neon 8.11.1 → 8.11.2

package/dist/functions/registry.js

@@ -1,174 +1,52 @@
-import { FUNCTION_SLUG_PATTERN } from "../utils/function_slug.js";
 //#region src/functions/registry.ts
 const MAX_PATH_LENGTH = 255;
-const MAX_INDEX_ENTRIES = 500;
-const MAX_OPERATIONS = 40;
-const MAX_LOGO_URL_LENGTH = 2048;
 const MAX_FILE_BYTES = 262144;
 const MAX_TOTAL_BYTES = 2097152;
 const MAX_JSON_BYTES = 1048576;
-const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-const isText = (value) => typeof value === "string" && value.trim() !== "";
-const matches = (value, pattern) => typeof value === "string" && pattern.test(value);
-const isOptionalString = (value) => value === void 0 || typeof value === "string";
-const TEMPLATE_ID = /^[a-z0-9][a-z0-9-]*$/;
-const OPERATION_ID = /^[a-z0-9][a-z0-9-]*$/;
-const OPERATION_SLUG = FUNCTION_SLUG_PATTERN;
-const ENV_NAME = /^[A-Z_][A-Z0-9_]*$/;
-const SINGLE_LINE = /^[^\r\n]*$/;
 const WINDOWS_ABSOLUTE = /^[A-Za-z]:/;
-const SOURCE_EXTENSION = /\.ts$/;
-const ROUTE_PATTERN = /^\/[A-Za-z0-9\-._~/]*$/;
-const EXACT_DEPENDENCY = /^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*@\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;
-const TEMPLATE_LAYOUTS = ["router", "separate"];
-const REGISTRY_CONTRACT = {
-	layouts: TEMPLATE_LAYOUTS,
-	requiredTemplateFields: [
-		"id",
-		"title",
-		"description",
-		"layout"
-	],
-	requiredOperationFields: [
-		"id",
-		"title",
-		"description",
-		"source",
-		"recommended"
-	],
-	templateId: TEMPLATE_ID,
-	operationId: OPERATION_ID,
-	operationSlug: OPERATION_SLUG,
-	envName: ENV_NAME,
-	envDescription: SINGLE_LINE,
-	source: SOURCE_EXTENSION,
-	route: ROUTE_PATTERN,
-	dependency: EXACT_DEPENDENCY,
-	maxOperations: MAX_OPERATIONS,
-	maxIndexEntries: MAX_INDEX_ENTRIES,
-	maxFileBytes: MAX_FILE_BYTES,
-	maxJsonBytes: MAX_JSON_BYTES
-};
 const isContainedRelativePath = (value) => value !== "" && value.length <= MAX_PATH_LENGTH && !value.includes("\0") && !value.includes("\\") && !value.startsWith("/") && !WINDOWS_ABSOLUTE.test(value) && !value.split("/").some((part) => part === "" || part === "." || part === "..");
-const isSafeSourcePath = (value) => isContainedRelativePath(value) && SOURCE_EXTENSION.test(value);
-const isDisplayLogoUrl = (value) => {
-	if (value.length > MAX_LOGO_URL_LENGTH || !URL.canParse(value)) return false;
-	return new URL(value).protocol === "https:";
-};
-const stringList = (value) => {
-	if (!Array.isArray(value) || !value.every((item) => typeof item === "string")) return;
-	return value;
-};
-const parseEnvironment = (value) => {
-	if (!Array.isArray(value)) return void 0;
-	const result = [];
-	for (const item of value) {
-		if (!isRecord(item) || typeof item.name !== "string" || typeof item.description !== "string" || !ENV_NAME.test(item.name) || !SINGLE_LINE.test(item.description)) return;
-		result.push({
-			name: item.name,
-			description: item.description
-		});
-	}
-	return result;
-};
-const parseTemplateOperations = (value, layout) => {
-	if (!Array.isArray(value) || value.length === 0) return void 0;
-	if (value.length > MAX_OPERATIONS) return void 0;
-	const operations = [];
-	const ids = /* @__PURE__ */ new Set();
-	const routes = /* @__PURE__ */ new Set();
-	const slugs = /* @__PURE__ */ new Set();
-	const sources = /* @__PURE__ */ new Set();
-	let recommended = 0;
