neon 8.11.0 → 8.11.2

package/dist/_chunks/triggers-BrRo1z4b.js

@@ -0,0 +1,302 @@
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { log } from "../log.js";
+import { isNeonApiError, messageFromBody, retryOnLock } from "../api.js";
+import { writer } from "../writer.js";
+import { branchIdFromProps, fillSingleProject } from "../utils/enrichers.js";
+//#region src/commands/triggers.ts
+var triggers_exports = /* @__PURE__ */ __exportAll({
+	TRIGGER_FIELDS: () => TRIGGER_FIELDS,
+	aliases: () => aliases,
+	builder: () => builder,
+	command: () => command,
+	create: () => create,
+	deleteTrigger: () => deleteTrigger,
+	describe: () => describe,
+	get: () => get,
+	handler: () => handler,
+	list: () => list,
+	update: () => update
+});
+const TRIGGER_NOT_FOUND_MESSAGE = "function trigger not visible on branch";
+/** Translate the trigger-not-found 404 into a resource-specific message; re-throw everything else. */
+async function withTriggerNotFound(triggerId, branchId, run) {
+	try {
+		return await run();
+	} catch (err) {
+		if (isNeonApiError(err) && err.status === 404 && messageFromBody(err.data) === TRIGGER_NOT_FOUND_MESSAGE) throw new Error(`Trigger ${triggerId} not found on branch ${branchId}.`);
+		throw err;
+	}
+}
+const TRIGGER_COMMON_FIELDS = [
+	"trigger_id",
+	"name",
+	"function_slug",
+	"function_path",
+	"enabled",
+	"inherited"
+];
+const TRIGGER_FIELDS = [
+	"trigger_id",
+	"name",
+	"type",
+	"function_slug",
+	"function_path",
+	"schedule",
+	"storage",
+	"enabled",
+	"inherited",
+	"next_run_at"
+];
+function storageMatch(config) {
+	return config.prefix === void 0 ? config.bucket_name : `${config.bucket_name} ${config.prefix}`;
+}
+function triggerTableRow(t) {
+	if (t.type === "schedule") return {
+		trigger_id: t.trigger_id,
+		name: t.name,
+		type: t.type,
+		function_slug: t.function_slug,
+		function_path: t.function_path,
+		schedule: t.schedule.cron,
+		storage: "",
+		enabled: t.enabled,
+		inherited: t.inherited,
+		next_run_at: t.next_run_at ?? ""
+	};
+	return {
+		trigger_id: t.trigger_id,
+		name: t.name,
+		type: t.type,
+		function_slug: t.function_slug,
+		function_path: t.function_path,
+		schedule: "",
+		storage: storageMatch(t.storage_object_created),
+		enabled: t.enabled,
+		inherited: t.inherited,
+		next_run_at: ""
+	};
+}
+function writeTrigger(props, data, extra) {
+	if (props.output !== "table") {
+		writer(props).end(data, {
+			fields: TRIGGER_COMMON_FIELDS,
+			...extra
+		});
+		return;
+	}
+	const rows = Array.isArray(data) ? data.map(triggerTableRow) : triggerTableRow(data);
+	writer(props).end(rows, {
+		fields: TRIGGER_FIELDS,
+		...extra
+	});
+}
+function enabledPatch(type, enabled) {
+	if (type === "schedule") return {
+		type: "schedule",
+		enabled
+	};
+	return {
+		type: "storage_object_created",
+		enabled
+	};
+}
+function updatePatch(existing, props) {
+	if (existing.type === "schedule") {
+		const body = { type: "schedule" };
+		if (props["function-slug"] !== void 0) body.function_slug = props["function-slug"];
+		if (props.name !== void 0) body.name = props.name;
+		if (props.cron !== void 0) body.schedule = { cron: props.cron };
+		if (props["function-path"] !== void 0) body.function_path = props["function-path"];
+		if (props.enabled !== void 0) body.enabled = props.enabled;
+		return body;
+	}
+	const body = { type: "storage_object_created" };
+	if (props["function-slug"] !== void 0) body.function_slug = props["function-slug"];
+	if (props.name !== void 0) body.name = props.name;
+	if (props["function-path"] !== void 0) body.function_path = props["function-path"];
+	if (props.enabled !== void 0) body.enabled = props.enabled;
+	if (props.bucket !== void 0 || props.prefix !== void 0) body.storage_object_created = {
+		bucket_name: props.bucket ?? existing.storage_object_created.bucket_name,
