neon 8.11.4 → 8.12.0

package/README.md

@@ -58,6 +58,13 @@ of them is Homebrew, the warning recommends `brew uninstall neonctl`, which
 leaves `neon` running the other install, such as npm. While duplicates remain, the update notice is held back;
 `NO_UPDATE_NOTIFIER=1` silences both.
 
+Commands also warn once a day when Neon agent skills are behind their source, in this
+directory's `skills-lock.json` or the user-level skills lock (see
+[`neon skills status`](#install-neon-agent-skills-skills)). This warning runs without a
+terminal too, so coding agents see it. It checks GitHub once a day in the background and
+follows the same CI, machine-readable output, standalone binary, and
+`NO_UPDATE_NOTIFIER=1` rules.
+
 ## Connect
 
 Run the following command to authenticate a connection to Neon:
@@ -973,8 +980,14 @@ $ neon skills --global
 $ neon skills update
 $ neon skills update -y
 $ neon skills update --global -y
+
+# Check whether installed Neon skills are behind their source.
+$ neon skills status
+$ neon skills status --global
 ```
 
+`neon skills status` compares each Neon skill in this directory's `skills-lock.json` (or, with `--global`, the user-level skills lock) with the skill folder on its source repository's default branch, and prints `up to date`, `outdated`, or `not found upstream` per skill. It reads GitHub anonymously; set `GITHUB_TOKEN` or `GH_TOKEN` if the GitHub API rate limit is reached. Skills installed through an agent plugin are not in either lock and are not listed.
+
 On a TTY the command asks which agents and which skills, then installs. Detected agents start selected from project-folder markers such as `.cursor`. Default skills start selected. `neon-postgres-agent-platforms` is offered and starts unselected.
 
 `-y` skips those questions and installs the default skills into detected agents: project-folder markers such as `.cursor`, else the agent driving the CLI. `--agent` / `-a` names coding agents and skips the agent picker. `--skill` / `-s` names specific skills and skips the skill picker; it does not select agents. `--global -y` uses installed apps, else the host CLI agent. Without a TTY, pass `-y`, or `--skill <name>` (add `--agent <name>` to name agents). If `-y` finds no agent, it exits: pass `--agent <name>`, run from a supported agent, or omit `-y` in a terminal to pick.

package/dist/_chunks/{checkout-CXIOydqZ.js → checkout-BGvlLc43.js}

@@ -11,9 +11,9 @@ import { looksLikeBranchId } from "../utils/formats.js";
 import { fillSingleProject, listAllProjectBranches } from "../utils/enrichers.js";
 import { buildCheckoutEvent, readGitContext } from "../utils/git.js";
 import { buildHookBranch, loadHookConfig, resolveHookEnv, runCheckoutAfterHook, runCheckoutBeforeHook, runCreateAfterHook, runCreateBeforeHook } from "../utils/hooks.js";
-import { n as autoPullEnvAfterPin } from "./env-5HS5qQGd.js";
-import { a as applyPolicyOnCreate, f as envFlag, l as createBranchFromPolicyOnCheckout } from "./config-BH_qRHiG.js";
-import { i as handler$1 } from "./link-BgtkOBws.js";
+import { n as autoPullEnvAfterPin } from "./env-uVRY4xah.js";
+import { a as applyPolicyOnCreate, f as envFlag, l as createBranchFromPolicyOnCheckout } from "./config-BnwcGpbq.js";
+import { i as handler$1 } from "./link-DOM84hYj.js";
 import chalk from "chalk";
 import prompts from "prompts";
 //#region src/commands/checkout.ts

package/dist/_chunks/{claim-DqAvAvDm.js → claim-DqzLXZMN.js}

@@ -12,7 +12,7 @@ import { projectConfigPath } from "../project.js";
 import { resolveEnvFilePath } from "../env_file.js";
 import { writer } from "../writer.js";
 import { noPassthrough } from "../utils/flags.js";
-import { c as pull } from "./env-5HS5qQGd.js";
+import { c as pull } from "./env-uVRY4xah.js";
 import { existsSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
 import open from "open";
 import prompts from "prompts";

package/dist/_chunks/{config-BH_qRHiG.js → config-BnwcGpbq.js}

@@ -23,7 +23,7 @@ import { readGitContext } from "../utils/git.js";
 import { resolveHookEnv, runDeployAfterHook, runDeployBeforeHook } from "../utils/hooks.js";
 import { pickServicesInteractively } from "../utils/service_picker.js";
 import { zipBundle } from "../utils/zip.js";
-import { n as autoPullEnvAfterPin } from "./env-5HS5qQGd.js";
+import { n as autoPullEnvAfterPin } from "./env-uVRY4xah.js";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join, relative, resolve } from "node:path";
 import chalk from "chalk";

package/dist/_chunks/{deploy-D7B0Xfjg.js → deploy-BCVcDR1O.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { fillSingleProject } from "../utils/enrichers.js";
-import { f as envFlag, i as applyFlags, p as envPullFlag, r as applyCmd } from "./config-BH_qRHiG.js";
+import { f as envFlag, i as applyFlags, p as envPullFlag, r as applyCmd } from "./config-BnwcGpbq.js";
 import { DEPLOY_COMMANDS_EPILOGUE } from "../commands/deploy_help.js";
 //#region src/commands/deploy.ts
 var deploy_exports = /* @__PURE__ */ __exportAll({

package/dist/_chunks/{dev-CSvxAecE.js → dev-mrJKMt2R.js}

@@ -4,12 +4,12 @@ import { isClaimableEnvTarget } from "../claimable/state.js";
 import { getCliName } from "../utils/cli_name.js";
 import { defaultDevEnvFiles, readEnvFile, resolveEnvFilePath } from "../env_file.js";
 import { l as functionBaseUrlKey } from "./env-BpP3Dqpe.js";
-import { branchIdResolve } from "../utils/enrichers.js";
-import { bundleEntry } from "../utils/esbuild.js";
 import { a as resolveDevEnv } from "./env-BNm69Qh8.js";
-import { f as envFlag } from "./config-BH_qRHiG.js";
 import { findConfigFunctionBySource, resolveFunctionsFromConfig } from "../dev/functions.js";
 import { resolveWatchInputs } from "../dev/inputs.js";
+import { branchIdResolve } from "../utils/enrichers.js";
+import { bundleEntry } from "../utils/esbuild.js";
