { detectPluginsAgents, getPluginsTargetName, isUserScopeOnlyPluginsTarget, mappedPluginsTargets, missingPluginsCommands, pluginsInstallableAgents } from "./targets.js";
 import { collectYesAgents, noDetectedAgentsMessage } from "../init/plan.js";
 import { detectAgent } from "../init/detect_host.js";
 import { agentChoicesFrom, pickAgentsInteractively, resolveAgentSelection } from "../utils/agent_picker.js";
 //#region src/plugins/plan.ts
+const missingPluginsCommandsError = (missing) => new Error(missing.map(({ agent, command }) => `Cannot install the Neon plugin for ${getAgentDisplayName(agent)}: "${command}" was not found on PATH. Install it or add it to PATH, then retry.`).join("\n"));
 const assertPluginsCanRun = (options) => {
 	if (options.yes || options.interactive || options.hasAgents) return;
 	throw new Error("No interactive terminal. Pass -y to install into detected agents, or --agent <name> to name them.");
 };
+const commandLookup = (options) => ({
+	cwd: options.cwd,
+	...options.commandPath !== void 0 ? { path: options.commandPath } : {}
+});
 async function resolvePluginsPlan(options) {
 	assertPluginsCanRun({
 		yes: options.yes,
@@ -29,10 +34,18 @@ async function resolvePluginsPlan(options) {
 		detectAgent: options.detectAgent ?? detectAgent,
 		acceptHost: (id) => availableSet.has(id) || getPluginsTargetName(id) !== void 0
 	}) : scoped;
+	const missingDetected = new Map((prompt ? missingPluginsCommands(detected, commandLookup(options)) : []).map((row) => [row.agent, row.command]));
+	const choices = agentChoicesFrom(available, detected).map((choice) => {
+		const command = missingDetected.get(choice.id);
+		return command === void 0 ? choice : {
+			...choice,
+			description: `detected, but "${command}" is not on PATH`
+		};
+	});
 	const selected = await resolveAgentSelection({
 		specified: options.agents,
-		choices: agentChoicesFrom(available, detected),
-		detected,
+		choices,
+		detected: detected.filter((id) => !missingDetected.has(id)),
 		message: "Which coding agents should get the Neon plugin? (space to toggle, enter to confirm)",
 		nonInteractiveMessage: noDetectedAgentsMessage({
 			scope,
@@ -64,6 +77,20 @@ async function resolvePluginsPlan(options) {
 		}
 		agents.push(id);
 	}
+	const missingCommands = missingPluginsCommands(agents, commandLookup(options));
+	if (missingCommands.length > 0) {
+		if (!(options.agents.length === 0 && !prompt)) throw missingPluginsCommandsError(missingCommands);
+		const missingAgents = new Set(missingCommands.map((row) => row.agent));
+		const installable = agents.filter((id) => !missingAgents.has(id));
+		return {
+			scope,
+			agents: installable,
+			skipped,
+			userScopeSkipped,
+			missingCommands,
+			targets: installable.length === 0 ? [] : mappedPluginsTargets(installable, scope)
+		};
+	}
 	if (agents.length === 0) {
 		if (userScopeSkipped.length > 0 && skipped.length === 0) {
 			const names = userScopeSkipped.map((id) => getAgentDisplayName(id)).join(", ");
@@ -76,8 +103,9 @@ async function resolvePluginsPlan(options) {
 		agents,
 		skipped,
 		userScopeSkipped,
+		missingCommands,
 		targets: mappedPluginsTargets(agents, scope)
 	};
 }
 //#endregion
-export { assertPluginsCanRun, resolvePluginsPlan };
+export { assertPluginsCanRun, missingPluginsCommandsError, resolvePluginsPlan };

package/dist/plugins/targets.js

@@ -1,27 +1,67 @@
 import { detectInstalledAgents, listMcpAgentIds, tryResolveAddMcpAgentId, uniqueAgentIds } from "../mcp/agents.js";
 import "../init/agents.js";
+import { delimiter, dirname, join, resolve } from "node:path";
+import which from "which";
 import { detectProjectAgents } from "add-mcp";
 //#region src/plugins/targets.ts
+const CLAUDE_CODE = { target: "claude-code" };
