neon 8.13.0 → 8.13.2

package/README.md

@@ -891,6 +891,8 @@ Unauthenticated `-y` skips linking and prints the next step: sign up at https://
 
 When init picks MCP auth (no `--mcp-auth`) and the CLI credential is an organization or project-scoped API key, which cannot mint the MCP server's key, init configures MCP with OAuth instead and continues. With `--mcp-auth api-key`, init skips MCP, finishes linking and `neon.ts`, then reports `Neon setup failed.` with the `neon mcp` commands to retry and exits 1.
 
+When the Neon plugin, skills, or MCP setup fails for an agent, init runs the remaining agent steps, links (or writes `.neon` offline), and writes `neon.ts` as it would have, then reports `Neon setup failed.` with the error and the `neon plugins`, `neon skills`, or `neon mcp` command to retry, and exits 1.
+
 Custom asks how to add Neon to coding agents (plugin, skills and MCP separately, or skip), then how to get a project (sign in and link, or a claimable project when you are not signed in), then which services `neon.ts` should declare. Skills and MCP use separate agent pickers, and either can be skipped. Postgres is listed first as always included. The package manager is inferred from the directory; Custom asks only when none is detected. `--skill` selects skills (not the plugin) and skips that picker. MCP flags (`--mcp-config-location`, `--mcp-auth`, `--mcp-project-scoped`) select skills and MCP. `--mcp-config-location` is where the config is written: `global` maps to `neon mcp`, and `project` maps to `neon mcp --project`. With `-y`, the location defaults to `global`; interactive Custom asks. If some selected agents cannot write that location, init warns and skips MCP for those agents while continuing with the supported agents. It fails when none of the selected agents support the location. `--mcp-project-scoped` limits MCP tools to the linked Neon project by passing its ID to `neon mcp --project-id`. Omitted is false, including in Custom; there is no prompt. `--no-agent-setup` skips agent setup.
 
 Empty directories are set up in place. `neon init` does not scaffold starter files.
@@ -955,7 +957,7 @@ The default mints an account-wide API key (or reuses the Bearer already configur
 