+import { f as envFlag } from "./config-BnwcGpbq.js";
 import { existsSync, mkdirSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { basename, dirname, join, relative, resolve } from "node:path";
 import { fileURLToPath } from "node:url";

package/dist/_chunks/{git-H32TNt6M.js → git-pN4kMH0d.js}

@@ -5,8 +5,8 @@ import { CONTEXT_FILE, contextBranch, gitBranchMap, gitBranchMapping, isUnfollow
 import { writer } from "../writer.js";
 import { neonSafeBranchName } from "../utils/branch_name.js";
 import { currentGitBranch, gitPull, gitRepoRoot, hasUpstream, installPostCheckoutHook, isGitRepo, isManagedHook, localGitBranches, postCheckoutHookPath, readGitContext, removePostCheckoutHook } from "../utils/git.js";
-import { o as quoteFlagValue } from "./link-BgtkOBws.js";
-import { o as handler$1 } from "./checkout-CXIOydqZ.js";
+import { o as quoteFlagValue } from "./link-DOM84hYj.js";
+import { o as handler$1 } from "./checkout-BGvlLc43.js";
 import { existsSync } from "node:fs";
 import { join } from "node:path";
 import chalk from "chalk";

package/dist/_chunks/{link-BgtkOBws.js → link-DOM84hYj.js}

@@ -13,8 +13,8 @@ import { writer } from "../writer.js";
 import { createBranch, pickBranchInteractively } from "../utils/branch_picker.js";
 import { looksLikeBranchId } from "../utils/formats.js";
 import { listAllProjectBranches } from "../utils/enrichers.js";
-import { n as autoPullEnvAfterPin } from "./env-5HS5qQGd.js";
-import { h as initCmd } from "./config-BH_qRHiG.js";
+import { n as autoPullEnvAfterPin } from "./env-uVRY4xah.js";
+import { h as initCmd } from "./config-BnwcGpbq.js";
 import { formatLinkSummary } from "../commands/link_output.js";
 import { r as REGIONS } from "./projects-BwI2Uo0z.js";
 import prompts from "prompts";

package/dist/_chunks/{skills-DyiBXKS3.js → skills-BP6pIm7O.js}

@@ -10,9 +10,10 @@ import { noPassthrough } from "../utils/flags.js";
 import { AGENT_SKILLS_SKIP_MESSAGE } from "../init/copy.js";
 import { canPickAgentsInteractively, skippableAgentPicker } from "../utils/agent_picker.js";
 import { skillsHelpValues, skillsYesHelp } from "../skills/catalog.js";
+import { lockPath, neonSkillsUpdateCommand, readLockedSkills, refreshSkillsCheckCache, scopeLabel, skillsCheckCachePath, skillsStatusRows } from "../skills/freshness.js";
 import { confirmSkillsUpdate } from "../skills/wizard.js";
 import { assertSkillsCanRun, resolveSkillsPlan } from "../skills/plan.js";
-import { assertSkillsNode, neonSkillsRetryCommand, neonSkillsUpdateRetryCommand, runSkillsCli, skillsAddArgs, skillsMetadata, skillsUpdateArgs, skillsUpdateDetail, skillsUpdateHadNothing } from "../skills/run.js";
+import { assertSkillsNode, neonSkillsRetryCommand, runSkillsCli, skillsAddArgs, skillsMetadata, skillsUpdateArgs, skillsUpdateDetail, skillsUpdateHadNothing } from "../skills/run.js";
 //#region src/commands/skills.ts
 var skills_exports = /* @__PURE__ */ __exportAll({
 	aliases: () => aliases,
@@ -24,7 +25,6 @@ var skills_exports = /* @__PURE__ */ __exportAll({
 	reportSkillsInstall: () => reportSkillsInstall,
 	skillsInstallError: () => skillsInstallError
 });
-const scopeLabel = (scope) => scope === "project" ? "this directory" : "user-level";
 const coerceAgents = (value) => {
 	if (value === void 0) return [];
 	const list = Array.isArray(value) ? value : [value];
@@ -60,7 +60,17 @@ const builder = (argv) => argv.usage("$0 skills [command] [options]").command("u
 	const skills = args.skill;
 	if (Array.isArray(skills) && skills.length > 0) throw new Error("neon skills update does not take --skill. It refreshes every installed skill in this directory (or --global).");
 	return true;
-}), (args) => updateHandler(args)).options({
+}), (args) => updateHandler(args)).command("status", "Check whether installed Neon skills match their source", (yargs) => yargs.usage("$0 skills status [options]").options({ global: {
+	type: "boolean",
+	default: false,
+	describe: "Check user-level skills (skills CLI -g). Default is this directory"
+} }).example("$0 skills status", "Neon skills in this directory's skills-lock.json").example("$0 skills status --global", "User-level Neon skills").strict().hide("agent").hide("skill").hide("yes").check((args) => {
+	noPassthrough("skills status")(args);
+	const agents = args.agent;
+	const skills = args.skill;
+	if (Array.isArray(agents) && agents.length > 0 || Array.isArray(skills) && skills.length > 0) throw new Error("neon skills status does not take --agent or --skill. It checks every Neon skill in this directory (or --global).");
+	return true;
+}), (args) => statusHandler(args)).options({
 	yes: {
 		alias: "y",
 		type: "boolean",
@@ -249,7 +259,28 @@ const updateHandler = async (props) => {
 		title: "Skills"
 	});
 	out.end();
-	if (failure !== void 0) throw new Error(failure.includes("needs npx (Node.js)") || failure.includes("needs Node.js") ? failure : `${failure}\nRetry with: ${neonSkillsUpdateRetryCommand(scope === "global")}`);
+	if (failure !== void 0) throw new Error(failure.includes("needs npx (Node.js)") || failure.includes("needs Node.js") ? failure : `${failure}\nRetry with: ${neonSkillsUpdateCommand(scope)}`);
+};
+const statusHandler = async (props) => {
+	const scope = props.global === true ? "global" : "project";
+	const skills = readLockedSkills(lockPath(scope, process.cwd()), scope);
+	const folders = skills.length === 0 ? {} : await refreshSkillsCheckCache({
+		cachePath: skillsCheckCachePath(props.configDir),
+		skills
+	});
+	const rows = skillsStatusRows(skills, folders);
+	const out = writer(props);
+	out.write(rows, {
+		fields: [
+			"scope",
+			"skill",
+			"status"
+		],
+		title: "Skills",
+		emptyMessage: scope === "project" ? "No Neon skills in this directory's skills-lock.json. For user-level skills, run: neon skills status --global" : "No user-level Neon skills in the skills CLI lock."