-	for (const item of value) {
-		if (!isRecord(item) || !matches(item.id, OPERATION_ID) || ids.has(item.id) || !isText(item.title) || !isText(item.description) || typeof item.source !== "string" || !isSafeSourcePath(item.source) || sources.has(item.source) || !isOptionalString(item.route) || typeof item.recommended !== "boolean") return;
-		const operation = {
-			id: item.id,
-			title: item.title,
-			description: item.description,
-			source: item.source,
-			recommended: item.recommended
-		};
-		if (layout === "separate") {
-			if (typeof item.slug !== "string" || !OPERATION_SLUG.test(item.slug) || slugs.has(item.slug)) return;
-			slugs.add(item.slug);
-			operation.slug = item.slug;
-		} else {
-			const route = item.route === void 0 ? `/${item.id}` : item.route;
-			if (!ROUTE_PATTERN.test(route) || routes.has(route)) return;
-			routes.add(route);
-			operation.route = route;
-		}
-		if (item.recommended) recommended++;
-		ids.add(item.id);
-		sources.add(item.source);
-		operations.push(operation);
-	}
-	if (recommended < 1) return void 0;
-	return operations;
-};
+function assertValid(validate, data, label) {
+	if (!validate.check(data)) throw new Error(`${label}: ${validate.errorsText()}`);
+}
 const recommendedOperations = (operations) => operations.filter((operation) => operation.recommended);
 const resolveOperationById = (operations, id) => {
 	const operation = operations.find((candidate) => candidate.id === id);
 	if (!operation) throw new Error(`Unknown operation "${id}". Available operations: ${operations.map((candidate) => candidate.id).join(", ")}.`);
 	return operation;
 };
-const parseTemplateItem = (text, expectedId) => {
+const parseRegistryIndex = (text, validate) => {
 	const data = JSON.parse(text);
-	if (!isRecord(data)) throw new Error("Invalid template.json: expected a JSON object.");
-	if (!matches(data.id, TEMPLATE_ID) || expectedId !== void 0 && data.id !== expectedId) throw new Error("Invalid template.json: bad or mismatched id.");
-	if (!isText(data.title) || !isText(data.description)) throw new Error(`Invalid template.json for "${data.id}": missing title or description.`);
-	if (!isOptionalString(data.provider)) throw new Error(`Invalid template.json for "${data.id}": provider must be a string.`);
-	if (typeof data.layout !== "string" || !TEMPLATE_LAYOUTS.includes(data.layout)) throw new Error(`Invalid template.json for "${data.id}": layout must be one of ${TEMPLATE_LAYOUTS.join(", ")}.`);
-	const layout = data.layout;
-	const dependencies = stringList(data.dependencies ?? []);
-	if (dependencies === void 0 || !dependencies.every((dependency) => EXACT_DEPENDENCY.test(dependency))) throw new Error(`Invalid template.json for "${data.id}": dependencies must be exact name@version pins.`);
-	const environment = parseEnvironment(data.environment ?? []);
-	if (environment === void 0) throw new Error(`Invalid template.json for "${data.id}": environment names must be UPPER_SNAKE with a one-line description.`);
-	let operations;
-	if (data.operations !== void 0) {
-		operations = parseTemplateOperations(data.operations, layout);
-		if (operations === void 0) throw new Error(`Invalid template.json for "${data.id}": malformed operations.`);
-	}
+	assertValid(validate, data, "Invalid function registry");
+	const seen = /* @__PURE__ */ new Set();
+	return data.templates.map((item, index) => {