 ## Install Neon agent skills (`skills`)
 
-`neon skills` installs Neon agent skills by running `npx skills add`. It does not call the Neon API. This command needs Node.js 22.20 or newer. The rest of the CLI supports Node.js 20.19 or newer.
+`neon skills` installs Neon agent skills by running `npx skills@latest add`, so it always uses the latest skills CLI, even when an older one is installed globally. It does not call the Neon API. This command needs Node.js 22.20 or newer. The rest of the CLI supports Node.js 20.19 or newer.
 
 ```bash
 # Interactive: this directory, then agents, then skills.

package/dist/_chunks/{checkout-BGvlLc43.js → checkout-CXIOydqZ.js}

@@ -11,9 +11,9 @@ import { looksLikeBranchId } from "../utils/formats.js";
 import { fillSingleProject, listAllProjectBranches } from "../utils/enrichers.js";
 import { buildCheckoutEvent, readGitContext } from "../utils/git.js";
 import { buildHookBranch, loadHookConfig, resolveHookEnv, runCheckoutAfterHook, runCheckoutBeforeHook, runCreateAfterHook, runCreateBeforeHook } from "../utils/hooks.js";
-import { n as autoPullEnvAfterPin } from "./env-uVRY4xah.js";
-import { a as applyPolicyOnCreate, f as envFlag, l as createBranchFromPolicyOnCheckout } from "./config-BnwcGpbq.js";
-import { i as handler$1 } from "./link-DOM84hYj.js";
+import { n as autoPullEnvAfterPin } from "./env-5HS5qQGd.js";
+import { a as applyPolicyOnCreate, f as envFlag, l as createBranchFromPolicyOnCheckout } from "./config-BH_qRHiG.js";
+import { i as handler$1 } from "./link-BgtkOBws.js";
 import chalk from "chalk";
 import prompts from "prompts";
 //#region src/commands/checkout.ts

package/dist/_chunks/{claim-DqzLXZMN.js → claim-DqAvAvDm.js}

@@ -12,7 +12,7 @@ import { projectConfigPath } from "../project.js";
 import { resolveEnvFilePath } from "../env_file.js";
 import { writer } from "../writer.js";
 import { noPassthrough } from "../utils/flags.js";
-import { c as pull } from "./env-uVRY4xah.js";
+import { c as pull } from "./env-5HS5qQGd.js";
 import { existsSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
 import open from "open";
 import prompts from "prompts";

package/dist/_chunks/{config-BnwcGpbq.js → config-BH_qRHiG.js}

@@ -23,7 +23,7 @@ import { readGitContext } from "../utils/git.js";
 import { resolveHookEnv, runDeployAfterHook, runDeployBeforeHook } from "../utils/hooks.js";
 import { pickServicesInteractively } from "../utils/service_picker.js";
 import { zipBundle } from "../utils/zip.js";
-import { n as autoPullEnvAfterPin } from "./env-uVRY4xah.js";
+import { n as autoPullEnvAfterPin } from "./env-5HS5qQGd.js";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join, relative, resolve } from "node:path";
 import chalk from "chalk";

package/dist/_chunks/{deploy-BCVcDR1O.js → deploy-D7B0Xfjg.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { fillSingleProject } from "../utils/enrichers.js";
-import { f as envFlag, i as applyFlags, p as envPullFlag, r as applyCmd } from "./config-BnwcGpbq.js";
+import { f as envFlag, i as applyFlags, p as envPullFlag, r as applyCmd } from "./config-BH_qRHiG.js";
 import { DEPLOY_COMMANDS_EPILOGUE } from "../commands/deploy_help.js";
 //#region src/commands/deploy.ts
 var deploy_exports = /* @__PURE__ */ __exportAll({

package/dist/_chunks/{dev-mrJKMt2R.js → dev-CSvxAecE.js}

@@ -4,12 +4,12 @@ import { isClaimableEnvTarget } from "../claimable/state.js";
 import { getCliName } from "../utils/cli_name.js";
 import { defaultDevEnvFiles, readEnvFile, resolveEnvFilePath } from "../env_file.js";
 import { l as functionBaseUrlKey } from "./env-BpP3Dqpe.js";
+import { branchIdResolve } from "../utils/enrichers.js";
+import { bundleEntry } from "../utils/esbuild.js";
 import { a as resolveDevEnv } from "./env-BNm69Qh8.js";
+import { f as envFlag } from "./config-BH_qRHiG.js";
 import { findConfigFunctionBySource, resolveFunctionsFromConfig } from "../dev/functions.js";
 import { resolveWatchInputs } from "../dev/inputs.js";
-import { branchIdResolve } from "../utils/enrichers.js";
-import { bundleEntry } from "../utils/esbuild.js";
-import { f as envFlag } from "./config-BnwcGpbq.js";
 import { existsSync, mkdirSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { basename, dirname, join, relative, resolve } from "node:path";
 import { fileURLToPath } from "node:url";

package/dist/_chunks/{git-pN4kMH0d.js → git-H32TNt6M.js}

@@ -5,8 +5,8 @@ import { CONTEXT_FILE, contextBranch, gitBranchMap, gitBranchMapping, isUnfollow
 import { writer } from "../writer.js";
 import { neonSafeBranchName } from "../utils/branch_name.js";
 import { currentGitBranch, gitPull, gitRepoRoot, hasUpstream, installPostCheckoutHook, isGitRepo, isManagedHook, localGitBranches, postCheckoutHookPath, readGitContext, removePostCheckoutHook } from "../utils/git.js";
-import { o as quoteFlagValue } from "./link-DOM84hYj.js";
-import { o as handler$1 } from "./checkout-BGvlLc43.js";
+import { o as quoteFlagValue } from "./link-BgtkOBws.js";
+import { o as handler$1 } from "./checkout-CXIOydqZ.js";
 import { existsSync } from "node:fs";
 import { join } from "node:path";
 import chalk from "chalk";

package/dist/_chunks/{link-DOM84hYj.js → link-BgtkOBws.js}

@@ -13,8 +13,8 @@ import { writer } from "../writer.js";
 import { createBranch, pickBranchInteractively } from "../utils/branch_picker.js";
 import { looksLikeBranchId } from "../utils/formats.js";
 import { listAllProjectBranches } from "../utils/enrichers.js";
-import { n as autoPullEnvAfterPin } from "./env-uVRY4xah.js";
-import { h as initCmd } from "./config-BnwcGpbq.js";
+import { n as autoPullEnvAfterPin } from "./env-5HS5qQGd.js";