+		...props.prefix !== void 0 ? { prefix: props.prefix } : existing.storage_object_created.prefix !== void 0 ? { prefix: existing.storage_object_created.prefix } : {}
+	};
+	return body;
+}
+function noFieldsToUpdateMessage(type) {
+	const flags = type === "schedule" ? [
+		"--function-slug",
+		"--name",
+		"--cron",
+		"--function-path",
+		"--enabled"
+	] : [
+		"--function-slug",
+		"--name",
+		"--bucket",
+		"--prefix",
+		"--function-path",
+		"--enabled"
+	];
+	const last = flags[flags.length - 1];
+	return `No fields to update. Pass at least one of ${flags.slice(0, -1).join(", ")}, or ${last}.`;
+}
+const command = "triggers";
+const describe = "Manage function triggers";
+const aliases = ["trigger"];
+const builder = (argv) => argv.usage("$0 triggers <sub-command> [options]").options({
+	"project-id": {
+		describe: "Project ID",
+		type: "string"
+	},
+	branch: {
+		describe: "Branch ID or name",
+		type: "string"
+	}
+}).middleware(fillSingleProject).command("list", "List triggers on the branch", (yargs) => yargs, (args) => list(args)).command("get <id>", "Show a trigger", (yargs) => yargs.positional("id", {
+	describe: "Trigger ID",
+	type: "string"
+}), (args) => get(args)).command("create", "Create a trigger that invokes a function on a cron schedule or when an object is created", (yargs) => yargs.options({
+	"function-slug": {
+		describe: "Slug of the function to invoke",
+		type: "string",
+		demandOption: true
+	},
+	name: {
+		describe: "Trigger name (unique per branch)",
+		type: "string",
+		demandOption: true
+	},
+	cron: {
+		describe: "Five-field UTC cron expression, e.g. '*/15 * * * *'",
+		type: "string"
+	},
+	bucket: {
+		describe: "Object-storage bucket to watch (storage_object_created)",
+		type: "string"
+	},
+	prefix: {
+		describe: "Object-key prefix to match (requires --bucket on create)",
+		type: "string"
+	},
+	"function-path": {
+		describe: "Path the invocation is sent to (default '/')",
+		type: "string"
+	},
+	enabled: {
+		describe: "Whether the trigger runs (default true)",
+		type: "boolean"
+	}
+}), (args) => create(args)).command("update <id>", "Update a trigger", (yargs) => yargs.positional("id", {
+	describe: "Trigger ID",
+	type: "string"
+}).options({
+	"function-slug": {
+		describe: "Slug of the function to invoke",
+		type: "string"
+	},
+	name: {
+		describe: "Trigger name (unique per branch)",
+		type: "string"
+	},
+	cron: {
+		describe: "Five-field UTC cron expression",
+		type: "string"
+	},
+	bucket: {
+		describe: "Object-storage bucket to watch (storage_object_created)",
+		type: "string"
+	},
+	prefix: {
+		describe: "Object-key prefix to match",
+		type: "string"
+	},
+	"function-path": {
+		describe: "Path the invocation is sent to",
+		type: "string"
+	},
+	enabled: {
+		describe: "Whether the trigger runs",
+		type: "boolean"
+	}
+}), (args) => update(args)).command("enable <id>", "Enable a trigger", (yargs) => yargs.positional("id", {
+	describe: "Trigger ID",
+	type: "string"
+}), (args) => setEnabled(args, true)).command("disable <id>", "Disable a trigger without deleting it", (yargs) => yargs.positional("id", {
+	describe: "Trigger ID",
+	type: "string"
+}), (args) => setEnabled(args, false)).command("delete <id>", "Delete a trigger", (yargs) => yargs.positional("id", {
+	describe: "Trigger ID",
+	type: "string"
+}), (args) => deleteTrigger(args));
+const handler = (args) => {
+	return args;
+};
+const list = async (props) => {
+	const branchId = await branchIdFromProps(props);
+	const { data } = await props.apiClient.listProjectBranchTriggers(props.projectId, branchId);
+	writeTrigger(props, data.triggers, { emptyMessage: "No triggers found on this branch." });
+};
+const get = async (props) => {
+	const branchId = await branchIdFromProps(props);
+	const { data } = await withTriggerNotFound(props.id, branchId, () => props.apiClient.getProjectBranchTrigger(props.projectId, branchId, props.id));
