neon 8.0.1 → 8.0.3

package/README.md

@@ -943,6 +943,17 @@ neon ask --prompt "How do schema-only branches work?" --output json
 
 Default table output is the assistant's text. On a TTY that is a spinner, then the streamed reply. `--output json` and `--output yaml` print `{ "text": "…" }` after the full response.
 
+## Send feedback (`feedback`)
+
+`neon feedback --message` sends feedback to Neon. It does not log in, and it sends only your message, not your account, project, or branch.
+
+```bash
+neon feedback --message "The branch docs were unclear"
+neon feedback --message "The branch docs were unclear" --output json
+```
+
+Default table output is `Feedback received. Thank you!`. `--output json` and `--output yaml` print `{ "received": true }`. Messages are limited to 10,000 characters. Do not include passwords, API keys, connection strings, or other secrets.
+
 ## Install the Neon plugin (`plugins`)
 
 `neon plugins` installs the Neon agent plugin (`neon-postgres`) by running `npx plugins add`. It does not call the Neon API.
@@ -1410,6 +1421,7 @@ Id   Name      Project         Created At            Last Used At          Last
 | plugins                                                                    |                                                                                                              | Install the Neon plugin             |
 | skills                                                                     | `update`                                                                                                     | Install Neon agent skills           |
 | ask                                                                        |                                                                                                              | Ask a question about Neon          |
+| feedback                                                                   |                                                                                                              | Send feedback to Neon              |
 | bucket                                                                     | `create`, `list`, `delete`, `object list`, `object get`, `object put`, `object delete` (incl. `--recursive`) | Manage buckets and their objects   |
 | [completion](https://neon.com/docs/reference/cli-completion)               |                                                                                                              | Generate a completion script       |
 

package/dist/commands/auth.js

@@ -5,7 +5,7 @@ import { log } from "../log.js";
 import { getApiClient, isNeonApiError } from "../api.js";
 import { setAuthContext } from "../auth_context.js";
 import { a as isOwnedCredentialPath } from "../_chunks/paths-DMq0Lt7a.js";
-import { currentContextFile, isAskCommand, isClaimCommand, isConfigAdd, isConfigInit, isCurrentBranchProbe, isGitLocalCommand, isInspectDbUrl, isMcpCommand, isMcpOauth, isPluginsCommand, isProfileCommand, isSkillsCommand, isUnfollowedGitHookSync, readContextFile } from "../context.js";
+import { currentContextFile, isAskCommand, isClaimCommand, isConfigAdd, isConfigInit, isCurrentBranchProbe, isFeedbackCommand, isGitLocalCommand, isInspectDbUrl, isMcpCommand, isMcpOauth, isPluginsCommand, isProfileCommand, isSkillsCommand, isUnfollowedGitHookSync, readContextFile } from "../context.js";
 import { _ as upsertProfile, d as newProfileLocation, g as selectProfileName, h as resolveProfile, i as assertValidProfileName, l as locationForName, m as readProfiles, n as KEYRING_CREDENTIALS, p as profilesUsingPath, r as assertProfilesUsable, s as isKeyringPointer, t as DEFAULT_PROFILE, u as locationOf } from "../_chunks/profiles-CvnFEQyd.js";
 import { extendTokenSet } from "../utils/auth.js";
 import { AuthRefreshError, auth, classifyRefreshFailure, refreshToken } from "../auth.js";
@@ -304,7 +304,7 @@ const ensureAuth = async (props) => {
 	if (isInspectDbUrl(props)) return;
 	if (props._[0] === "open") return;
 	if (isSkillsCommand(props) || isPluginsCommand(props)) return;
-	if (isAskCommand(props)) return;
+	if (isAskCommand(props) || isFeedbackCommand(props)) return;
 	if (props._[0] === "init") {
 		selectCredential({
 			...credentialInputs(),

