neon 8.0.0 → 8.0.2

package/README.md

@@ -943,6 +943,17 @@ neon ask --prompt "How do schema-only branches work?" --output json
 
 Default table output is the assistant's text. On a TTY that is a spinner, then the streamed reply. `--output json` and `--output yaml` print `{ "text": "…" }` after the full response.
 
+## Send feedback (`feedback`)
+
+`neon feedback --message` sends feedback to Neon. It does not log in, and it sends only your message, not your account, project, or branch.
+
+```bash
+neon feedback --message "The branch docs were unclear"
+neon feedback --message "The branch docs were unclear" --output json
+```
+
+Default table output is `Feedback received. Thank you!`. `--output json` and `--output yaml` print `{ "received": true }`. Messages are limited to 10,000 characters. Do not include passwords, API keys, connection strings, or other secrets.
+
 ## Install the Neon plugin (`plugins`)
 
 `neon plugins` installs the Neon agent plugin (`neon-postgres`) by running `npx plugins add`. It does not call the Neon API.
@@ -1410,6 +1421,7 @@ Id   Name      Project         Created At            Last Used At          Last
 | plugins                                                                    |                                                                                                              | Install the Neon plugin             |
 | skills                                                                     | `update`                                                                                                     | Install Neon agent skills           |
 | ask                                                                        |                                                                                                              | Ask a question about Neon          |
+| feedback                                                                   |                                                                                                              | Send feedback to Neon              |
 | bucket                                                                     | `create`, `list`, `delete`, `object list`, `object get`, `object put`, `object delete` (incl. `--recursive`) | Manage buckets and their objects   |
 | [completion](https://neon.com/docs/reference/cli-completion)               |                                                                                                              | Generate a completion script       |
 

package/dist/analytics.js

@@ -149,12 +149,21 @@ const analyticsMiddleware = async (args) => {
 		context: { direct: true }
 	});
 };
-const closeAnalytics = async (opts) => {
-	if (client) {
+let closing;
+/**
+* Close the client and flush queued events. Later calls share the first flush: the psql
+* launcher starts one while psql runs, and a second `closeAndFlush` would only make the SDK
+* warn about overlapping flushes.
+*/
+const closeAnalytics = (opts) => {
+	if (!client) return Promise.resolve();
+	if (!closing) {
 		log.debug("Flushing CLI analytics");
-		await client.closeAndFlush(opts);
-		log.debug("Flushed CLI analytics");
+		closing = client.closeAndFlush(opts).then(() => {
+			log.debug("Flushed CLI analytics");
+		});
 	}
+	return closing;
 };
 const getErrorAnalyticsEventContext = (_args) => ({
 	version: pkg_default.version,

package/dist/commands/auth.js

@@ -5,7 +5,7 @@ import { log } from "../log.js";
 import { getApiClient, isNeonApiError } from "../api.js";
 import { setAuthContext } from "../auth_context.js";
 import { a as isOwnedCredentialPath } from "../_chunks/paths-DMq0Lt7a.js";
-import { currentContextFile, isAskCommand, isClaimCommand, isConfigAdd, isConfigInit, isCurrentBranchProbe, isGitLocalCommand, isInspectDbUrl, isMcpCommand, isMcpOauth, isPluginsCommand, isProfileCommand, isSkillsCommand, isUnfollowedGitHookSync, readContextFile } from "../context.js";
+import { currentContextFile, isAskCommand, isClaimCommand, isConfigAdd, isConfigInit, isCurrentBranchProbe, isFeedbackCommand, isGitLocalCommand, isInspectDbUrl, isMcpCommand, isMcpOauth, isPluginsCommand, isProfileCommand, isSkillsCommand, isUnfollowedGitHookSync, readContextFile } from "../context.js";
 import { _ as upsertProfile, d as newProfileLocation, g as selectProfileName, h as resolveProfile, i as assertValidProfileName, l as locationForName, m as readProfiles, n as KEYRING_CREDENTIALS, p as profilesUsingPath, r as assertProfilesUsable, s as isKeyringPointer, t as DEFAULT_PROFILE, u as locationOf } from "../_chunks/profiles-CvnFEQyd.js";
 import { extendTokenSet } from "../utils/auth.js";
 import { AuthRefreshError, auth, classifyRefreshFailure, refreshToken } from "../auth.js";
@@ -304,7 +304,7 @@ const ensureAuth = async (props) => {
 	if (isInspectDbUrl(props)) return;
 	if (props._[0] === "open") return;
 	if (isSkillsCommand(props) || isPluginsCommand(props)) return;
-	if (isAskCommand(props)) return;
+	if (isAskCommand(props) || isFeedbackCommand(props)) return;
 	if (props._[0] === "init") {
 		selectCredential({
 			...credentialInputs(),