+	writeTrigger(props, data.trigger);
+};
+const create = async (props) => {
+	const branchId = await branchIdFromProps(props);
+	const body = createBody(props);
+	const { data } = await retryOnLock(() => props.apiClient.createProjectBranchTrigger(props.projectId, branchId, body));
+	writeTrigger(props, data.trigger);
+};
+function createBody(props) {
+	if (props.cron !== void 0 && props.bucket !== void 0) throw new Error("Pass --cron or --bucket, not both.");
+	if (props.prefix !== void 0 && props.bucket === void 0) throw new Error("--prefix requires --bucket.");
+	if (props.cron !== void 0) {
+		const body = {
+			type: "schedule",
+			function_slug: props["function-slug"],
+			name: props.name,
+			schedule: { cron: props.cron }
+		};
+		if (props["function-path"] !== void 0) body.function_path = props["function-path"];
+		if (props.enabled !== void 0) body.enabled = props.enabled;
+		return body;
+	}
+	if (props.bucket !== void 0) {
+		const body = {
+			type: "storage_object_created",
+			function_slug: props["function-slug"],
+			name: props.name,
+			storage_object_created: {
+				bucket_name: props.bucket,
+				...props.prefix !== void 0 ? { prefix: props.prefix } : {}
+			}
+		};
+		if (props["function-path"] !== void 0) body.function_path = props["function-path"];
+		if (props.enabled !== void 0) body.enabled = props.enabled;
+		return body;
+	}
+	throw new Error("Pass --cron for a schedule trigger, or --bucket for a storage_object_created trigger.");
+}
+const update = async (props) => {
+	const branchId = await branchIdFromProps(props);
+	const { data: existing } = await withTriggerNotFound(props.id, branchId, () => props.apiClient.getProjectBranchTrigger(props.projectId, branchId, props.id));
+	const trigger = existing.trigger;
+	if (props.cron !== void 0 && trigger.type !== "schedule") throw new Error(`Trigger ${props.id} is type ${trigger.type}; --cron applies to schedule triggers.`);
+	if ((props.bucket !== void 0 || props.prefix !== void 0) && trigger.type !== "storage_object_created") throw new Error(`Trigger ${props.id} is type ${trigger.type}; --bucket and --prefix apply to storage_object_created triggers.`);
+	const body = updatePatch(trigger, props);
+	if (Object.keys(body).filter((k) => k !== "type").length === 0) throw new Error(noFieldsToUpdateMessage(trigger.type));
+	const { data } = await withTriggerNotFound(props.id, branchId, () => retryOnLock(() => props.apiClient.updateProjectBranchTrigger(props.projectId, branchId, props.id, body)));
+	writeTrigger(props, data.trigger);
+};
+const setEnabled = async (props, enabled) => {
+	const branchId = await branchIdFromProps(props);
+	const { data: existing } = await withTriggerNotFound(props.id, branchId, () => props.apiClient.getProjectBranchTrigger(props.projectId, branchId, props.id));
+	const { data } = await withTriggerNotFound(props.id, branchId, () => retryOnLock(() => props.apiClient.updateProjectBranchTrigger(props.projectId, branchId, props.id, enabledPatch(existing.trigger.type, enabled))));
+	writeTrigger(props, data.trigger);
+};
+const deleteTrigger = async (props) => {
+	const branchId = await branchIdFromProps(props);
+	await withTriggerNotFound(props.id, branchId, () => retryOnLock(() => props.apiClient.deleteProjectBranchTrigger(props.projectId, branchId, props.id)));
+	log.info(`Trigger ${props.id} deleted`);
+};
+//#endregion
+export { create as a, get as c, triggers_exports as d, update as f, command as i, handler as l, aliases as n, deleteTrigger as o, builder as r, describe as s, TRIGGER_FIELDS as t, list as u };

package/dist/_chunks/user-dlOGXbX9.js

@@ -0,0 +1,60 @@
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { getAuthContext } from "../auth_context.js";
+import { writer } from "../writer.js";
+//#region src/commands/user.ts