package/dist/commands/feedback.js

@@ -0,0 +1,88 @@
+import { t as __exportAll } from "../_chunks/rolldown-runtime-8H4AJuhK.js";
+import { isNetworkError } from "../errors.js";
+import { writer } from "../writer.js";
+import { noPassthrough, single } from "../utils/flags.js";
+//#region src/commands/feedback.ts
+var feedback_exports = /* @__PURE__ */ __exportAll({
+	DEFAULT_FEEDBACK_URL: () => DEFAULT_FEEDBACK_URL,
+	MAX_FEEDBACK_LENGTH: () => MAX_FEEDBACK_LENGTH,
+	builder: () => builder,
+	command: () => command,
+	describe: () => describe,
+	handler: () => handler,
+	resolveFeedbackUrl: () => resolveFeedbackUrl
+});
+const DEFAULT_FEEDBACK_URL = "https://feedback.neon.tech/";
+/** The feedback service truncates longer messages, so the CLI rejects them instead. */
+const MAX_FEEDBACK_LENGTH = 1e4;
+const FEEDBACK_SOURCE = "neon_cli";
+const FEEDBACK_TIMEOUT_MS = 3e4;
+const command = "feedback";
+const describe = "Send feedback to Neon";
+const builder = (argv) => argv.usage("$0 feedback --message <feedback>").option("message", {
+	describe: "The feedback to send. Do not include passwords, API keys, or connection strings",
+	type: "string",
+	demandOption: true,
+	coerce: single("message", { required: true })
+}).option("url", {
+	describe: "Override the feedback URL",
+	type: "string",
+	hidden: true,
+	coerce: single("url")
+}).strict().check(noPassthrough("feedback")).check((args) => {
+	if ((typeof args.message === "string" ? args.message : "").trim().length > 1e4) throw new Error(`--message must be ${MAX_FEEDBACK_LENGTH.toLocaleString("en-US")} characters or fewer`);
+	return true;
+}).example("$0 feedback --message \"The branch docs were unclear\"", describe);
+function resolveFeedbackUrl(opts) {
+	const fromFlag = opts.url?.trim();
+	if (fromFlag) return fromFlag;
+	const fromEnv = opts.envUrl?.trim();
+	if (fromEnv) return fromEnv;
+	return DEFAULT_FEEDBACK_URL;
+}
+const handler = async (props) => {
+	await sendFeedback({
+		message: props.message.trim(),
+		url: resolveFeedbackUrl({
+			url: props.url,
+			envUrl: process.env.NEON_FEEDBACK_URL
+		})
+	});
+	if (props.output === "json" || props.output === "yaml") {
+		writer(props).end({ received: true }, { fields: ["received"] });
+		return;
+	}
+	writer(props).text("Feedback received. Thank you!\n");
+};
+function isTimeout(error) {
+	return error instanceof Error && (error.name === "TimeoutError" || error.name === "AbortError");
+}
+async function feedbackErrorMessage(response) {
+	if (response.status === 429) return "Too many feedback requests. Wait a minute and try again.";
+	try {
+		const body = await response.json();
+		if (typeof body === "object" && body !== null && "error" in body && typeof body.error === "string" && body.error.trim() !== "") return body.error;
+	} catch {}
+	return `The Neon feedback service returned ${response.status}.`;
+}
+async function sendFeedback(opts) {
+	let response;
+	try {
+		response = await fetch(opts.url, {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify({
+				feedback: opts.message,
+				source: FEEDBACK_SOURCE
+			}),
+			signal: AbortSignal.timeout(FEEDBACK_TIMEOUT_MS)
+		});
+	} catch (error) {
+		if (isTimeout(error)) throw new Error("The Neon feedback service did not respond in time.");
+		if (isNetworkError(error)) throw new Error("Could not reach the Neon feedback service. Check your internet connection and try again.");
+		throw error;
+	}
+	if (!response.ok) throw new Error(await feedbackErrorMessage(response));
+}
+//#endregion
+export { DEFAULT_FEEDBACK_URL, MAX_FEEDBACK_LENGTH, builder, command, describe, handler, resolveFeedbackUrl, feedback_exports as t };