+	});
+	out.end();
+	if (rows.some((row) => row.status === "outdated")) log.info("Update them: %s", neonSkillsUpdateCommand(scope));
 };
 //#endregion
 export { handler as a, skillsInstallError as c, describe as i, skills_exports as l, builder as n, installSkills as o, command as r, reportSkillsInstall as s, aliases as t };

package/dist/_chunks/{status-DV8Z2kw3.js → status-DoNjIbKf.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { fillSingleProject } from "../utils/enrichers.js";
-import { y as status } from "./config-BH_qRHiG.js";
+import { y as status } from "./config-BnwcGpbq.js";
 //#region src/commands/status.ts
 var status_exports = /* @__PURE__ */ __exportAll({
 	builder: () => builder,

package/dist/commands/checkout.js

@@ -1 +1 @@
-export { t as builder, r as command, i as describe, a as formatCheckoutPolicyFailure, o as handler } from "../_chunks/checkout-CXIOydqZ.js";
+export { t as builder, r as command, i as describe, a as formatCheckoutPolicyFailure, o as handler } from "../_chunks/checkout-BGvlLc43.js";

package/dist/commands/claim.js

@@ -1 +1 @@
-export { t as CLAIM_CREATE_FIELDS, n as CLAIM_LIST_FIELDS, r as aliases, i as builder, a as claimCreateFields, s as claimableCapabilities, c as command, l as create, u as describe, d as handler } from "../_chunks/claim-DqAvAvDm.js";
+export { t as CLAIM_CREATE_FIELDS, n as CLAIM_LIST_FIELDS, r as aliases, i as builder, a as claimCreateFields, s as claimableCapabilities, c as command, l as create, u as describe, d as handler } from "../_chunks/claim-DqzLXZMN.js";

package/dist/commands/config.js

@@ -1 +1 @@
-export { t as ConfigInstallFailed, n as addCmd, r as applyCmd, i as applyFlags, a as applyPolicyOnCreate, o as builder, s as command, l as createBranchFromPolicyOnCheckout, u as describe, d as ensureConfigPackages, f as envFlag, p as envPullFlag, m as handler, h as initCmd, g as installCommandFrom, _ as missingDependencies, v as planCmd, y as status } from "../_chunks/config-BH_qRHiG.js";
+export { t as ConfigInstallFailed, n as addCmd, r as applyCmd, i as applyFlags, a as applyPolicyOnCreate, o as builder, s as command, l as createBranchFromPolicyOnCheckout, u as describe, d as ensureConfigPackages, f as envFlag, p as envPullFlag, m as handler, h as initCmd, g as installCommandFrom, _ as missingDependencies, v as planCmd, y as status } from "../_chunks/config-BnwcGpbq.js";

package/dist/commands/deploy.js

@@ -1 +1 @@
-export { t as builder, n as command, i as describe, a as handler } from "../_chunks/deploy-D7B0Xfjg.js";
+export { t as builder, n as command, i as describe, a as handler } from "../_chunks/deploy-BCVcDR1O.js";

package/dist/commands/dev.js

@@ -1 +1 @@
-export { t as builder, n as captureShellEnv, r as command, i as describe, a as devBundleDir, o as devEnvContext, c as diffUnits, l as formatEnvFiles, u as formatEnvSummary, d as handler, f as loadDevEnvFiles, p as localFunctionUrlEnv, m as planFunctionsToUnits, h as reportDevCredential, g as sourceFunctionUrlOverlay } from "../_chunks/dev-CSvxAecE.js";
+export { t as builder, n as captureShellEnv, r as command, i as describe, a as devBundleDir, o as devEnvContext, c as diffUnits, l as formatEnvFiles, u as formatEnvSummary, d as handler, f as loadDevEnvFiles, p as localFunctionUrlEnv, m as planFunctionsToUnits, h as reportDevCredential, g as sourceFunctionUrlOverlay } from "../_chunks/dev-mrJKMt2R.js";

package/dist/commands/env.js

@@ -1 +1 @@
-export { t as ENV_PULL_SKIPPED_HINT, n as autoPullEnvAfterPin, r as builder, i as command, a as describe, s as handler, c as pull } from "../_chunks/env-5HS5qQGd.js";
+export { t as ENV_PULL_SKIPPED_HINT, n as autoPullEnvAfterPin, r as builder, i as command, a as describe, s as handler, c as pull } from "../_chunks/env-uVRY4xah.js";

package/dist/commands/functions_new.js

@@ -8,7 +8,7 @@ import { writer } from "../writer.js";
 import { formatInitDone, printInitDone } from "../init/chrome.js";
 import { FUNCTION_SLUG_PATTERN, deriveFunctionSlug } from "../utils/function_slug.js";
 import { displayPath } from "./env_output.js";
-import { _ as missingDependencies, d as ensureConfigPackages, g as installCommandFrom } from "../_chunks/config-BH_qRHiG.js";
+import { _ as missingDependencies, d as ensureConfigPackages, g as installCommandFrom } from "../_chunks/config-BnwcGpbq.js";
 import { recommendedOperations } from "../functions/registry.js";
 import { collidingFiles, operationsFromFlags, planConfigRegistration, planEnvExample, planScaffold, writeScaffold } from "../functions/scaffold.js";
 import { describeRegistrySource, openRegistry } from "../functions/source.js";

package/dist/commands/git.js

@@ -1 +1 @@
-export { t as aliases, n as builder, r as cleanup, i as command, a as describe, s as handler, c as install, l as partitionBranchesToPrune, u as status, d as sync, f as uninstall } from "../_chunks/git-H32TNt6M.js";
+export { t as aliases, n as builder, r as cleanup, i as command, a as describe, s as handler, c as install, l as partitionBranchesToPrune, u as status, d as sync, f as uninstall } from "../_chunks/git-pN4kMH0d.js";

package/dist/commands/index.js

@@ -2,29 +2,29 @@ import { r as auth_exports } from "../_chunks/auth-CIUtXByB.js";
 import { t as api_exports } from "../_chunks/api-GbEaBZJ5.js";
 import { n as api_keys_exports } from "../_chunks/api_keys-CNnnugbQ.js";
 import { n as ask_exports } from "../_chunks/ask-DVwy0eUL.js";
-import { o as env_exports } from "../_chunks/env-5HS5qQGd.js";
-import { c as config_exports } from "../_chunks/config-BH_qRHiG.js";
+import { o as env_exports } from "../_chunks/env-uVRY4xah.js";
+import { c as config_exports } from "../_chunks/config-BnwcGpbq.js";
 import { u as projects_exports } from "../_chunks/projects-BwI2Uo0z.js";
-import { a as link_exports } from "../_chunks/link-BgtkOBws.js";
+import { a as link_exports } from "../_chunks/link-DOM84hYj.js";
 import { o as mcp_exports } from "../_chunks/mcp-Bo-7TKc7.js";
 import { c as plugins_exports } from "../_chunks/plugins-DqD7BDO1.js";
-import { l as skills_exports } from "../_chunks/skills-DyiBXKS3.js";