 const PLUGINS_TARGET_BY_TYPE = {
-	cursor: "cursor",
-	vscode: "vscode",
-	"claude-code": "claude-code",
-	"claude-desktop": "claude-code",
-	codex: "codex",
-	"github-copilot-cli": "github-copilot",
-	"grok-build": "grok"
+	cursor: { target: "cursor" },
+	vscode: { target: "vscode" },
+	"claude-code": CLAUDE_CODE,
+	"claude-desktop": CLAUDE_CODE,
+	codex: { target: "codex" },
+	"github-copilot-cli": {
+		target: "github-copilot",
+		command: "copilot"
+	},
+	"grok-build": {
+		target: "grok",
+		command: "grok"
+	}
 };
+const pluginsTargets = () => [...new Set(Object.values(PLUGINS_TARGET_BY_TYPE))];
 const USER_SCOPE_ONLY_TARGETS = /* @__PURE__ */ new Set([
 	"vscode",
 	"github-copilot",
 	"grok"
 ]);
-function getPluginsTargetName(agent) {
+/** npx runs the plugins CLI with every `node_modules/.bin` from `cwd` up to the root ahead of PATH. */
+const pluginsCommandSearchPath = (cwd, path) => {
+	const bins = [];
+	let dir = resolve(cwd);
+	for (;;) {
+		bins.push(join(dir, "node_modules", ".bin"));
+		const parent = dirname(dir);
+		if (parent === dir) break;
+		dir = parent;
+	}
+	return [...bins, path].join(delimiter);
+};
+const missingPluginsCommands = (agents, options) => {
+	const searchPath = pluginsCommandSearchPath(options.cwd, options.path ?? process.env.PATH ?? "");
+	const missing = [];
+	for (const agent of uniqueAgentIds(agents)) {
+		const command = getPluginsTarget(agent)?.command;
+		if (command !== void 0 && which.sync(command, {
+			nothrow: true,
+			path: searchPath
+		}) === null) missing.push({
+			agent,
+			command
+		});
+	}
+	return missing;
+};
+function getPluginsTarget(agent) {
 	if (Object.prototype.hasOwnProperty.call(PLUGINS_TARGET_BY_TYPE, agent)) return PLUGINS_TARGET_BY_TYPE[agent];
 	const id = tryResolveAddMcpAgentId(agent);
 	if (!id) return void 0;
 	return PLUGINS_TARGET_BY_TYPE[id];
 }
+function getPluginsTargetName(agent) {
+	return getPluginsTarget(agent)?.target;
+}
 function supportsPlugins(agent) {
 	return getPluginsTargetName(agent) !== void 0;
 }
@@ -65,4 +105,4 @@ const mappedPluginsTargets = (agents, scope) => {
 	return mapped;
 };
 //#endregion
-export { detectInstallablePluginsAgents, detectPluginsAgents, getPluginsTargetName, isUserScopeOnlyPluginsTarget, mappedPluginsTargets, pluginsInstallableAgents, pluginsMappedAgents, supportsPlugins };
+export { detectInstallablePluginsAgents, detectPluginsAgents, getPluginsTargetName, isUserScopeOnlyPluginsTarget, mappedPluginsTargets, missingPluginsCommands, pluginsInstallableAgents, pluginsMappedAgents, pluginsTargets, supportsPlugins };

package/dist/sso_recovery.js

@@ -0,0 +1,92 @@
+import { isCi } from "./env.js";
+import { log } from "./log.js";
+import { codeFromBody } from "./api.js";
+import open from "open";
+import prompts from "prompts";
+//#region src/sso_recovery.ts
+/**
+* Extract the SSO step-up URL from the error message.
+*
+* The Neon public API carries the recovery URL in the human-readable `message`
+* ("...Open <url> in your browser to authorize, then retry."), not a structured field — so this
+* works against the API's standard error shape without a bespoke contract.
+*/
+function extractStepUpUrl(message) {
+	if (typeof message !== "string") return;
+	const match = message.match(/(https?:\/\/[^\s)]+)/);
+	return match ? match[1] : void 0;
+}
+/**
+* Whether the invocation opted out of prompts via --yes/-y.
+*
+* The skip-prompts flag is per-command in this CLI (link, projects update, init, …), not a global
+* option, so — exactly like the --help/-h check in the error handler — detect it from argv rather than
+* a parsed global. A run that documented itself as non-interactive (`neon link -y`) must take the
+* unattended path, never open a browser or block on a confirm.