package/dist/commands/index.js

@@ -21,6 +21,7 @@ import { t as databases_exports } from "./databases.js";
 import { t as deploy_exports } from "./deploy.js";
 import { t as dev_exports } from "./dev.js";
 import { t as diff_exports } from "./diff.js";
+import { t as feedback_exports } from "./feedback.js";
 import { t as functions_exports } from "./functions.js";
 import { t as git_exports } from "./git.js";
 import { t as init_exports } from "./init.js";
@@ -72,6 +73,7 @@ var commands_default = [
 	plugins_exports,
 	skills_exports,
 	ask_exports,
+	feedback_exports,
 	data_api_exports,
 	functions_exports,
 	triggers_exports,

package/dist/commands/manifest.js

@@ -176,6 +176,11 @@ const commandManifest = [
 		describe: "Ask a question about Neon",
 		load: () => import("./ask.js")
 	},
+	{
+		command: "feedback",
+		describe: "Send feedback to Neon",
+		load: () => import("./feedback.js")
+	},
 	{
 		command: "data-api",
 		describe: "Manage the Neon Data API for a database",

package/dist/commands/neon_auth.js

@@ -1,9 +1,10 @@
 import { t as __exportAll } from "../_chunks/rolldown-runtime-8H4AJuhK.js";
 import { codeFromBody, isNeonApiError, retryOnLock } from "../api.js";
+import { stripAnsi } from "../human_table.js";
 import { writer } from "../writer.js";
 import { noPassthrough, single } from "../utils/flags.js";
 import { NeonAuthEmailVerificationMethod, NeonAuthOauthProviderId, NeonAuthOauthProviderType, NeonAuthSupportedAuthProvider } from "../utils/api_enums.js";
-import { branchIdFromProps, fillSingleProject } from "../utils/enrichers.js";
+import { branchIdFromProps, fillSingleProject, resolveBranchFromProps } from "../utils/enrichers.js";
 import chalk from "chalk";
 //#region src/commands/neon_auth.ts
 var neon_auth_exports = /* @__PURE__ */ __exportAll({
@@ -12,13 +13,20 @@ var neon_auth_exports = /* @__PURE__ */ __exportAll({
 	describe: () => describe,
 	handler: () => handler
 });
+const writeStyled = (text, stream = process.stdout) => {
+	stream.write(process.env.NO_COLOR ? stripAnsi(text) : text);
+};
 const printKvBlock = (title, entries) => {
-	process.stdout.write(`\n${chalk.green(title)}\n`);
-	for (const [key, value] of entries) process.stdout.write(`  ${chalk.green(key)}  ${value ?? ""}\n`);
-	process.stdout.write("\n");
+	const labels = entries.map(([key]) => key.trimEnd());
+	const width = Math.max(0, ...labels.map((label) => label.length));
+	let text = `\n${chalk.green(title)}\n`;
+	entries.forEach(([, value], i) => {
+		text += `  ${chalk.green(labels[i].padEnd(width))}  ${value ?? ""}\n`;
+	});
+	writeStyled(`${text}\n`);
 };
 const printMessage = (message) => {
-	process.stdout.write(`\n${chalk.green(message)}\n\n`);
+	writeStyled(`\n${chalk.green(message)}\n\n`);
 };
 const INTEGRATION_RESPONSE_FIELDS = [
 	"auth_provider",
@@ -356,6 +364,15 @@ const handler = (args) => {
 const resolveBranch = async (props) => {
 	return props.branchId ?? await branchIdFromProps(props);
 };
+/** The branch name is only known when it was resolved from a listing, not from an id. */
+const resolveBranchWithName = async (props) => {
+	if (props.branchId) return { branchId: props.branchId };
+	const { branchId, branch } = await resolveBranchFromProps(props);
+	return {
+		branchId,
+		branchName: branch?.name
+	};
+};
 const enable = async (props) => {
 	const branchId = await resolveBranch(props);
 	let data;
@@ -378,19 +395,19 @@ const enable = async (props) => {
 	const d = data;
 	printKvBlock(alreadyEnabled ? "Neon Auth is already enabled" : "Neon Auth enabled", [
 		["Auth Provider:", data.auth_provider],
-		...d.db_name ? [["Database:     ", d.db_name]] : [],
-		["Base URL:     ", data.base_url],
-		...d.schema_name ? [["Schema Name:  ", d.schema_name]] : [],
-		...d.table_name ? [["Table Name:   ", d.table_name]] : [],
-		["JWKS URL:     ", data.jwks_url]
+		...d.db_name ? [["Database:", d.db_name]] : [],