+import { l as skills_exports } from "../_chunks/skills-BP6pIm7O.js";
 import { t as bootstrap_exports } from "../_chunks/bootstrap-wPZWa1sT.js";
 import { r as branches_exports } from "../_chunks/branches-BNa1xX1L.js";
 import { n as bucket_exports } from "../_chunks/bucket-BCdryTkD.js";
-import { n as checkout_exports } from "../_chunks/checkout-CXIOydqZ.js";
-import { o as claim_exports } from "../_chunks/claim-DqAvAvDm.js";
+import { n as checkout_exports } from "../_chunks/checkout-BGvlLc43.js";
+import { o as claim_exports } from "../_chunks/claim-DqzLXZMN.js";
 import { a as connection_string_exports } from "../_chunks/connection_string-DB4awPzZ.js";
 import { a as credentials_exports } from "../_chunks/credentials-BSjE9fRR.js";
 import { r as data_api_exports } from "../_chunks/data_api-Djxj5ZQD.js";
 import { o as databases_exports } from "../_chunks/databases-Dok4wru7.js";
-import { r as deploy_exports } from "../_chunks/deploy-D7B0Xfjg.js";
-import { s as dev_exports } from "../_chunks/dev-CSvxAecE.js";
+import { r as deploy_exports } from "../_chunks/deploy-BCVcDR1O.js";
+import { s as dev_exports } from "../_chunks/dev-mrJKMt2R.js";
 import { i as diff_exports } from "../_chunks/diff-DhxxbdQE.js";
 import { c as docs_exports } from "../_chunks/docs-CrVybkTP.js";
 import { o as feedback_exports } from "../_chunks/feedback-CMayyTa8.js";
 import { o as functions_exports } from "../_chunks/functions-Q0zuvtnk.js";
-import { o as git_exports } from "../_chunks/git-H32TNt6M.js";
+import { o as git_exports } from "../_chunks/git-pN4kMH0d.js";
 import { a as init_exports } from "../_chunks/init-BkA6RilG.js";
 import { o as inspect_exports } from "../_chunks/inspect-g0wekylj.js";
 import { a as ip_allow_exports } from "../_chunks/ip_allow-5lLFvIuE.js";
@@ -39,7 +39,7 @@ import { s as realtime_exports } from "../_chunks/realtime-BRqIyGR-.js";
 import { l as roles_exports } from "../_chunks/roles-B4w3YT_7.js";
 import { a as set_context_exports } from "../_chunks/set_context-DbrwoImy.js";
 import { s as snapshots_exports } from "../_chunks/snapshots-RJBzW8GM.js";
-import { a as status_exports } from "../_chunks/status-DV8Z2kw3.js";
+import { a as status_exports } from "../_chunks/status-DoNjIbKf.js";
 import { d as triggers_exports } from "../_chunks/triggers-BrRo1z4b.js";
 import { s as user_exports } from "../_chunks/user-dlOGXbX9.js";
 import { i as vpc_endpoints_exports } from "../_chunks/vpc_endpoints-CNb0YfMo.js";

package/dist/commands/link.js

@@ -1 +1 @@
-export { t as builder, n as command, r as describe, i as handler, o as quoteFlagValue, s as runLink, c as shouldOfferConfigInit } from "../_chunks/link-BgtkOBws.js";
+export { t as builder, n as command, r as describe, i as handler, o as quoteFlagValue, s as runLink, c as shouldOfferConfigInit } from "../_chunks/link-DOM84hYj.js";

package/dist/commands/skills.js

@@ -1 +1 @@
-export { t as aliases, n as builder, r as command, i as describe, a as handler, o as installSkills, s as reportSkillsInstall, c as skillsInstallError } from "../_chunks/skills-DyiBXKS3.js";
+export { t as aliases, n as builder, r as command, i as describe, a as handler, o as installSkills, s as reportSkillsInstall, c as skillsInstallError } from "../_chunks/skills-BP6pIm7O.js";

package/dist/commands/status.js

@@ -1 +1 @@
-export { t as builder, n as command, r as describe, i as handler } from "../_chunks/status-DV8Z2kw3.js";
+export { t as builder, n as command, r as describe, i as handler } from "../_chunks/status-DoNjIbKf.js";

package/dist/commands/subscribe.js

@@ -1,6 +1,6 @@
 import { writer } from "../writer.js";
-import { branchIdFromProps } from "../utils/enrichers.js";
 import { o as resolveNeonEnvVars } from "../_chunks/env-BNm69Qh8.js";
+import { branchIdFromProps } from "../utils/enrichers.js";
 import YAML from "yaml";
 //#region src/commands/subscribe.ts
 const builder = (argv) => argv.usage("$0 realtime subscribe \"<query>\" [options]").positional("query", {

package/dist/index.js

@@ -15,7 +15,7 @@ import { UsageError, failOnUsageError, isBareParentCommand, showHelp, showUsageE
 import { lazyCommands, preloadCommand } from "./commands/manifest.js";
 import { rewriteUnknownAgentArg } from "./init/plan.js";
 import { recoverFromSSO } from "./sso_recovery.js";
-import { notifyIfUpdateAvailable } from "./update_notifier.js";
+import { notifyIfUpdateAvailable, shouldRunSkillsNotifier } from "./update_notifier.js";
 import { fillInArgs, resolveApiKeyFromEnv } from "./utils/middlewares.js";
 import { collapseRepeatedFlags, declaredOptions } from "./utils/repeated_flags.js";
 import { stagingFeaturesEnabledForArgv } from "./utils/staging.js";
@@ -214,13 +214,23 @@ async function handleError(msg, err, canRetry) {
 			process.exit(0);
 		}
 		await closeAnalytics();
-		notifyIfUpdateAvailable({
+		const notifier = {
 			commandPath: args._.map(String),
 			configDir: typeof args.configDir === "string" ? args.configDir : defaultDir,
 			currentBranch: Boolean(args.currentBranch),
-			currentVersion: pkg_default.version,
 			output: typeof args.output === "string" ? args.output : "table"
+		};
+		notifyIfUpdateAvailable({
+			...notifier,
+			currentVersion: pkg_default.version
 		});
+		if (shouldRunSkillsNotifier(notifier)) {
+			const { notifyIfSkillsOutdated } = await import("./skills/freshness.js");
+			notifyIfSkillsOutdated({
+				configDir: notifier.configDir,
+				cwd: process.cwd()
+			});
+		}
 		break;
 	} catch (err) {
 		takeCommandSuccessExtras();

package/dist/init/auth.js

@@ -4,7 +4,7 @@ import "../config.js";
 import "../auth.js";
 import { c as ensureAuth } from "../_chunks/auth-CIUtXByB.js";
 import { recoverFrom401 } from "../auth_recovery.js";
-import { c as pull } from "../_chunks/env-5HS5qQGd.js";
+import { c as pull } from "../_chunks/env-uVRY4xah.js";
 import { c as setupNeonMcp } from "../_chunks/mcp-Bo-7TKc7.js";
 //#region src/init/auth.ts
 const isUnauthorized = (error) => isNeonApiError(error) && error.status === 401;

package/dist/init/link.js

@@ -4,7 +4,7 @@ import "../config.js";
 import "../auth.js";
 import { c as ensureAuth } from "../_chunks/auth-CIUtXByB.js";