package/dist/commands/feedback.js

@@ -0,0 +1,88 @@
+import { t as __exportAll } from "../_chunks/rolldown-runtime-8H4AJuhK.js";
+import { isNetworkError } from "../errors.js";
+import { writer } from "../writer.js";
+import { noPassthrough, single } from "../utils/flags.js";
+//#region src/commands/feedback.ts
+var feedback_exports = /* @__PURE__ */ __exportAll({
+	DEFAULT_FEEDBACK_URL: () => DEFAULT_FEEDBACK_URL,
+	MAX_FEEDBACK_LENGTH: () => MAX_FEEDBACK_LENGTH,
+	builder: () => builder,
+	command: () => command,
+	describe: () => describe,
+	handler: () => handler,
+	resolveFeedbackUrl: () => resolveFeedbackUrl
+});
+const DEFAULT_FEEDBACK_URL = "https://feedback.neon.tech/";
+/** The feedback service truncates longer messages, so the CLI rejects them instead. */
+const MAX_FEEDBACK_LENGTH = 1e4;
+const FEEDBACK_SOURCE = "neon_cli";
+const FEEDBACK_TIMEOUT_MS = 3e4;
+const command = "feedback";
+const describe = "Send feedback to Neon";
+const builder = (argv) => argv.usage("$0 feedback --message <feedback>").option("message", {
+	describe: "The feedback to send. Do not include passwords, API keys, or connection strings",
+	type: "string",
+	demandOption: true,
+	coerce: single("message", { required: true })
+}).option("url", {
+	describe: "Override the feedback URL",
+	type: "string",
+	hidden: true,
+	coerce: single("url")
+}).strict().check(noPassthrough("feedback")).check((args) => {
+	if ((typeof args.message === "string" ? args.message : "").trim().length > 1e4) throw new Error(`--message must be ${MAX_FEEDBACK_LENGTH.toLocaleString("en-US")} characters or fewer`);
+	return true;
+}).example("$0 feedback --message \"The branch docs were unclear\"", describe);
+function resolveFeedbackUrl(opts) {
+	const fromFlag = opts.url?.trim();
+	if (fromFlag) return fromFlag;
+	const fromEnv = opts.envUrl?.trim();
+	if (fromEnv) return fromEnv;
+	return DEFAULT_FEEDBACK_URL;
+}
+const handler = async (props) => {
+	await sendFeedback({
+		message: props.message.trim(),
+		url: resolveFeedbackUrl({
+			url: props.url,
+			envUrl: process.env.NEON_FEEDBACK_URL
+		})
+	});
+	if (props.output === "json" || props.output === "yaml") {
+		writer(props).end({ received: true }, { fields: ["received"] });
+		return;
+	}
+	writer(props).text("Feedback received. Thank you!\n");
+};
+function isTimeout(error) {
+	return error instanceof Error && (error.name === "TimeoutError" || error.name === "AbortError");
+}
+async function feedbackErrorMessage(response) {
+	if (response.status === 429) return "Too many feedback requests. Wait a minute and try again.";
+	try {
+		const body = await response.json();
+		if (typeof body === "object" && body !== null && "error" in body && typeof body.error === "string" && body.error.trim() !== "") return body.error;
+	} catch {}
+	return `The Neon feedback service returned ${response.status}.`;
+}
+async function sendFeedback(opts) {
+	let response;
+	try {
+		response = await fetch(opts.url, {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify({
+				feedback: opts.message,
+				source: FEEDBACK_SOURCE
+			}),
+			signal: AbortSignal.timeout(FEEDBACK_TIMEOUT_MS)
+		});
+	} catch (error) {
+		if (isTimeout(error)) throw new Error("The Neon feedback service did not respond in time.");
+		if (isNetworkError(error)) throw new Error("Could not reach the Neon feedback service. Check your internet connection and try again.");
+		throw error;
+	}
+	if (!response.ok) throw new Error(await feedbackErrorMessage(response));
+}
+//#endregion
+export { DEFAULT_FEEDBACK_URL, MAX_FEEDBACK_LENGTH, builder, command, describe, handler, resolveFeedbackUrl, feedback_exports as t };