+		["Base URL:", data.base_url],
+		...d.schema_name ? [["Schema Name:", d.schema_name]] : [],
+		...d.table_name ? [["Table Name:", d.table_name]] : [],
+		["JWKS URL:", data.jwks_url]
 	]);
 	if (data.base_url) {
-		process.stdout.write(`  ${chalk.green("Set this environment variable in your application:")}\n`);
-		process.stdout.write(`  NEON_AUTH_BASE_URL=${data.base_url}\n\n`);
+		writeStyled(`  ${chalk.green("Set this environment variable in your application:")}\n`);
+		writeStyled(`  NEON_AUTH_BASE_URL=${data.base_url}\n\n`);
 	}
 };
 const status = async (props) => {
-	const branchId = await resolveBranch(props);
+	const { branchId, branchName } = await resolveBranchWithName(props);
 	let data;
 	try {
 		({data} = await props.apiClient.getNeonAuth(props.projectId, branchId));
@@ -407,11 +424,11 @@ const status = async (props) => {
 	}
 	printKvBlock("Neon Auth status", [
 		["Auth Provider:", data.auth_provider],
-		["Branch ID:    ", data.branch_id],
-		["Database:     ", data.db_name],
-		["Base URL:     ", data.base_url],
-		["Created At:   ", data.created_at],
-		["JWKS URL:     ", data.jwks_url]
+		["Branch:", branchName ? `${branchName} (${data.branch_id})` : data.branch_id],
+		["Database:", data.db_name],
+		["Base URL:", data.base_url],
+		["Created At:", data.created_at],
+		["JWKS URL:", data.jwks_url]
 	]);
 };
 const disable = async (props) => {
@@ -428,10 +445,11 @@ const oauthProviderList = async (props) => {
 		return;
 	}
 	writer(props).end(data.providers, { fields: OAUTH_PROVIDER_FIELDS });
-	if (data.providers.some((p) => p.type === NeonAuthOauthProviderType.Shared) && props.output === "table") process.stdout.write(`\n${chalk.yellow("Caution:")} ${SHARED_PROVIDER_DISCLAIMER}\n\n`);
+	if (data.providers.some((p) => p.type === NeonAuthOauthProviderType.Shared) && props.output === "table") writeStyled(`\n${chalk.yellow("Caution:")} ${SHARED_PROVIDER_DISCLAIMER}\n\n`);
 };
 const oauthProviderAdd = async (props) => {
 	const branchId = await resolveBranch(props);
+	const baseUrlRequest = callbackBaseUrl(props, branchId, props.providerId);
 	let data;
 	try {
 		({data} = await props.apiClient.addBranchNeonAuthOauthProvider(props.projectId, branchId, {
@@ -445,14 +463,15 @@ const oauthProviderAdd = async (props) => {
 	}
 	if (props.output === "json" || props.output === "yaml") writer(props).end(data, { fields: OAUTH_PROVIDER_FIELDS });
 	else printKvBlock("OAuth provider added", [
-		["ID:         ", data.id],
-		["Type:       ", data.type],
-		...data.client_id ? [["Client ID:  ", data.client_id]] : []
+		["ID:", data.id],
+		["Type:", data.type],
+		...data.client_id ? [["Client ID:", data.client_id]] : []
 	]);
-	await printCallbackInstructions(props, branchId, props.providerId);
+	printCallbackInstructions(props.providerId, await baseUrlRequest);
 };
 const oauthProviderUpdate = async (props) => {
 	const branchId = await resolveBranch(props);
+	const baseUrlRequest = callbackBaseUrl(props, branchId, props.providerId);
 	let data;
 	try {
 		({data} = await props.apiClient.updateBranchNeonAuthOauthProvider(props.projectId, branchId, props.providerId, {
@@ -465,11 +484,11 @@ const oauthProviderUpdate = async (props) => {
 	}
 	if (props.output === "json" || props.output === "yaml") writer(props).end(data, { fields: OAUTH_PROVIDER_FIELDS });
 	else printKvBlock("OAuth provider updated", [
-		["ID:         ", data.id],
-		["Type:       ", data.type],
-		...data.client_id ? [["Client ID:  ", data.client_id]] : []
+		["ID:", data.id],
+		["Type:", data.type],
+		...data.client_id ? [["Client ID:", data.client_id]] : []
 	]);
-	await printCallbackInstructions(props, branchId, props.providerId);
+	printCallbackInstructions(props.providerId, await baseUrlRequest);
 };
 const CALLBACK_INSTRUCTIONS = {
 	github: {
@@ -485,20 +504,21 @@ const CALLBACK_INSTRUCTIONS = {
 		urlLabel: "callback/google"
 	}
 };