 import { recoverFrom401 } from "../auth_recovery.js";
-import { s as runLink } from "../_chunks/link-BgtkOBws.js";
+import { s as runLink } from "../_chunks/link-DOM84hYj.js";
 //#region src/init/link.ts
 const isUnauthorized = (error) => isNeonApiError(error) && error.status === 401;
 const authenticationFailed = () => /* @__PURE__ */ new Error("Authentication failed.");

package/dist/init/run.js

@@ -17,15 +17,15 @@ import { FALLBACK_SKILLS_AGENTS, assertNamedAgentTooling, funnelAgentSetup, plan
 import { inferPackageManager, resolvePackageManager } from "../utils/package_manager.js";
 import { CANCELLED_BODY, CLAIMABLE_ACCOUNT_FLAGS, CLAIMABLE_ALREADY_LINKED, CLAIMABLE_MCP_API_KEY, CLAIMABLE_NO_LINK, MCP_API_KEY_NEEDS_AUTH, MCP_SCOPED_NEEDS_PROJECT, NON_TTY_LINK_NEEDS_AUTH, NO_AGENTS_FALLBACK_STATUS, PROGRESS, PROJECT_PINNED_OFFLINE, claimableNext, claimableThenServicesNext, configInitNext, envPullFailedNext, existingConfigNext, installFailedNext, mcpAfterLinkNext, mcpConfigLocationSkipped, mcpConfigLocationUnavailable, mcpKeyFailedNext, namedAgentsUnavailable, newConfigNext, offlinePinNext, skippedLinkNext, unattendedUnauthedNext } from "./copy.js";
 import { agentsRowValue, configRowValue, formatInitDone, headingForKind, printInitBanner, printInitDone, printInitProgress, projectRowValue, shouldPrintInitBanner } from "./chrome.js";
-import { h as initCmd, t as ConfigInstallFailed } from "../_chunks/config-BH_qRHiG.js";
-import { o as quoteFlagValue, s as runLink } from "../_chunks/link-BgtkOBws.js";
+import { h as initCmd, t as ConfigInstallFailed } from "../_chunks/config-BnwcGpbq.js";
+import { o as quoteFlagValue, s as runLink } from "../_chunks/link-DOM84hYj.js";
 import { runAuthenticatedLink } from "./link.js";
 import { CannotMintApiKeyError } from "../mcp/mint.js";
 import { pullInitEnv } from "./auth.js";
 import { InitCancelled, raceSigint, restoreCursor } from "./cancelled.js";
 import { pickAgentSetupInteractively, pickInitAgentsInteractively, pickInitConfigInteractively, pickInitMcpAuthInteractively, pickInitMcpConfigLocationInteractively, pickInitModeInteractively, pickInitPackageManagerInteractively, pickInitProjectSetupInteractively, pickInitServicesInteractively, pickInitSkillsInteractively } from "./wizard.js";
 import { runToolingSteps } from "./tooling.js";
-import { l as create } from "../_chunks/claim-DqAvAvDm.js";
+import { l as create } from "../_chunks/claim-DqzLXZMN.js";
 import { INIT_CONFIG_SERVICES_CONFLICT, configPlanFromResolution, initEnvPullAfterConfig, resolveInitConfigChoice } from "./choices.js";
 import { detectInitEnvironment } from "./detect.js";
 import { createInitFunnel, emitInitStart, finishInitFunnel, initStartProperties } from "./funnel.js";

package/dist/init/tooling.js

@@ -7,7 +7,7 @@ import { detectAgent } from "./detect_host.js";
 import { AgentSelectionSkipped, canPickAgentsInteractively } from "../utils/agent_picker.js";
 import { a as mcpInstallError, s as reportMcpInstall } from "../_chunks/mcp-Bo-7TKc7.js";
 import { l as reportPluginsInstall, o as installPlugins, s as pluginsInstallError } from "../_chunks/plugins-DqD7BDO1.js";
-import { c as skillsInstallError, o as installSkills, s as reportSkillsInstall } from "../_chunks/skills-DyiBXKS3.js";
+import { c as skillsInstallError, o as installSkills, s as reportSkillsInstall } from "../_chunks/skills-BP6pIm7O.js";
 import { runAuthenticatedMcp } from "./auth.js";
 import { raceSigint } from "./cancelled.js";
 import { pickAgentSetupInteractively } from "./wizard.js";

package/dist/skills/check_worker.js

@@ -0,0 +1,17 @@
+import { globalLockPath, projectLockPath, readLockedSkills, refreshSkillsCheckCache } from "./freshness.js";
+import { pathToFileURL } from "node:url";
+//#region src/skills/check_worker.ts
+const run = async () => {
+	const [cachePath, cwd] = process.argv.slice(2);
+	if (cachePath === void 0 || cwd === void 0) return;
+	try {
+		await refreshSkillsCheckCache({
+			cachePath,
+			skills: [...readLockedSkills(globalLockPath(), "global"), ...readLockedSkills(projectLockPath(cwd), "project")]
+		});
+	} catch {}
+};
+const entry = process.argv[1];
+if (entry !== void 0 && import.meta.url === pathToFileURL(entry).href) run();
+//#endregion
+export {};

package/dist/skills/freshness.js

@@ -0,0 +1,349 @@
+import { log } from "../log.js";
+import { writeJsonFile } from "../utils/json_file.js";
+import { showNotice } from "../notices.js";
+import { AGENT_SKILLS_SOURCE, PLATFORMS_SKILLS_SOURCE } from "./catalog.js";
+import { closeSync, constants, existsSync, fstatSync, openSync, readFileSync, statSync } from "node:fs";
+import { join } from "node:path";
+import { createHash } from "node:crypto";
+import { fileURLToPath } from "node:url";
+import { homedir } from "node:os";
+import { spawn } from "node:child_process";
+//#region src/skills/freshness.ts
+const DAY_MS = 864e5;
+const CACHE_FILE = "skills-check.json";
+const FETCH_TIMEOUT_MS = 1e4;
+const NEON_SOURCES = /* @__PURE__ */ new Set([AGENT_SKILLS_SOURCE, PLATFORMS_SKILLS_SOURCE]);
+const scopeLabel = (scope) => scope === "project" ? "this directory" : "user-level";
+const neonSkillsUpdateCommand = (scope) => scope === "global" ? "neon skills update --global -y" : "neon skills update -y";
+/** Where the skills CLI keeps its user-level lock. */
+const globalLockPath = (env = process.env) => env.XDG_STATE_HOME ? join(env.XDG_STATE_HOME, "skills", ".skill-lock.json") : join(homedir(), ".agents", ".skill-lock.json");
+const projectLockPath = (cwd) => join(cwd, "skills-lock.json");
+const lockPath = (scope, cwd) => scope === "global" ? globalLockPath() : projectLockPath(cwd);
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+/** The Agent Skills name rule. A lock is repository content, and names reach the terminal. */
+const SKILL_NAME = /^[a-z0-9][a-z0-9-]{0,63}$/;
+const skillFolder = (skillPath) => skillPath.replace(/\\/g, "/").replace(/\/?SKILL\.md$/i, "");
+/**
+* Entries pinned to a `ref` are left out: `neon skills` never pins one, and a pinned skill
+* tracks that ref rather than the repository's default branch.