package/dist/commands/index.js

@@ -21,6 +21,7 @@ import { t as databases_exports } from "./databases.js";
 import { t as deploy_exports } from "./deploy.js";
 import { t as dev_exports } from "./dev.js";
 import { t as diff_exports } from "./diff.js";
+import { t as feedback_exports } from "./feedback.js";
 import { t as functions_exports } from "./functions.js";
 import { t as git_exports } from "./git.js";
 import { t as init_exports } from "./init.js";
@@ -72,6 +73,7 @@ var commands_default = [
 	plugins_exports,
 	skills_exports,
 	ask_exports,
+	feedback_exports,
 	data_api_exports,
 	functions_exports,
 	triggers_exports,

package/dist/commands/manifest.js

@@ -176,6 +176,11 @@ const commandManifest = [
 		describe: "Ask a question about Neon",
 		load: () => import("./ask.js")
 	},
+	{
+		command: "feedback",
+		describe: "Send feedback to Neon",
+		load: () => import("./feedback.js")
+	},
 	{
 		command: "data-api",
 		describe: "Manage the Neon Data API for a database",

package/dist/commands/roles.js

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "../_chunks/rolldown-runtime-8H4AJuhK.js";
 import { retryOnLock } from "../api.js";
 import { writer } from "../writer.js";
-import { branchIdFromProps, fillSingleProject } from "../utils/enrichers.js";
+import { fillSingleProject, resolveBranchFromProps } from "../utils/enrichers.js";
 //#region src/commands/roles.ts
 var roles_exports = /* @__PURE__ */ __exportAll({
 	aliases: () => aliases,
@@ -14,6 +14,11 @@ var roles_exports = /* @__PURE__ */ __exportAll({
 	list: () => list
 });
 const ROLES_FIELDS = ["name", "created_at"];
+const CREATED_ROLE_FIELDS = [
+	"name",
+	"password",
+	"created_at"
+];
 const command = "roles";
 const describe = "Manage roles";
 const aliases = ["role"];
@@ -41,22 +46,34 @@ const handler = (args) => {
 	return args;
 };
 const list = async (props) => {
-	const branchId = await branchIdFromProps(props);
+	const { branchId, branch } = await resolveBranchFromProps(props);
 	const { data } = await props.apiClient.listProjectBranchRoles(props.projectId, branchId);
-	writer(props).end(data.roles, { fields: ROLES_FIELDS });
+	const branchLabel = branch?.name ?? branchId;
+	writer(props).end(data.roles, {
+		fields: ROLES_FIELDS,
+		humanTitle: `Roles on ${branchLabel}`,
+		emptyMessage: `No roles on ${branchLabel}.`
+	});
 };
 const create = async (props) => {
-	const branchId = await branchIdFromProps(props);
+	const noLogin = props["no-login"] === true || props.login === false;
+	const { branchId, branch } = await resolveBranchFromProps(props);
 	const { data } = await retryOnLock(() => props.apiClient.createProjectBranchRole(props.projectId, branchId, { role: {
 		name: props.name,
-		no_login: props["no-login"]
+		...noLogin ? { no_login: true } : {}
 	} }));
-	writer(props).end(data.role, { fields: ROLES_FIELDS });
+	writer(props).end(data.role, {
+		fields: CREATED_ROLE_FIELDS,
+		humanTitle: `Role created on ${branch?.name ?? branchId}`
+	});
 };
 const deleteRole = async (props) => {
-	const branchId = await branchIdFromProps(props);
+	const { branchId, branch } = await resolveBranchFromProps(props);
 	const { data } = await retryOnLock(() => props.apiClient.deleteProjectBranchRole(props.projectId, branchId, props.role));
-	if (data) writer(props).end(data.role, { fields: ROLES_FIELDS });
+	if (data) writer(props).end(data.role, {
+		fields: ROLES_FIELDS,
+		humanTitle: `Role deleted from ${branch?.name ?? branchId}`
+	});
 };
 //#endregion
 export { aliases, builder, command, create, deleteRole, describe, handler, list, roles_exports as t };