+		const at = `templates[${index}] ("${item.id}")`;
+		if (seen.has(item.id)) throw new Error(`Invalid function registry: ${at} repeats an id.`);
+		if (!isContainedRelativePath(item.path)) throw new Error(`Invalid function registry: ${at} has a missing or unsafe path.`);
+		seen.add(item.id);
+		return item;
+	});
+};
+const parseTemplateItem = (text, validate, expectedId) => {
+	const data = JSON.parse(text);
+	assertValid(validate, data, "Invalid template.json");
+	if (expectedId !== void 0 && data.id !== expectedId) throw new Error("Invalid template.json: bad or mismatched id.");
+	const operations = data.operations?.map((operation) => {
+		if (!isContainedRelativePath(operation.source)) throw new Error(`Invalid template.json for "${data.id}": malformed operations.`);
+		return data.layout === "separate" ? operation : {
+			...operation,
+			route: operation.route ?? `/${operation.id}`
+		};
+	});
 	return {
 		id: data.id,
 		...data.provider ? { provider: data.provider } : {},
 		title: data.title,
 		description: data.description,
-		layout,
-		dependencies,
-		environment,
+		layout: data.layout,
+		dependencies: data.dependencies ?? [],
+		environment: data.environment ?? [],
 		...operations ? { operations } : {}
 	};
 };
-const parseRegistryIndex = (text) => {
-	const data = JSON.parse(text);
-	const items = isRecord(data) ? data.templates : void 0;
-	if (!Array.isArray(items)) throw new Error("Invalid function registry: missing \"templates\" array.");
-	if (items.length > MAX_INDEX_ENTRIES) throw new Error(`Invalid function registry: ${items.length} templates, more than the ${MAX_INDEX_ENTRIES} the CLI reads.`);
-	const entries = [];
-	const seen = /* @__PURE__ */ new Set();
-	for (const [index, item] of items.entries()) {
-		const at = `templates[${index}]${isRecord(item) && typeof item.id === "string" ? ` ("${item.id}")` : ""}`;
-		const invalid = (reason) => /* @__PURE__ */ new Error(`Invalid function registry: ${at} ${reason}.`);
-		if (!isRecord(item)) throw invalid("is not an object");
-		if (!matches(item.id, TEMPLATE_ID)) throw invalid("has a bad id");
-		if (seen.has(item.id)) throw invalid("repeats an id");
-		if (!isText(item.title) || !isText(item.description)) throw invalid("is missing a title or description");
-		if (!isOptionalString(item.provider)) throw invalid("has a provider that is not a string");
-		if (typeof item.path !== "string" || !isContainedRelativePath(item.path)) throw invalid("has a missing or unsafe path");
-		if (item.logo !== void 0 && (typeof item.logo !== "string" || !isDisplayLogoUrl(item.logo))) throw invalid("has a logo that is not an https:// URL");
-		seen.add(item.id);
-		entries.push({
-			id: item.id,
-			...item.provider ? { provider: item.provider } : {},
-			title: item.title,
-			description: item.description,
-			path: item.path,
-			...item.logo ? { logo: item.logo } : {}
-		});
-	}
-	return entries;
-};
 //#endregion
-export { MAX_FILE_BYTES, MAX_JSON_BYTES, MAX_TOTAL_BYTES, REGISTRY_CONTRACT, TEMPLATE_LAYOUTS, isContainedRelativePath, parseEnvironment, parseRegistryIndex, parseTemplateItem, parseTemplateOperations, recommendedOperations, resolveOperationById };
+export { MAX_FILE_BYTES, MAX_JSON_BYTES, MAX_TOTAL_BYTES, isContainedRelativePath, parseRegistryIndex, parseTemplateItem, recommendedOperations, resolveOperationById };