+*/
+function promptsSkipped() {
+	return process.argv.includes("--yes") || process.argv.includes("-y");
+}
+/** Whether this process can drive an interactive open-browser-then-confirm-and-retry flow. */
+function canInteract() {
+	return !isCi() && !promptsSkipped() && Boolean(process.stdout.isTTY) && Boolean(process.stdin.isTTY);
+}
+/**
+* Recover from an SSO authorization error.
+*
+* Detection is by the machine `code` in the response body, NOT the HTTP status: Neon masks org
+* access-denials as 404 (existence-hiding), so the error arrives as 403 or 404 with the code in the
+* body.
+*   - SSO_AUTHORIZATION_REQUIRED: the user must complete a one-time SSO authorization in a browser.
+*     On an interactive terminal we open the step-up URL and wait for the user to confirm they've
+*     finished before signalling a retry. Unattended (CI, no TTY, or an explicit --yes/-y that opted
+*     out of prompts) we print the URL and fail, since no browser round-trip is possible.
+*   - SSO_ORG_CREDS_ONLY: terminal — no browser step resolves it; the user must use an
+*     organization-scoped API key. Return false (no retry).
+*
+* @param error   the API error
+* @param canRetry whether the caller is willing to retry (false once we've already retried)
+* @returns true if the caller should retry the command, false otherwise
+*/
+const recoverFromSSO = async (error, canRetry) => {
+	const code = codeFromBody(error.data);
+	if (code === "SSO_ORG_CREDS_ONLY") {
+		log.error(error.message);
+		return false;
+	}
+	if (code !== "SSO_AUTHORIZATION_REQUIRED") return false;
+	if (!canRetry) {
+		log.error(error.message);
+		return false;
+	}
+	const stepUpUrl = extractStepUpUrl(error.message);
+	if (!stepUpUrl) {
+		log.error(error.message);
+		return false;
+	}
+	if (!canInteract()) {
+		log.error("This organization requires a one-time SSO authorization, which needs an interactive browser session. Open this URL in a browser to authorize, then re-run the command:\n" + stepUpUrl);
+		return false;
+	}
+	log.info(`This organization requires SSO authorization. Opening your browser to authorize; if it doesn't open, visit this URL manually:\n${stepUpUrl}`);
+	try {
+		(await open(stepUpUrl)).once("error", (err) => {
+			log.warning(`Could not launch a browser automatically: ${err.message}`);
+		});
+	} catch {
+		log.warning("Could not launch a browser automatically; open the URL above manually.");
+	}
+	const { confirmed } = await prompts({
+		type: "confirm",
+		name: "confirmed",
+		message: "Press Enter once you've completed authorization in the browser to retry (or 'n' to cancel)",
+		initial: true
+	});
+	if (confirmed !== true) {
+		log.error(`SSO authorization was not completed. Re-run the command after authorizing at:\n${stepUpUrl}`);
+		return false;
+	}
+	return true;
+};
+//#endregion
+export { recoverFromSSO };

package/dist/utils/agent_picker.js

@@ -2,40 +2,66 @@ import { isCi } from "../env.js";
 import { getAgentDisplayName, resolveAddMcpAgentId, uniqueAgentIds } from "../mcp/agents.js";
 import prompts from "prompts";
 //#region src/utils/agent_picker.ts
+var AgentSelectionSkipped = class extends Error {};
 const canPickAgentsInteractively = () => !isCi() && Boolean(process.stdout.isTTY) && Boolean(process.stdin.isTTY);
+const restoreCursorOnAbort = (exit) => (state) => {
+	if (state.aborted) {
+		process.stdout.write("\x1B[?25h");
+		process.stdout.write("\n");
+		if (exit) process.exit(1);
+	}
+};
 const pickAgentsInteractively = async (options) => {
 	if (!canPickAgentsInteractively()) throw new Error("No interactive terminal. Pass -y, or run this command in a terminal to pick agents.");
 	if (options.choices.length === 0) throw new Error("No coding agents are available to pick.");
+	const cancel = options.onCancel ?? (() => {