package/dist/context.js

@@ -88,6 +88,8 @@ const isUnfollowedGitHookSync = (args, cwd = process.cwd()) => {
 const isSkillsCommand = (args) => args._[0] === "skills" || args._[0] === "skill";
 const isPluginsCommand = (args) => args._[0] === "plugins" || args._[0] === "plugin";
 const isAskCommand = (args) => args._[0] === "ask";
+/** Feedback is anonymous, so it must never read credentials or `.neon` context. */
+const isFeedbackCommand = (args) => args._[0] === "feedback";
 /**
 * `inspect db --db-url` talks to Postgres with that URI. Skip only when the
 * parsed value is nonempty: empty `--db-url` still goes through project
@@ -175,7 +177,7 @@ const enrichFromContext = (args) => {
 	if (isProfileCommand(args)) return;
 	if (isMcpCommand(args)) return;
 	if (isSkillsCommand(args) || isPluginsCommand(args)) return;
-	if (isAskCommand(args)) return;
+	if (isAskCommand(args) || isFeedbackCommand(args)) return;
 	if (isClaimCommand(args)) return;
 	const context = readContextFile(args.contextFile);
 	if (!args.orgId) args.orgId = context.orgId;
@@ -355,4 +357,4 @@ const globToRegExp = (pattern) => {
 	return new RegExp(`^${source}$`);
 };
 //#endregion
-export { CONTEXT_FILE, applyContext, contextBranch, currentContextFile, enrichFromContext, ensureDirectoryGitignored, ensureGitignored, gitBranchMap, gitBranchMapping, isApiKeysCommand, isAskCommand, isClaimCommand, isConfigAdd, isConfigInit, isCurrentBranchProbe, isGitLocalCommand, isInspectDbUrl, isMcpCommand, isMcpOauth, isPluginsCommand, isProfileCommand, isSkillsCommand, isUnfollowedGitHookSync, readContextFile, setContext, setGitBranchMap, setGitBranchMapping, setGitFollow, updateContextFile, walkContextFile };
+export { CONTEXT_FILE, applyContext, contextBranch, currentContextFile, enrichFromContext, ensureDirectoryGitignored, ensureGitignored, gitBranchMap, gitBranchMapping, isApiKeysCommand, isAskCommand, isClaimCommand, isConfigAdd, isConfigInit, isCurrentBranchProbe, isFeedbackCommand, isGitLocalCommand, isInspectDbUrl, isMcpCommand, isMcpOauth, isPluginsCommand, isProfileCommand, isSkillsCommand, isUnfollowedGitHookSync, readContextFile, setContext, setGitBranchMap, setGitBranchMapping, setGitFollow, updateContextFile, walkContextFile };

package/dist/index.js

@@ -39,6 +39,7 @@ const NO_SUBCOMMANDS_VERBS = [
 	"skills",
 	"skill",
 	"ask",
+	"feedback",
 	"dev",
 	"deploy",
 	"diff",