package/dist/functions/source.js

@@ -78,6 +78,45 @@ const urlReader = (index) => {
 };
 const templateSourcePaths = (template) => template.operations?.map((operation) => operation.source) ?? ["functions/index.ts"];
 const INDEX_FILE = "registry.json";
+const REGISTRY_SCHEMA_FILE = "schemas/registry.schema.json";
+const TEMPLATE_SCHEMA_FILE = "schemas/template.schema.json";
+let publishedSchemas;
+const compileSchemas = async (registrySchema, templateSchema) => {
+	const [{ default: Ajv2020 }, { default: addFormats }] = await Promise.all([import("ajv/dist/2020.js"), import("ajv-formats")]);
+	const ajv = new Ajv2020({
+		allErrors: true,
+		strict: false
+	});
+	addFormats(ajv);
+	const wrap = (schema) => {
+		const check = ajv.compile(schema);
+		return {
+			check: (data) => check(data),
+			errorsText: () => ajv.errorsText(check.errors)
+		};
+	};
+	return {
+		registry: wrap(registrySchema),
+		template: wrap(templateSchema)
+	};
+};
+const readPublishedSchemas = async (index) => {
+	const read = urlReader(new URL(index));
+	const registrySchema = JSON.parse(await read(REGISTRY_SCHEMA_FILE, MAX_JSON_BYTES));
+	const templateSchema = JSON.parse(await read(TEMPLATE_SCHEMA_FILE, MAX_JSON_BYTES));
+	if (typeof registrySchema !== "object" || registrySchema === null || typeof templateSchema !== "object" || templateSchema === null) throw new RegistryError("Published Function Registry schemas were not JSON objects.");
+	return compileSchemas(registrySchema, templateSchema);
+};
+const loadPublishedSchemas = () => {
+	publishedSchemas ??= readPublishedSchemas(DEFAULT_REGISTRY_URL).catch(async (error) => {
+		if (!(error instanceof RegistryError)) throw error;
+		return readPublishedSchemas(GITHUB_REGISTRY_URL);
+	}).catch((error) => {
+		publishedSchemas = void 0;
+		throw error;
+	});
+	return publishedSchemas;
+};
 const openRegistry = async (source, { primary = DEFAULT_REGISTRY_URL, fallback = GITHUB_REGISTRY_URL, env = process.env } = {}) => {
 	if (source) return openRegistryAt(source);
 	const resolved = resolveRegistrySource(env, process.cwd(), primary);
@@ -106,6 +145,7 @@ const openRegistryAt = async (source, files = source) => {
 	const read = readerFor(source);
 	const readFile = files === source ? read : withStaleIndexHint(readerFor(files), source, files);
 	const indexPath = source.kind === "dir" ? INDEX_FILE : posix.basename(source.url.pathname);
+	const schemas = await loadPublishedSchemas();
 	const parse = (path, text, fn) => {
 		try {
 			return fn(text);
@@ -113,10 +153,10 @@ const openRegistryAt = async (source, files = source) => {
 			throw new RegistryError(`Invalid registry file ${path}: ${error instanceof Error ? error.message : String(error)}`);
 		}
 	};
-	const entries = parse(indexPath, await read(indexPath, MAX_JSON_BYTES), parseRegistryIndex);
+	const entries = parse(indexPath, await read(indexPath, MAX_JSON_BYTES), (text) => parseRegistryIndex(text, schemas.registry));
 	const load = async (entry) => {
 		if (!entry.path || !isContainedRelativePath(entry.path)) throw new RegistryError(`Template "${entry.id}" has no valid path.`);
-		const template = parse(entry.path, await readFile(entry.path, MAX_JSON_BYTES), (text) => parseTemplateItem(text, entry.id));
+		const template = parse(entry.path, await readFile(entry.path, MAX_JSON_BYTES), (text) => parseTemplateItem(text, schemas.template, entry.id));
 		const dir = posix.dirname(entry.path);
 		const sources = /* @__PURE__ */ new Map();
 		let total = 0;

package/dist/index.js

@@ -9,7 +9,7 @@ import { NETWORK_ERROR_MESSAGE, isNetworkError, matchErrorCode } from "./errors.
 import { analyticsMiddleware, closeAnalytics, initAnalyticsClientMiddleware, sendError, takeCommandSuccessExtras, trackCommandSuccess } from "./analytics.js";
 import { AuthRefreshError, defaultClientID } from "./auth.js";
 import { getCliName } from "./utils/cli_name.js";
-import { ensureAuth } from "./commands/auth.js";
+import { c as ensureAuth } from "./_chunks/auth-CIUtXByB.js";
 import { recoverFrom401 } from "./auth_recovery.js";
 import { UsageError, failOnUsageError, isBareParentCommand, showHelp, showUsageErrorHelp } from "./help.js";
 import { lazyCommands, preloadCommand } from "./commands/manifest.js";