+var user_exports = /* @__PURE__ */ __exportAll({
+	authenticationLabel: () => authenticationLabel,
+	builder: () => builder,
+	command: () => "me",
+	describe: () => describe,
+	handler: () => handler,
+	userDetails: () => userDetails
+});
+const command = "me";
+const describe = "Show current user";
+const builder = (yargs) => yargs.option("context-file", { hidden: true });
+const handler = async (args) => {
+	await me(args);
+};
+const me = async (props) => {
+	if (!props.apiClient) return;
+	const { data } = await props.apiClient.getCurrentUserInfo();
+	if (props.output === "json" || props.output === "yaml") {
+		writer(props).end(data, { fields: [
+			"login",
+			"email",
+			"name",
+			"projects_limit"
+		] });
+		return;
+	}
+	writer(props).end(userDetails(data, getAuthContext()), { fields: [
+		"login",
+		"email",
+		"name",
+		"projects_limit",
+		"authentication"
+	] });
+};
+/** Table-only view; the field names become the row labels. */
+const userDetails = (user, auth) => ({
+	login: user.login,
+	email: user.email,
+	name: [user.name, user.last_name].filter(Boolean).join(" "),
+	projects_limit: user.projects_limit === 0 ? void 0 : user.projects_limit,
+	authentication: auth ? authenticationLabel(auth) : void 0
+});
+const authenticationLabel = (auth) => {
+	const profile = auth.profile ? ` (profile ${auth.profile})` : "";
+	switch (auth.source) {
+		case "stored-credentials": return `OAuth${profile}`;
+		case "profile-api-key": return `API key${profile}`;
+		case "api-key":
+			if (auth.apiKeyFrom === "flag") return "API key (--api-key)";
+			if (auth.apiKeyFrom === "env") return "API key (NEON_API_KEY)";
+			return "API key";
+		case "claimable": return "Claimable project";
+	}
+};
+//#endregion
+export { handler as a, describe as i, builder as n, userDetails as o, command as r, user_exports as s, authenticationLabel as t };

package/dist/_chunks/vpc_endpoints-CNb0YfMo.js

@@ -0,0 +1,105 @@
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { log } from "../log.js";
+import { writer } from "../writer.js";
+import { fillSingleOrg, fillSingleProject } from "../utils/enrichers.js";
+import { r as REGIONS } from "./projects-BwI2Uo0z.js";
+//#region src/commands/vpc_endpoints.ts
+var vpc_endpoints_exports = /* @__PURE__ */ __exportAll({
+	builder: () => builder,
+	command: () => "vpc",
+	describe: () => describe
+});
+const VPC_ENDPOINT_FIELDS = ["vpc_endpoint_id", "label"];
+const VPC_ENDPOINT_DETAILS_FIELDS = [
+	"vpc_endpoint_id",
+	"label",
+	"state",
+	"num_restricted_projects",
+	"example_restricted_projects"
+];
+const command = "vpc";
+const describe = "Manage VPC endpoints and project VPC restrictions";
+const builder = (argv) => {
+	return argv.usage("$0 vpc <sub-command> [options]").command("endpoint", "Manage VPC endpoints.\nSee: https://neon.tech/docs/guides/neon-private-networking\nAfter adding an endpoint to an organization, client connections will be accepted\nfrom the corresponding VPC for all projects in the organization, unless overridden\nby a project-level VPC endpoint restriction.", (yargs) => {
+		return yargs.options({
+			"org-id": {
+				describe: "Organization ID",
+				type: "string"
+			},
+			"region-id": {
+				describe: `The region ID. Possible values: ${REGIONS.join(", ")}`,
+				type: "string"
+			}
+		}).middleware(fillSingleOrg).command("list", "List configured VPC endpoints for this organization.", (yargs) => yargs.demandOption("region-id"), async (args) => {
+			await listOrg(args);
+		}).command({
+			command: "assign <id>",
+			aliases: ["update <id>", "add <id>"],
+			describe: "Add or update a VPC endpoint for this organization.\nNote: Azure regions are not yet supported.",
+			builder: (yargs) => yargs.options({ label: {
+				describe: "An optional descriptive label for the VPC endpoint",
+				type: "string"
+			} }).demandOption("region-id"),
+			handler: async (args) => {