-const printCallbackInstructions = async (props, branchId, providerId) => {
+/**
+* Starts the base-URL read for the callback instructions, or resolves to undefined when none
+* apply. It runs alongside the provider write (adding a provider does not change the base URL)
+* and never rejects: a failed read prints no instructions, as before.
+*/
+const callbackBaseUrl = (props, branchId, providerId) => {
+	if (!CALLBACK_INSTRUCTIONS[providerId]) return Promise.resolve(void 0);
+	if (props.output === "json" || props.output === "yaml") return Promise.resolve(void 0);
+	return props.apiClient.getNeonAuth(props.projectId, branchId).then(({ data }) => data.base_url, () => void 0);
+};
+const printCallbackInstructions = (providerId, baseUrl) => {
 	const instructions = CALLBACK_INSTRUCTIONS[providerId];
-	if (!instructions) return;
-	if (props.output === "json" || props.output === "yaml") return;
-	let baseUrl;
-	try {
-		const { data } = await props.apiClient.getNeonAuth(props.projectId, branchId);
-		baseUrl = data.base_url;
-	} catch {
-		return;
-	}
-	if (!baseUrl) return;
+	if (!instructions || !baseUrl) return;
 	const callbackUrl = `${baseUrl.replace(/\/$/, "")}/${instructions.urlLabel}`;
-	printKvBlock(instructions.lead, [["URL:  ", callbackUrl]]);
+	printKvBlock(instructions.lead, [["URL:", callbackUrl]]);
 };
 const oauthProviderDelete = async (props) => {
 	const branchId = await resolveBranch(props);
@@ -563,13 +583,13 @@ const allowLocalhostDisable = async (props) => {
 	printMessage("Localhost connections restricted");
 };
 const printEmailPasswordEntries = (data) => [
-	["Enabled:                    ", String(data.enabled)],
-	["Verification Method:        ", data.email_verification_method],
-	["Require Verification:       ", String(data.require_email_verification)],
+	["Enabled:", String(data.enabled)],
+	["Verification Method:", data.email_verification_method],
+	["Require Verification:", String(data.require_email_verification)],
 	["Auto Sign In After Verify:  ", String(data.auto_sign_in_after_verification)],
 	["Send Email On Sign Up:      ", String(data.send_verification_email_on_sign_up)],
 	["Send Email On Sign In:      ", String(data.send_verification_email_on_sign_in)],
-	["Disable Sign Up:            ", String(data.disable_sign_up)]
+	["Disable Sign Up:", String(data.disable_sign_up)]
 ];
 const emailPasswordGet = async (props) => {
 	const branchId = await resolveBranch(props);
@@ -598,14 +618,14 @@ const emailPasswordUpdate = async (props) => {
 	printKvBlock("Email & password auth configuration updated", printEmailPasswordEntries(data));
 };
 const printEmailProviderEntries = (data) => [
-	["Type:          ", data.type],
+	["Type:", data.type],
 	...data.type === "standard" ? [
-		["Host:          ", data.host],
+		["Host:", data.host],
 		["Port:          ", data.port != null ? String(data.port) : void 0],
-		["Username:      ", data.username]
+		["Username:", data.username]
 	] : [],
-	["Sender Email:  ", data.sender_email],
-	["Sender Name:   ", data.sender_name]
+	["Sender Email:", data.sender_email],
+	["Sender Name:", data.sender_name]
 ];
 const emailProviderGet = async (props) => {
 	const branchId = await resolveBranch(props);
@@ -634,7 +654,7 @@ const emailProviderUpdate = async (props) => {
 	const { data } = await props.apiClient.updateNeonAuthEmailProvider(props.projectId, branchId, config);
 	if (props.output === "json" || props.output === "yaml") writer(props).end(data, { fields: EMAIL_PROVIDER_FIELDS });
 	else printKvBlock("Email provider configuration updated", printEmailProviderEntries(data));
-	if (warnSharedSender) process.stderr.write(`${chalk.yellow("Warning:")} --sender-email and --sender-name are ignored for the shared email provider. These values only take effect with --type standard.\n\n`);
+	if (warnSharedSender) writeStyled(`${chalk.yellow("Warning:")} --sender-email and --sender-name are ignored for the shared email provider. These values only take effect with --type standard.\n\n`, process.stderr);