package/dist/init/auth.js

@@ -2,10 +2,10 @@ import { isNeonApiError } from "../api.js";
 import { r as defaultDir } from "../_chunks/paths-DMq0Lt7a.js";
 import "../config.js";
 import "../auth.js";
-import { ensureAuth } from "../commands/auth.js";
+import { c as ensureAuth } from "../_chunks/auth-CIUtXByB.js";
 import { recoverFrom401 } from "../auth_recovery.js";
-import { pull } from "../commands/env.js";
-import { setupNeonMcp } from "../commands/mcp.js";
+import { c as pull } from "../_chunks/env-5HS5qQGd.js";
+import { c as setupNeonMcp } from "../_chunks/mcp-Bo-7TKc7.js";
 //#region src/init/auth.ts
 const isUnauthorized = (error) => isNeonApiError(error) && error.status === 401;
 const authenticationFailed = () => /* @__PURE__ */ new Error("Authentication failed.");

package/dist/init/link.js

@@ -2,9 +2,9 @@ import { isNeonApiError } from "../api.js";
 import { r as defaultDir } from "../_chunks/paths-DMq0Lt7a.js";
 import "../config.js";
 import "../auth.js";
-import { ensureAuth } from "../commands/auth.js";
+import { c as ensureAuth } from "../_chunks/auth-CIUtXByB.js";
 import { recoverFrom401 } from "../auth_recovery.js";
-import { runLink } from "../commands/link.js";
+import { s as runLink } from "../_chunks/link-BgtkOBws.js";
 //#region src/init/link.ts
 const isUnauthorized = (error) => isNeonApiError(error) && error.status === 401;
 const authenticationFailed = () => /* @__PURE__ */ new Error("Authentication failed.");

package/dist/init/run.js

@@ -17,15 +17,15 @@ import { FALLBACK_SKILLS_AGENTS, assertNamedAgentTooling, funnelAgentSetup, plan
 import { inferPackageManager, resolvePackageManager } from "../utils/package_manager.js";
 import { CANCELLED_BODY, CLAIMABLE_ACCOUNT_FLAGS, CLAIMABLE_ALREADY_LINKED, CLAIMABLE_MCP_API_KEY, CLAIMABLE_NO_LINK, MCP_API_KEY_NEEDS_AUTH, MCP_SCOPED_NEEDS_PROJECT, NON_TTY_LINK_NEEDS_AUTH, NO_AGENTS_FALLBACK_STATUS, PROGRESS, PROJECT_PINNED_OFFLINE, claimableNext, claimableThenServicesNext, configInitNext, envPullFailedNext, existingConfigNext, installFailedNext, mcpAfterLinkNext, mcpConfigLocationSkipped, mcpConfigLocationUnavailable, mcpKeyFailedNext, namedAgentsUnavailable, newConfigNext, offlinePinNext, skippedLinkNext, unattendedUnauthedNext } from "./copy.js";
 import { agentsRowValue, configRowValue, formatInitDone, headingForKind, printInitBanner, printInitDone, printInitProgress, projectRowValue, shouldPrintInitBanner } from "./chrome.js";
-import { ConfigInstallFailed, initCmd } from "../commands/config.js";
-import { quoteFlagValue, runLink } from "../commands/link.js";
+import { h as initCmd, t as ConfigInstallFailed } from "../_chunks/config-BH_qRHiG.js";
+import { o as quoteFlagValue, s as runLink } from "../_chunks/link-BgtkOBws.js";
 import { runAuthenticatedLink } from "./link.js";
 import { CannotMintApiKeyError } from "../mcp/mint.js";
 import { pullInitEnv } from "./auth.js";
 import { InitCancelled, raceSigint, restoreCursor } from "./cancelled.js";
 import { pickAgentSetupInteractively, pickInitAgentsInteractively, pickInitConfigInteractively, pickInitMcpAuthInteractively, pickInitMcpConfigLocationInteractively, pickInitModeInteractively, pickInitPackageManagerInteractively, pickInitProjectSetupInteractively, pickInitServicesInteractively, pickInitSkillsInteractively } from "./wizard.js";
 import { runToolingSteps } from "./tooling.js";
-import { create } from "../commands/claim.js";
+import { l as create } from "../_chunks/claim-DqAvAvDm.js";
 import { INIT_CONFIG_SERVICES_CONFLICT, configPlanFromResolution, initEnvPullAfterConfig, resolveInitConfigChoice } from "./choices.js";
 import { detectInitEnvironment } from "./detect.js";
 import { createInitFunnel, emitInitStart, finishInitFunnel, initStartProperties } from "./funnel.js";