+				await assignOrg(args);
+			}
+		}).command("remove <id>", "Remove a VPC endpoint from this organization.", (yargs) => yargs.demandOption("region-id"), async (args) => {
+			await removeOrg(args);
+		}).command("status <id>", "Get the status of a VPC endpoint for this organization.", (yargs) => yargs.demandOption("region-id"), async (args) => {
+			await statusOrg(args);
+		});
+	}).command("project", "Manage project-level VPC endpoint restrictions.\nBy default, connections are accepted from any VPC configured at the organization level.\nA project-level VPC endpoint restriction can be used to restrict connections to a specific VPC.", (yargs) => {
+		return yargs.options({ "project-id": {
+			describe: "Project ID",
+			type: "string"
+		} }).middleware(fillSingleProject).command("list", "List VPC endpoint restrictions for this project.", (yargs) => yargs, async (args) => {
+			await listProject(args);
+		}).command({
+			command: "restrict <id>",
+			aliases: ["update <id>"],
+			describe: "Configure or update a VPC endpoint restriction for this project.",
+			builder: (yargs) => yargs.options({ label: {
+				describe: "An optional descriptive label for the VPC endpoint restriction",
+				type: "string"
+			} }),
+			handler: async (args) => {
+				await assignProject(args);
+			}
+		}).command("remove <id>", "Remove a VPC endpoint restriction from this project.", (yargs) => yargs, async (args) => {
+			await removeProject(args);
+		});
+	});
+};
+const listOrg = async (props) => {
+	const { data } = await props.apiClient.listOrganizationVpcEndpoints(props.orgId, props.regionId);
+	writer(props).end(data.endpoints, { fields: VPC_ENDPOINT_FIELDS });
+};
+const assignOrg = async (props) => {
+	const vpcEndpointAssignment = { label: props.label || "" };
+	const { data } = await props.apiClient.assignOrganizationVpcEndpoint(props.orgId, props.regionId, props.id, vpcEndpointAssignment);
+	writer(props).end(data, { fields: [] });
+	if (props.regionId.startsWith("azure")) log.info("VPC endpoint configuration is not supported for Azure regions");
+};
+const removeOrg = async (props) => {
+	const { data } = await props.apiClient.deleteOrganizationVpcEndpoint(props.orgId, props.regionId, props.id);
+	writer(props).end(data, { fields: [] });
+};
+const statusOrg = async (props) => {
+	const { data } = await props.apiClient.getOrganizationVpcEndpointDetails(props.orgId, props.regionId, props.id);
+	writer(props).end(data, { fields: VPC_ENDPOINT_DETAILS_FIELDS });
+};
+const listProject = async (props) => {
+	const { data } = await props.apiClient.listProjectVpcEndpoints(props.projectId);
+	writer(props).end(data.endpoints, { fields: VPC_ENDPOINT_FIELDS });
+};
+const assignProject = async (props) => {
+	const vpcEndpointAssignment = { label: props.label || "" };
+	const { data } = await props.apiClient.assignProjectVpcEndpoint(props.projectId, props.id, vpcEndpointAssignment);
+	writer(props).end(data, { fields: [] });
+};
+const removeProject = async (props) => {
+	const { data } = await props.apiClient.deleteProjectVpcEndpoint(props.projectId, props.id);
+	writer(props).end(data, { fields: [] });
+};
+//#endregion
+export { vpc_endpoints_exports as i, command as n, describe as r, builder as t };

package/dist/auth_recovery.js

@@ -2,7 +2,7 @@ import { t as storeFor } from "./_chunks/credential_io-BS-0Pmwc.js";
 import { log } from "./log.js";
 import { authFailureMessage, getAuthContext, locationFromContext } from "./auth_context.js";
 import { AuthRefreshError } from "./auth.js";
-import { isAccessTokenUsable, refreshStoredCredentials } from "./commands/auth.js";
+import { f as refreshStoredCredentials, u as isAccessTokenUsable } from "./_chunks/auth-CIUtXByB.js";
 //#region src/auth_recovery.ts
 const supersededOnDisk = (rejectedToken) => {
 	if (rejectedToken === void 0) return false;