 };
 const emailProviderTest = async (props) => {
 	const branchId = await resolveBranch(props);
@@ -655,9 +675,9 @@ const emailProviderTestFailureMessage = (recipientEmail, errorMessage) => {
 	return errorMessage ? `${header}\nUpstream error: ${errorMessage}` : header;
 };
 const printOrganizationEntries = (data) => [
-	["Enabled:          ", String(data.enabled)],
-	["Org Limit:        ", String(data.organization_limit)],
-	["Creator Role:     ", data.creator_role]
+	["Enabled:", String(data.enabled)],
+	["Org Limit:", String(data.organization_limit)],
+	["Creator Role:", data.creator_role]
 ];
 const organizationGet = async (props) => {
 	const branchId = await resolveBranch(props);
@@ -691,9 +711,9 @@ const organizationUpdate = async (props) => {
 	printKvBlock("Organization configuration updated", printOrganizationEntries(data));
 };
 const printWebhookEntries = (data) => [
-	["Enabled:        ", String(data.enabled)],
-	["URL:            ", data.webhook_url ?? ""],
-	["Events:         ", (data.enabled_events ?? []).join(", ")],
+	["Enabled:", String(data.enabled)],
+	["URL:", data.webhook_url ?? ""],
+	["Events:", (data.enabled_events ?? []).join(", ")],
 	["Timeout (sec):  ", data.timeout_seconds != null ? String(data.timeout_seconds) : ""]
 ];
 const webhookGet = async (props) => {
@@ -746,7 +766,7 @@ const pluginsList = async (props) => {
 		}
 		return JSON.stringify(value);
 	};
-	const entries = Object.entries(data).map(([key, value]) => [key.padEnd(24), summarize(value)]);
+	const entries = Object.entries(data).map(([key, value]) => [key, summarize(value)]);
 	printKvBlock("Neon Auth plugins", entries);
 };
 const pluginsGet = async (props) => {
@@ -763,12 +783,12 @@ const pluginsGet = async (props) => {
 		return;
 	}
 	if (typeof plugin === "object" && !Array.isArray(plugin) && plugin != null) {
-		const entries = Object.entries(plugin).map(([k, v]) => [`${k}:`.padEnd(18), formatValue(v)]);
+		const entries = Object.entries(plugin).map(([k, v]) => [`${k}:`, formatValue(v)]);
 		printKvBlock(pluginTitle(props.pluginName), entries);
 	} else if (Array.isArray(plugin)) {
-		const entries = plugin.map((item, i) => [`[${i}]:`.padEnd(18), typeof item === "object" ? JSON.stringify(item) : String(item)]);
+		const entries = plugin.map((item, i) => [`[${i}]:`, typeof item === "object" ? JSON.stringify(item) : String(item)]);
 		printKvBlock(pluginTitle(props.pluginName), entries);
-	} else printKvBlock(pluginTitle(props.pluginName), [["Value:".padEnd(18), String(plugin)]]);
+	} else printKvBlock(pluginTitle(props.pluginName), [["Value:", String(plugin)]]);
 };
 const userCreate = async (props) => {
 	const branchId = await resolveBranch(props);
@@ -779,9 +799,9 @@ const userCreate = async (props) => {
 	const { data } = await props.apiClient.createBranchNeonAuthNewUser(props.projectId, branchId, requestBody);
 	const displayName = requestBody.name !== props.email ? requestBody.name : void 0;
 	printKvBlock("User created", [
-		["ID:    ", data.id],
-		["Email: ", requestBody.email],
-		...displayName ? [["Name:  ", displayName]] : []
+		["ID:", data.id],
+		["Email:", requestBody.email],
+		...displayName ? [["Name:", displayName]] : []
 	]);
 };
 const userDelete = async (props) => {
@@ -792,7 +812,7 @@ const userDelete = async (props) => {
 const userSetRole = async (props) => {
 	const branchId = await resolveBranch(props);
 	const { data } = await props.apiClient.updateNeonAuthUserRole(props.projectId, branchId, props.userId, { roles: props.roles });
-	printKvBlock("Roles updated", [["User ID: ", data.id], ["Roles:   ", props.roles.join(", ")]]);
+	printKvBlock("Roles updated", [["User ID:", data.id], ["Roles:", props.roles.join(", ")]]);
 };
 //#endregion
 export { builder, command, describe, handler, neon_auth_exports as t };