package/dist/init/tooling.js

@@ -5,9 +5,9 @@ import { MCP_OAUTH_FALLBACK, PROGRESS } from "./copy.js";
 import { CannotMintApiKeyError } from "../mcp/mint.js";
 import { detectAgent } from "./detect_host.js";
 import { AgentSelectionSkipped, canPickAgentsInteractively } from "../utils/agent_picker.js";
-import { mcpInstallError, reportMcpInstall } from "../commands/mcp.js";
-import { installPlugins, pluginsInstallError, reportPluginsInstall } from "../commands/plugins.js";
-import { installSkills, reportSkillsInstall, skillsInstallError } from "../commands/skills.js";
+import { a as mcpInstallError, s as reportMcpInstall } from "../_chunks/mcp-Bo-7TKc7.js";
+import { l as reportPluginsInstall, o as installPlugins, s as pluginsInstallError } from "../_chunks/plugins-DqD7BDO1.js";
+import { c as skillsInstallError, o as installSkills, s as reportSkillsInstall } from "../_chunks/skills-DyiBXKS3.js";
 import { runAuthenticatedMcp } from "./auth.js";
 import { raceSigint } from "./cancelled.js";
 import { pickAgentSetupInteractively } from "./wizard.js";

package/dist/mcp/mint.js

@@ -2,7 +2,7 @@ import { log } from "../log.js";
 import { isNeonApiError } from "../api.js";
 import { getCliName } from "../utils/cli_name.js";
 import { mintedKeyName } from "../profile_keys.js";
-import { orgIdForProject } from "../commands/api_keys.js";
+import { s as orgIdForProject } from "../_chunks/api_keys-CNnnugbQ.js";
 //#region src/mcp/mint.ts
 var CannotMintApiKeyError = class extends Error {
 	constructor() {

package/dist/test_utils/registry.js

@@ -1,6 +1,5 @@
 import { fileURLToPath } from "node:url";
 //#region src/test_utils/registry.ts
-const REGISTRY_SCHEMAS_DIR = fileURLToPath(new URL("../functions/schemas", import.meta.url));
 const FIXTURE_REGISTRY_DIR = fileURLToPath(new URL("../../tests/function-registry", import.meta.url));
 //#endregion
-export { FIXTURE_REGISTRY_DIR, REGISTRY_SCHEMAS_DIR };
+export { FIXTURE_REGISTRY_DIR };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "neon",
-  "version": "8.11.1",
+  "version": "8.11.2",
   "description": "CLI tool for Neon, the cloud backend primitives built around Lakebase Postgres",
   "keywords": [
     "neon",
@@ -47,6 +47,8 @@
     "@hono/node-server": "2.0.4",
     "@segment/analytics-node": "1.3.0",
     "add-mcp": "2.0.0",
+    "ajv": "^8.20.0",
+    "ajv-formats": "^3.0.1",
     "chalk": "5.3.0",
     "chokidar": "5.0.0",
     "cliui": "8.0.1",
@@ -71,9 +73,9 @@
     "yargs": "17.7.2",
     "yoctocolors": "^2.1.2",
     "@neon/config-runtime": "1.10.2",
+    "@neon/config": "1.9.3",
     "@neon/realtime": "0.1.2",
-    "@neon/sdk": "7.4.0",
-    "@neon/config": "1.9.3"
+    "@neon/sdk": "7.4.0"
   },
   "optionalDependencies": {
     "@napi-rs/keyring": "1.3.0",
@@ -109,11 +111,11 @@
     "tsx": "4.22.3",
     "typescript": "^5.9.0",
     "vitest": "^3.0.9",
-    "@neon-internals/cli-core": "0.0.0",
     "@neon-internals/env-core": "0.0.34",
-    "@neon/e2e-harness": "0.0.0",
+    "@neon-internals/cli-core": "0.0.0",
+    "@neon/env": "1.6.4",
     "@neon/functions": "0.11.0",
-    "@neon/env": "1.6.4"
+    "@neon/e2e-harness": "0.0.0"
   },
   "publishConfig": {
     "access": "public",