+*
+* The global lock's `skillFolderHash` is usually a tree SHA, but the skills CLI stores a
+* content SHA-256 there when it installed from a Git clone; it tells them apart by length.
+*/
+const parseSkillsLock = (raw, scope) => {
+	const value = JSON.parse(raw);
+	if (!isRecord(value) || !isRecord(value.skills)) return [];
+	const field = scope === "global" ? "skillFolderHash" : "computedHash";
+	const skills = [];
+	for (const [skill, entry] of Object.entries(value.skills)) {
+		if (!isRecord(entry)) continue;
+		const { source, skillPath, ref } = entry;
+		const hash = entry[field];
+		if (!SKILL_NAME.test(skill) || typeof source !== "string" || !NEON_SOURCES.has(source) || ref !== void 0 || typeof skillPath !== "string" || typeof hash !== "string" || hash === "") continue;
+		const folder = skillFolder(skillPath);
+		if (folder === "") continue;
+		const hashKind = scope === "global" && /^[0-9a-f]{40}$/i.test(hash) ? "tree" : "content";
+		skills.push({
+			scope,
+			skill,
+			source,
+			folder,
+			hash,
+			hashKind
+		});
+	}
+	return skills;
+};
+const readLockedSkills = (path, scope) => {
+	if (!existsSync(path)) return [];
+	const raw = readLockFile(path);
+	try {
+		return parseSkillsLock(raw, scope);
+	} catch {
+		throw new Error(`${path} is not valid JSON.`);
+	}
+};
+const MAX_LOCK_BYTES = 1048576;
+/**
+* A project lock is repository content: a FIFO would block the open and `/dev/zero` the read,
+* on every command run in that directory.
+*/
+const readLockFile = (path) => {
+	const fd = openSync(path, constants.O_RDONLY | (constants.O_NONBLOCK ?? 0));
+	try {
+		const stat = fstatSync(fd);
+		if (!stat.isFile()) throw new Error(`${path} is not a regular file.`);
+		if (stat.size > MAX_LOCK_BYTES) throw new Error(`${path} is larger than ${MAX_LOCK_BYTES} bytes.`);
+		return readFileSync(fd, "utf8");
+	} finally {
+		closeSync(fd);
+	}
+};
+const folderKey = ({ source, folder }) => `${source}:${folder}`;
+/** `undefined` when the remote side has not been fetched yet. */
+const skillStatus = (skill, remote) => {
+	if (remote?.missing === true) return "not found upstream";
+	const latest = skill.hashKind === "tree" ? remote?.tree : remote?.content;
+	if (latest === void 0) return void 0;
+	return latest === skill.hash ? "up to date" : "outdated";
+};
+const parseRemoteFolder = (value) => {
+	if (!isRecord(value)) return void 0;
+	const { tree, content, missing, pending } = value;
+	if (tree !== void 0 && typeof tree !== "string" || content !== void 0 && typeof content !== "string" || missing !== void 0 && missing !== true || pending !== void 0 && pending !== true) return;
+	return {
+		...tree === void 0 ? {} : { tree },
+		...content === void 0 ? {} : { content },
+		...missing === void 0 ? {} : { missing },
+		...pending === void 0 ? {} : { pending }
+	};
+};
+const parseSkillsCheckCache = (raw) => {
+	try {
+		const value = JSON.parse(raw);
+		if (!isRecord(value) || typeof value.checkedAt !== "number" || !Number.isFinite(value.checkedAt) || !isRecord(value.folders)) return;
+		const folders = {};
+		for (const [key, entry] of Object.entries(value.folders)) {
+			const folder = parseRemoteFolder(entry);
+			if (folder !== void 0) folders[key] = folder;
+		}
+		const { attemptedAt } = value;
+		return {
+			checkedAt: value.checkedAt,
+			...typeof attemptedAt === "number" && Number.isFinite(attemptedAt) ? { attemptedAt } : {},
+			folders
+		};
+	} catch {
+		return;
+	}
+};
+const readSkillsCheckCache = (cachePath) => {
+	try {
+		return parseSkillsCheckCache(readFileSync(cachePath, "utf8"));
+	} catch {
+		return;
+	}
+};
+const skillsCheckCachePath = (configDir) => join(configDir, CACHE_FILE);
+/**
+* The digest the skills CLI writes to `computedHash`: every file's folder-relative path and
+* then its bytes, in `localeCompare` order of path.
+*/
+const skillContentHash = (files) => {
+	const hash = createHash("sha256");
+	for (const file of [...files].sort((a, b) => a.path.localeCompare(b.path))) {
+		hash.update(file.path);
+		hash.update(file.bytes);
+	}
+	return hash.digest("hex");
+};
+const gitBlobSha = (bytes) => createHash("sha1").update(`blob ${bytes.byteLength}\0`).update(bytes).digest("hex");
+const isTreeEntry = (value) => isRecord(value) && typeof value.path === "string" && typeof value.mode === "string" && typeof value.type === "string" && typeof value.sha === "string";
+const githubHeaders = (env) => {
+	const token = env.GITHUB_TOKEN || env.GH_TOKEN;
+	return {
+		Accept: "application/vnd.github+json",
+		"User-Agent": "neon-cli",
+		...token ? { Authorization: `Bearer ${token}` } : {}
+	};
+};
+const fetchTree = async (source, env) => {
+	const response = await fetch(`https://api.github.com/repos/${source}/git/trees/HEAD?recursive=1`, {
+		headers: githubHeaders(env),
+		signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+	});
+	if (!response.ok) {
+		if ((response.status === 403 || response.status === 429) && response.headers.get("x-ratelimit-remaining") === "0") throw new Error(`GitHub API rate limit reached while checking ${source}. Set GITHUB_TOKEN and retry.`);
+		throw new Error(`GitHub returned ${response.status} for the file tree of ${source}.`);
+	}
+	const body = await response.json();
+	if (!isRecord(body) || !Array.isArray(body.tree)) throw new Error(`GitHub returned an unexpected file tree for ${source}.`);
+	if (body.truncated === true) throw new Error(`GitHub truncated the file tree of ${source}.`);
+	return body.tree.filter(isTreeEntry);
+};
+/** The files the skills CLI hashes: regular files, outside `.git` and `node_modules`. */
+const folderFiles = (tree, folder) => tree.filter((entry) => {
+	if (entry.type !== "blob" || entry.mode === "120000") return false;
+	if (!entry.path.startsWith(`${folder}/`)) return false;
+	const dirs = entry.path.slice(folder.length + 1).split("/").slice(0, -1);
+	return !dirs.includes(".git") && !dirs.includes("node_modules");
+});
+const fetchContentHash = async (source, folder, tree) => {
+	const files = await Promise.all(folderFiles(tree, folder).map(async (entry) => {
+		const path = entry.path.split("/").map(encodeURIComponent).join("/");
+		const response = await fetch(`https://raw.githubusercontent.com/${source}/HEAD/${path}`, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });
+		if (!response.ok) throw new Error(`GitHub returned ${response.status} for ${entry.path} in ${source}.`);
+		const bytes = new Uint8Array(await response.arrayBuffer());
+		if (gitBlobSha(bytes) !== entry.sha) throw new Error(`${source} changed during the check. Retry.`);
+		return {
+			path: entry.path.slice(folder.length + 1),
+			bytes
+		};
+	}));
+	return skillContentHash(files);
+};
+/**
+* The folders to fetch: the given skills, plus every folder already in the cache so
+* results for other directories stay current.