package/dist/commands/roles.js

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "../_chunks/rolldown-runtime-8H4AJuhK.js";
 import { retryOnLock } from "../api.js";
 import { writer } from "../writer.js";
-import { branchIdFromProps, fillSingleProject } from "../utils/enrichers.js";
+import { fillSingleProject, resolveBranchFromProps } from "../utils/enrichers.js";
 //#region src/commands/roles.ts
 var roles_exports = /* @__PURE__ */ __exportAll({
 	aliases: () => aliases,
@@ -14,6 +14,11 @@ var roles_exports = /* @__PURE__ */ __exportAll({
 	list: () => list
 });
 const ROLES_FIELDS = ["name", "created_at"];
+const CREATED_ROLE_FIELDS = [
+	"name",
+	"password",
+	"created_at"
+];
 const command = "roles";
 const describe = "Manage roles";
 const aliases = ["role"];
@@ -41,22 +46,34 @@ const handler = (args) => {
 	return args;
 };
 const list = async (props) => {
-	const branchId = await branchIdFromProps(props);
+	const { branchId, branch } = await resolveBranchFromProps(props);
 	const { data } = await props.apiClient.listProjectBranchRoles(props.projectId, branchId);
-	writer(props).end(data.roles, { fields: ROLES_FIELDS });
+	const branchLabel = branch?.name ?? branchId;
+	writer(props).end(data.roles, {
+		fields: ROLES_FIELDS,
+		humanTitle: `Roles on ${branchLabel}`,
+		emptyMessage: `No roles on ${branchLabel}.`
+	});
 };
 const create = async (props) => {
-	const branchId = await branchIdFromProps(props);
+	const noLogin = props["no-login"] === true || props.login === false;
+	const { branchId, branch } = await resolveBranchFromProps(props);
 	const { data } = await retryOnLock(() => props.apiClient.createProjectBranchRole(props.projectId, branchId, { role: {
 		name: props.name,
-		no_login: props["no-login"]
+		...noLogin ? { no_login: true } : {}
 	} }));
-	writer(props).end(data.role, { fields: ROLES_FIELDS });
+	writer(props).end(data.role, {
+		fields: CREATED_ROLE_FIELDS,
+		humanTitle: `Role created on ${branch?.name ?? branchId}`
+	});
 };
 const deleteRole = async (props) => {
-	const branchId = await branchIdFromProps(props);
+	const { branchId, branch } = await resolveBranchFromProps(props);
 	const { data } = await retryOnLock(() => props.apiClient.deleteProjectBranchRole(props.projectId, branchId, props.role));
-	if (data) writer(props).end(data.role, { fields: ROLES_FIELDS });
+	if (data) writer(props).end(data.role, {
+		fields: ROLES_FIELDS,
+		humanTitle: `Role deleted from ${branch?.name ?? branchId}`
+	});
 };
 //#endregion
 export { aliases, builder, command, create, deleteRole, describe, handler, list, roles_exports as t };