+		throw new Error("Aborted: no agents selected.");
+	});
+	const onState = restoreCursorOnAbort(options.onCancel === void 0);
 	const selected = new Set(options.selected ?? []);
-	const { agents } = await prompts({
-		onState: (state) => {
-			if (state.aborted) {
-				process.stdout.write("\x1B[?25h");
-				process.stdout.write("\n");
-				process.exit(1);
-			}
-		},
+	const question = {
+		onState,
 		type: "multiselect",
 		name: "agents",
 		message: options.message,
 		instructions: false,
-		min: 1,
+		min: options.skipMessage ? 0 : 1,
 		choices: options.choices.map((choice) => ({
 			value: choice.id,
 			title: choice.title,
 			description: choice.description,
 			selected: selected.has(choice.id)
 		}))
-	});
-	if (!Array.isArray(agents)) throw new Error("Aborted: no agents selected.");
-	const picked = [];
-	for (const value of agents) {
-		const id = agentIdInChoices(value, options.choices);
-		if (id === void 0) throw new Error(`Unknown agent: "${String(value)}".`);
-		picked.push(id);
+	};
+	while (true) {
+		const { agents } = await prompts(question);
+		if (!Array.isArray(agents)) return cancel();
+		const picked = [];
+		for (const value of agents) {
+			const id = agentIdInChoices(value, options.choices);
+			if (id === void 0) throw new Error(`Unknown agent: "${String(value)}".`);
+			picked.push(id);
+		}
+		if (picked.length > 0 || !options.skipMessage) return uniqueAgentIds(picked);
+		const { skip } = await prompts({
+			onState,
+			type: "confirm",
+			name: "skip",
+			message: options.skipMessage,
+			initial: true
+		});
+		if (typeof skip !== "boolean") return cancel();
+		if (skip) return [];
 	}
-	return uniqueAgentIds(picked);
 };
+const skippableAgentPicker = (allowed, message) => allowed ? async (options) => {
+	const selected = await pickAgentsInteractively({
+		...options,
+		skipMessage: message
+	});
+	if (selected.length === 0) throw new AgentSelectionSkipped();
+	return selected;
+} : void 0;
 const resolveAgentSelection = async (options) => {
 	if (options.specified.length > 0) {
 		const resolve = options.resolveSpecified ?? resolveAddMcpAgentId;
@@ -67,4 +93,4 @@ const agentIdInChoices = (value, choices) => {
 	for (const choice of choices) if (choice.id === value) return choice.id;
 };
 //#endregion
-export { agentChoicesFrom, canPickAgentsInteractively, pickAgentsInteractively, resolveAgentSelection };
+export { AgentSelectionSkipped, agentChoicesFrom, canPickAgentsInteractively, pickAgentsInteractively, resolveAgentSelection, skippableAgentPicker };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "neon",
-  "version": "6.2.3",
+  "version": "6.3.0",
   "description": "CLI tool for Neon, the cloud backend primitives built around Lakebase Postgres",
   "keywords": [
     "neon",
@@ -64,8 +64,8 @@
     "yaml": "^2.9.0",
     "yargs": "17.7.2",
     "yoctocolors": "^2.1.2",
-    "@neon/config-runtime": "1.7.2",
     "@neon/config": "1.8.2",
+    "@neon/config-runtime": "1.7.2",
     "@neon/sdk": "6.1.2"
   },
   "optionalDependencies": {
@@ -99,9 +99,9 @@
     "tsx": "4.22.3",
     "typescript": "^5.9.0",
     "vitest": "^3.0.9",
+    "@neon-internals/cli-core": "0.0.0",
     "@neon-internals/env-core": "0.0.25",
     "@neon/e2e-harness": "0.0.0",
-    "@neon-internals/cli-core": "0.0.0",
     "@neon/functions": "0.11.0"
   },
   "publishConfig": {
@@ -125,7 +125,7 @@
   "scripts": {
     "generateParams": "tsx generateOptionsFromSpec.ts",
     "clean": "rm -rf dist",
-    "build": "pnpm generateParams && tsc --noEmit && tsdown && cp src/*.html ./dist",
+    "build": "pnpm generateParams && tsc --noEmit && tsdown && node scripts/build-callback.mjs",
     "build:internal": "pnpm build",
     "bundle": "node pkg.js",
     "typecheck": "tsc --noEmit",