+*/
+const folderRequests = (skills, previous) => {
+	const requests = /* @__PURE__ */ new Map();
+	const add = (request) => {
+		const key = folderKey(request);
+		const existing = requests.get(key);
+		requests.set(key, {
+			...request,
+			content: request.content || existing?.content === true
+		});
+	};
+	for (const [key, remote] of Object.entries(previous)) {
+		const split = key.lastIndexOf(":");
+		const source = key.slice(0, split);
+		if (split <= 0 || !NEON_SOURCES.has(source)) continue;
+		add({
+			source,
+			folder: key.slice(split + 1),
+			content: remote.content !== void 0
+		});
+	}
+	for (const skill of skills) add({
+		source: skill.source,
+		folder: skill.folder,
+		content: skill.hashKind === "content"
+	});
+	return [...requests.values()];
+};
+/**
+* Fetches the default-branch state of every requested skill folder and writes it to the
+* cache. File contents are downloaded only for folders whose tree changed since the cache.
+*/
+const refreshSkillsCheckCache = async ({ cachePath, skills, env = process.env, now = Date.now() }) => {
+	const previous = readSkillsCheckCache(cachePath)?.folders ?? {};
+	const requests = folderRequests(skills, previous);
+	const folders = {};
+	for (const source of new Set(requests.map((request) => request.source))) {
+		const tree = await fetchTree(source, env);
+		for (const request of requests) {
+			if (request.source !== source) continue;
+			const key = folderKey(request);
+			const node = tree.find((entry) => entry.type === "tree" && entry.path === request.folder);
+			if (node === void 0) {
+				folders[key] = { missing: true };
+				continue;
+			}
+			const prior = previous[key];
+			let content = prior?.tree === node.sha ? prior.content : void 0;
+			if (request.content && content === void 0) content = await fetchContentHash(source, request.folder, tree);
+			folders[key] = {
+				tree: node.sha,
+				...content === void 0 ? {} : { content }
+			};
+		}
+	}
+	writeJsonFile(cachePath, {
+		checkedAt: now,
+		folders
+	}, "skills check cache");
+	return folders;
+};
+const skillsStatusRows = (skills, folders) => skills.map((skill) => {
+	const status = skillStatus(skill, folders[folderKey(skill)]);
+	if (status === void 0) throw new Error(`No result for ${skill.skill} from ${skill.source}. Retry the check.`);
+	return {
+		scope: scopeLabel(skill.scope),
+		skill: skill.skill,
+		status
+	};
+});
+const formatSkillsNotice = (outdated) => {
+	if (outdated.length === 0) return void 0;
+	const scopes = ["global", "project"].filter((scope) => outdated.some((skill) => skill.scope === scope));
+	return [
+		"Neon agent skills have updates:",
+		...scopes.map((scope) => `  ${scopeLabel(scope)}: ${outdated.filter((skill) => skill.scope === scope).map((skill) => skill.skill).join(", ")}`),
+		"Update them:",
+		...scopes.map((scope) => `  ${neonSkillsUpdateCommand(scope)}`)
+	].join("\n");
+};
+/**
+* `pending` folders are left alone until the next daily check. A lock written after the last
+* check (an install or an update) holds back the warning and checks every skill again,
+* because the cache can be older than what was just installed.
+*/
+const planSkillsCheck = ({ skills, cache, lockModifiedAt, now }) => {
+	const remote = (skill) => cache?.folders[folderKey(skill)];
+	const settled = (skill) => remote(skill)?.pending !== true;
+	const lockChanged = cache !== void 0 && lockModifiedAt > cache.checkedAt;
+	const outdated = lockChanged ? [] : skills.filter((skill) => settled(skill) && skillStatus(skill, remote(skill)) === "outdated");
+	const toCheck = skills.filter((skill) => settled(skill) && (lockChanged || skillStatus(skill, remote(skill)) === void 0));
+	return {
+		outdated,
+		toCheck,
+		refresh: cache === void 0 || toCheck.length > 0 || now - (cache.attemptedAt ?? cache.checkedAt) >= DAY_MS
+	};
+};
+const spawnSkillsCheckWorker = (cachePath, cwd) => {
+	const workerPath = fileURLToPath(new URL("./check_worker.js", import.meta.url));
+	if (!existsSync(workerPath)) return;
+	try {
+		const child = spawn(process.execPath, [
+			workerPath,
+			cachePath,
+			cwd
+		], {
+			detached: true,
+			stdio: "ignore",
+			windowsHide: true
+		});
+		child.on("error", (error) => {
+			log.debug("Skills check failed to start: %s", error.message);
+		});
+		child.unref();
+	} catch (error) {
+		log.debug("Could not start the skills check: %s", error instanceof Error ? error.message : String(error));
+	}
+};
+/**
+* Warns at most once a day when a Neon skill in the user-level lock or this directory's
+* `skills-lock.json` is behind its source, from a cache a background worker refreshes daily.