package/dist/context.js

@@ -88,6 +88,8 @@ const isUnfollowedGitHookSync = (args, cwd = process.cwd()) => {
 const isSkillsCommand = (args) => args._[0] === "skills" || args._[0] === "skill";
 const isPluginsCommand = (args) => args._[0] === "plugins" || args._[0] === "plugin";
 const isAskCommand = (args) => args._[0] === "ask";
+/** Feedback is anonymous, so it must never read credentials or `.neon` context. */
+const isFeedbackCommand = (args) => args._[0] === "feedback";
 /**
 * `inspect db --db-url` talks to Postgres with that URI. Skip only when the
 * parsed value is nonempty: empty `--db-url` still goes through project
@@ -175,7 +177,7 @@ const enrichFromContext = (args) => {
 	if (isProfileCommand(args)) return;
 	if (isMcpCommand(args)) return;
 	if (isSkillsCommand(args) || isPluginsCommand(args)) return;
-	if (isAskCommand(args)) return;
+	if (isAskCommand(args) || isFeedbackCommand(args)) return;
 	if (isClaimCommand(args)) return;
 	const context = readContextFile(args.contextFile);
 	if (!args.orgId) args.orgId = context.orgId;
@@ -355,4 +357,4 @@ const globToRegExp = (pattern) => {
 	return new RegExp(`^${source}$`);
 };
 //#endregion
-export { CONTEXT_FILE, applyContext, contextBranch, currentContextFile, enrichFromContext, ensureDirectoryGitignored, ensureGitignored, gitBranchMap, gitBranchMapping, isApiKeysCommand, isAskCommand, isClaimCommand, isConfigAdd, isConfigInit, isCurrentBranchProbe, isGitLocalCommand, isInspectDbUrl, isMcpCommand, isMcpOauth, isPluginsCommand, isProfileCommand, isSkillsCommand, isUnfollowedGitHookSync, readContextFile, setContext, setGitBranchMap, setGitBranchMapping, setGitFollow, updateContextFile, walkContextFile };
+export { CONTEXT_FILE, applyContext, contextBranch, currentContextFile, enrichFromContext, ensureDirectoryGitignored, ensureGitignored, gitBranchMap, gitBranchMapping, isApiKeysCommand, isAskCommand, isClaimCommand, isConfigAdd, isConfigInit, isCurrentBranchProbe, isFeedbackCommand, isGitLocalCommand, isInspectDbUrl, isMcpCommand, isMcpOauth, isPluginsCommand, isProfileCommand, isSkillsCommand, isUnfollowedGitHookSync, readContextFile, setContext, setGitBranchMap, setGitBranchMapping, setGitFollow, updateContextFile, walkContextFile };

package/dist/index.js

@@ -39,6 +39,7 @@ const NO_SUBCOMMANDS_VERBS = [
 	"skills",
 	"skill",
 	"ask",
+	"feedback",
 	"dev",
 	"deploy",
 	"diff",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "neon",
-  "version": "8.0.1",
+  "version": "8.0.3",
   "description": "CLI tool for Neon, the cloud backend primitives built around Lakebase Postgres",
   "keywords": [
     "neon",
@@ -100,8 +100,8 @@
     "typescript": "^5.9.0",
     "vitest": "^3.0.9",
     "@neon-internals/cli-core": "0.0.0",
-    "@neon/e2e-harness": "0.0.0",
     "@neon-internals/env-core": "0.0.26",
+    "@neon/e2e-harness": "0.0.0",
     "@neon/functions": "0.11.0"
   },
   "publishConfig": {