package/dist/utils/psql.js

@@ -4,7 +4,7 @@ import which from "which";
 import { spawn } from "child_process";
 //#region src/utils/psql.ts
 const FALLBACK_ENV = "NEONCTL_PSQL_FALLBACK";
-/** Max time we wait for the analytics flush before handing off to psql. */
+/** Cap on the analytics flush, counted from when psql launches. */
 const ANALYTICS_FLUSH_TIMEOUT_MS = 3e3;
 /**
 * Decide which psql implementation will run, and why. The PATH probe is
@@ -45,59 +45,60 @@ const planPsql = async (opts) => {
 		nativePath
 	};
 };
-/**
-* Record which psql implementation is about to run, then flush analytics.
-*
-* Both exec paths below call `process.exit()`, which short-circuits the
-* main loop's `closeAnalytics()` — so without flushing here the event (and
-* any earlier queued events, e.g. `CLI Started`) would be dropped. The
-* flush is bounded by {@link ANALYTICS_FLUSH_TIMEOUT_MS} so a slow or
-* unreachable analytics endpoint can't stall the psql launch. No-ops when
-* analytics is disabled (`--analytics false`), since the client is absent.
-*/
-const reportPsqlInvocation = async (plan) => {
-	trackEvent("psql_invoked", {
-		implementation: plan.implementation,
-		reason: plan.reason,
-		nativeAvailable: plan.nativeAvailable
-	});
-	await closeAnalytics({ timeout: ANALYTICS_FLUSH_TIMEOUT_MS });
-};
 const execNative = async (binary, connection_uri, args) => {
-	log.info("Connecting to the database using psql...");
+	log.info(`${connectionSummary(connection_uri, args)}; launching psql...`);
 	const child = spawn(binary, [connection_uri, ...args], { stdio: "inherit" });
 	for (const signame of ["SIGINT", "SIGTERM"]) process.on(signame, (code) => {
 		if (!child.killed && code !== null) child.kill(code);
 	});
-	return new Promise((_, reject) => {
+	return new Promise((resolve, reject) => {
 		child.on("exit", (code) => {
-			process.exit(code === null ? 1 : code);
+			resolve(code === null ? 1 : code);
 		});
 		child.on("error", reject);
 	});
 };
 const execTs = async (connection_uri, args) => {
-	log.info("Connecting to the database using embedded psql (TypeScript)...");
+	log.info(`${connectionSummary(connection_uri, args)}; launching embedded psql (TypeScript)...`);
 	const { runPsql } = await import("../psql/index.js");
-	const code = await runPsql([connection_uri, ...args], {
+	return runPsql([connection_uri, ...args], {
 		stdin: process.stdin,
 		stdout: process.stdout,
 		stderr: process.stderr
 	});
-	process.exit(code);
+};
+const GENERIC_CONNECTING = "Connecting to the database";
+const connectionSummary = (connection_uri, args = []) => {
+	if (args.length > 0) return GENERIC_CONNECTING;
+	try {
+		const url = new URL(connection_uri);
+		const part = (value) => decodeURIComponent(value).replace(/[\u0000-\u001f\u007f]/g, "");
+		const database = part(url.pathname.replace(/^\//, ""));
+		const role = part(url.username);
+		if (!database || !role || !url.host) return GENERIC_CONNECTING;
+		return `Neon connection: ${database} as ${role} on ${url.host}`;
+	} catch {
+		return GENERIC_CONNECTING;
+	}
 };
 const psql = async (connection_uri, args = [], opts = {}) => {
 	const plan = await planPsql(opts);
-	await reportPsqlInvocation(plan);
+	trackEvent("psql_invoked", {
+		implementation: plan.implementation,
+		reason: plan.reason,
+		nativeAvailable: plan.nativeAvailable
+	});
+	const flushed = closeAnalytics({ timeout: ANALYTICS_FLUSH_TIMEOUT_MS });
+	let code;
 	if (plan.implementation === "ts") {
 		if (plan.reason === "fallback_no_native") log.info("psql binary not found on PATH; falling back to embedded TypeScript psql");
-		return execTs(connection_uri, args);
-	}
-	if (plan.nativePath === null) {
+		code = await execTs(connection_uri, args);
+	} else if (plan.nativePath === null) {
 		log.error(`psql is not available in the PATH`);
-		process.exit(1);
-	}
-	return execNative(plan.nativePath, connection_uri, args);
+		code = 1;
+	} else code = await execNative(plan.nativePath, connection_uri, args);
+	await flushed;
+	process.exit(code);
 };
 //#endregion
-export { psql };
+export { connectionSummary, psql };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "neon",
-  "version": "8.0.0",
+  "version": "8.0.2",
   "description": "CLI tool for Neon, the cloud backend primitives built around Lakebase Postgres",
   "keywords": [
     "neon",
@@ -64,8 +64,8 @@
     "yaml": "^2.9.0",
     "yargs": "17.7.2",
     "yoctocolors": "^2.1.2",
-    "@neon/sdk": "7.0.0",
     "@neon/config-runtime": "1.7.3",
+    "@neon/sdk": "7.0.0",
     "@neon/config": "1.8.3"
   },
   "optionalDependencies": {