+*/
+const notifyIfSkillsOutdated = ({ configDir, cwd, now = Date.now() }) => {
+	const lockPaths = [globalLockPath(), projectLockPath(cwd)];
+	let skills;
+	try {
+		skills = [...readLockedSkills(lockPaths[0], "global"), ...readLockedSkills(lockPaths[1], "project")];
+	} catch (error) {
+		log.debug("Skipping the skills check: %s", error instanceof Error ? error.message : String(error));
+		return;
+	}
+	if (skills.length === 0) return;
+	const cachePath = skillsCheckCachePath(configDir);
+	const cache = readSkillsCheckCache(cachePath);
+	const plan = planSkillsCheck({
+		skills,
+		cache,
+		lockModifiedAt: Math.max(...lockPaths.map((path) => statSync(path, { throwIfNoEntry: false })?.mtimeMs ?? 0)),
+		now
+	});
+	const notice = formatSkillsNotice(plan.outdated);
+	if (notice !== void 0) showNotice({
+		configDir,
+		id: "skills",
+		intervalMs: DAY_MS,
+		message: notice,
+		now
+	});
+	if (!plan.refresh) return;
+	const folders = { ...cache?.folders };
+	for (const skill of plan.toCheck) folders[folderKey(skill)] = {
+		...folders[folderKey(skill)],
+		pending: true
+	};
+	if (writeJsonFile(cachePath, {
+		checkedAt: cache?.checkedAt ?? 0,
+		attemptedAt: now,
+		folders
+	}, "skills check cache")) spawnSkillsCheckWorker(cachePath, cwd);
+};
+//#endregion
+export { formatSkillsNotice, globalLockPath, lockPath, neonSkillsUpdateCommand, notifyIfSkillsOutdated, parseSkillsCheckCache, parseSkillsLock, planSkillsCheck, projectLockPath, readLockedSkills, refreshSkillsCheckCache, scopeLabel, skillContentHash, skillStatus, skillsCheckCachePath, skillsStatusRows };

package/dist/skills/run.js

@@ -59,7 +59,6 @@ const neonSkillsRetryCommand = (options) => {
 	args.push("-y");
 	return `neon ${args.map(quoteNpxArg).join(" ")}`;
 };
-const neonSkillsUpdateRetryCommand = (global) => global ? "neon skills update --global -y" : "neon skills update -y";
 const quoteNpxArg = (part) => /[\s"'\\*]/.test(part) ? `'${part.replace(/'/g, `'\\''`)}'` : part;
 const npxCommand = (args) => `npx ${args.map(quoteNpxArg).join(" ")}`;
 const ANSI = /\u001b\[[0-9;]*[A-Za-z]/g;
@@ -116,4 +115,4 @@ const runSkillsCli = async (options) => {
 const isCommandMissing = (error) => typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT";
 const isExecaFailure = (error) => typeof error === "object" && error !== null && "shortMessage" in error && typeof error.shortMessage === "string";
 //#endregion
-export { SKILLS_MIN_NODE, assertSkillsNode, neonSkillsRetryCommand, neonSkillsUpdateRetryCommand, nodeMeetsMinimum, npxCommand, quoteNpxArg, runSkillsCli, skillsAddArgs, skillsChildEnv, skillsMetadata, skillsUpdateArgs, skillsUpdateDetail, skillsUpdateHadNothing };
+export { SKILLS_MIN_NODE, assertSkillsNode, neonSkillsRetryCommand, nodeMeetsMinimum, npxCommand, quoteNpxArg, runSkillsCli, skillsAddArgs, skillsChildEnv, skillsMetadata, skillsUpdateArgs, skillsUpdateDetail, skillsUpdateHadNothing };

package/dist/test_utils/fixtures.js

@@ -91,6 +91,7 @@ const test = test$1.extend({
 				...options.cwd ? { cwd: options.cwd } : {},
 				env: {
 					PATH: `${join(process.cwd(), "mocks/bin")}:${process.env.PATH}`,
+					NO_UPDATE_NOTIFIER: "1",
 					...options.env ?? {}
 				}
 			});

package/dist/update_notifier.js

@@ -145,6 +145,20 @@ const shouldRunUpdateNotifier = ({ commandPath, currentBranch, disabled, isCi: r
 	commandPath,
 	currentBranch
 });
+/**
+* The skills notice drops the terminal checks: coding agents run the CLI without a TTY,
+* and they are the ones that act on it. `neon skills` itself reports skill state.
+*/
+const shouldRunSkillsNotifier = ({ commandPath, currentBranch, output }) => commandPath[0] !== "skills" && commandPath[0] !== "skill" && shouldRunUpdateNotifier({
+	commandPath,
+	currentBranch,
+	disabled: "NO_UPDATE_NOTIFIER" in process.env,
+	isCi: isCi(),
+	isPackaged: isPackagedExecutable(),
+	output,
+	stderrIsTty: true,
+	stdoutIsTty: true
+});
 const notifyIfUpdateAvailable = ({ commandPath, configDir, currentBranch, currentVersion, output }) => {
 	if (!shouldRunUpdateNotifier({
 		commandPath,
@@ -204,4 +218,4 @@ const recordLatestVersion = (cachePath, source, latestVersion) => {
 	});
 };
 //#endregion
-export { cacheForUpdateSource, findCliInstalls, formatDuplicateInstallNotice, formatUpdateNotice, notifyIfUpdateAvailable, parseUpdateCheckCache, recordLatestVersion, shouldRefreshUpdateCheck, shouldRunUpdateNotifier, spawnUpdateWorkerProcess, writeUpdateCheckCache };
+export { cacheForUpdateSource, findCliInstalls, formatDuplicateInstallNotice, formatUpdateNotice, notifyIfUpdateAvailable, parseUpdateCheckCache, recordLatestVersion, shouldRefreshUpdateCheck, shouldRunSkillsNotifier, shouldRunUpdateNotifier, spawnUpdateWorkerProcess, writeUpdateCheckCache };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "neon",
-  "version": "8.11.4",
+  "version": "8.12.0",
   "description": "CLI tool for Neon, the cloud backend primitives built around Lakebase Postgres",
   "keywords": [
     "neon",
@@ -72,10 +72,10 @@
     "yaml": "^2.9.0",
     "yargs": "17.7.2",
     "yoctocolors": "^2.1.2",
-    "@neon/config-runtime": "1.10.3",
     "@neon/config": "1.9.4",
-    "@neon/sdk": "7.5.0",
-    "@neon/realtime": "0.1.2"
+    "@neon/config-runtime": "1.10.3",
+    "@neon/realtime": "0.1.2",
+    "@neon/sdk": "7.5.0"
   },
   "optionalDependencies": {
     "@napi-rs/keyring": "1.3.0",
@@ -112,10 +112,10 @@
     "typescript": "^5.9.0",
     "vitest": "^3.0.9",
     "@neon-internals/env-core": "0.0.35",
-    "@neon/functions": "0.11.0",
-    "@neon/env": "1.6.5",
     "@neon/e2e-harness": "0.0.0",
-    "@neon-internals/cli-core": "0.0.0"
+    "@neon/env": "1.6.5",
+    "@neon-internals/cli-core": "0.0.0",
+    "@neon/functions": "0.11.0"
   },
   "publishConfig": {
     "access": "public",

package/dist/_chunks/{env-5HS5qQGd.js → env-uVRY4xah.js}

@@ -7,9 +7,9 @@ import { deprecatedServiceMessage, parseServices, servicesFlagValue, servicesOpt
 import { mergeEnvFile, readEnvFile, resolveEnvFilePath } from "../env_file.js";
 import { t as NEON_ENV_VAR_KEYS, u as isFunctionBaseUrlKey } from "./env-BpP3Dqpe.js";
 import { ENV_PULL_KEY_HELP, ENV_PULL_SERVICES, envKeysForSelection, envPullFlagValue, ownedEnvServiceKeys, parseEnvPullKeys } from "../env_services.js";
+import { i as dropClaimableUnsupported, o as resolveNeonEnvVars } from "./env-BNm69Qh8.js";
 import { fillSingleProject, resolveBranchRef } from "../utils/enrichers.js";
 import { warnAiGateway } from "../utils/ai_gateway_notice.js";
-import { i as dropClaimableUnsupported, o as resolveNeonEnvVars } from "./env-BNm69Qh8.js";
 import { formatPulledEnv, pulledBranch } from "../commands/env_output.js";
 import { existsSync } from "node:fs";
 import chalk from "chalk";