+import { h as initCmd } from "./config-BH_qRHiG.js";
 import { formatLinkSummary } from "../commands/link_output.js";
 import { r as REGIONS } from "./projects-BwI2Uo0z.js";
 import prompts from "prompts";

package/dist/_chunks/{plugins-DqD7BDO1.js → plugins-Dj0H6lDA.js}

@@ -132,7 +132,7 @@ const pluginsInstallError = (outcome) => {
 		global: scope === "global"
 	});
 	if (first.message.includes("needs npx (Node.js)")) return new Error(first.message);
-	const detail = failed.map((row) => row.message).join("\n");
+	const detail = [...new Set(failed.map((row) => row.message))].join("\n");
 	if (failed.length === rows.length) return /* @__PURE__ */ new Error(`${detail}\nRetry with: ${retry}`);
 	return /* @__PURE__ */ new Error(`Failed to install the Neon plugin for: ${failed.flatMap((row) => row.agents).join(", ")}.\n${detail}\nRetry with: ${retry}`);
 };

package/dist/_chunks/{status-DoNjIbKf.js → status-DV8Z2kw3.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { fillSingleProject } from "../utils/enrichers.js";
-import { y as status } from "./config-BnwcGpbq.js";
+import { y as status } from "./config-BH_qRHiG.js";
 //#region src/commands/status.ts
 var status_exports = /* @__PURE__ */ __exportAll({
 	builder: () => builder,

package/dist/analytics.js

@@ -356,4 +356,4 @@ const getAnalyticsEventProperties = (args) => ({
 	githubEnvVars: getGithubEnvVars(process.env)
 });
 //#endregion
-export { analyticsIdentity, analyticsMiddleware, closeAnalytics, commandSuccessProperties, getAnalyticsEventProperties, getErrorAnalyticsEventProperties, initAnalyticsClientMiddleware, isAnalyticsActive, recordCommandSuccessExtras, recordScaffoldedTemplate, sendError, storedCredentialAttribution, takeCommandSuccessExtras, telemetryCredential, trackCommandSuccess, trackEvent, useAnalyticsClientForTests };
+export { analyticsIdentity, analyticsMiddleware, closeAnalytics, commandSuccessProperties, getAnalyticsEventProperties, getErrorAnalyticsEventProperties, initAnalyticsClientMiddleware, isAnalyticsActive, recordCommandSuccessExtras, recordScaffoldedTemplate, redactCredentialTokenIds, sendError, storedCredentialAttribution, takeCommandSuccessExtras, telemetryCredential, trackCommandSuccess, trackEvent, useAnalyticsClientForTests };

package/dist/commands/checkout.js

@@ -1 +1 @@
-export { t as builder, r as command, i as describe, a as formatCheckoutPolicyFailure, o as handler } from "../_chunks/checkout-BGvlLc43.js";
+export { t as builder, r as command, i as describe, a as formatCheckoutPolicyFailure, o as handler } from "../_chunks/checkout-CXIOydqZ.js";

package/dist/commands/claim.js

@@ -1 +1 @@
-export { t as CLAIM_CREATE_FIELDS, n as CLAIM_LIST_FIELDS, r as aliases, i as builder, a as claimCreateFields, s as claimableCapabilities, c as command, l as create, u as describe, d as handler } from "../_chunks/claim-DqzLXZMN.js";
+export { t as CLAIM_CREATE_FIELDS, n as CLAIM_LIST_FIELDS, r as aliases, i as builder, a as claimCreateFields, s as claimableCapabilities, c as command, l as create, u as describe, d as handler } from "../_chunks/claim-DqAvAvDm.js";

package/dist/commands/config.js

@@ -1 +1 @@
-export { t as ConfigInstallFailed, n as addCmd, r as applyCmd, i as applyFlags, a as applyPolicyOnCreate, o as builder, s as command, l as createBranchFromPolicyOnCheckout, u as describe, d as ensureConfigPackages, f as envFlag, p as envPullFlag, m as handler, h as initCmd, g as installCommandFrom, _ as missingDependencies, v as planCmd, y as status } from "../_chunks/config-BnwcGpbq.js";
+export { t as ConfigInstallFailed, n as addCmd, r as applyCmd, i as applyFlags, a as applyPolicyOnCreate, o as builder, s as command, l as createBranchFromPolicyOnCheckout, u as describe, d as ensureConfigPackages, f as envFlag, p as envPullFlag, m as handler, h as initCmd, g as installCommandFrom, _ as missingDependencies, v as planCmd, y as status } from "../_chunks/config-BH_qRHiG.js";

package/dist/commands/deploy.js

@@ -1 +1 @@
-export { t as builder, n as command, i as describe, a as handler } from "../_chunks/deploy-BCVcDR1O.js";
+export { t as builder, n as command, i as describe, a as handler } from "../_chunks/deploy-D7B0Xfjg.js";

package/dist/commands/dev.js

@@ -1 +1 @@
-export { t as builder, n as captureShellEnv, r as command, i as describe, a as devBundleDir, o as devEnvContext, c as diffUnits, l as formatEnvFiles, u as formatEnvSummary, d as handler, f as loadDevEnvFiles, p as localFunctionUrlEnv, m as planFunctionsToUnits, h as reportDevCredential, g as sourceFunctionUrlOverlay } from "../_chunks/dev-mrJKMt2R.js";
+export { t as builder, n as captureShellEnv, r as command, i as describe, a as devBundleDir, o as devEnvContext, c as diffUnits, l as formatEnvFiles, u as formatEnvSummary, d as handler, f as loadDevEnvFiles, p as localFunctionUrlEnv, m as planFunctionsToUnits, h as reportDevCredential, g as sourceFunctionUrlOverlay } from "../_chunks/dev-CSvxAecE.js";

package/dist/commands/env.js

@@ -1 +1 @@
-export { t as ENV_PULL_SKIPPED_HINT, n as autoPullEnvAfterPin, r as builder, i as command, a as describe, s as handler, c as pull } from "../_chunks/env-uVRY4xah.js";
+export { t as ENV_PULL_SKIPPED_HINT, n as autoPullEnvAfterPin, r as builder, i as command, a as describe, s as handler, c as pull } from "../_chunks/env-5HS5qQGd.js";

package/dist/commands/functions_new.js

@@ -8,7 +8,7 @@ import { writer } from "../writer.js";
 import { formatInitDone, printInitDone } from "../init/chrome.js";
 import { FUNCTION_SLUG_PATTERN, deriveFunctionSlug } from "../utils/function_slug.js";
 import { displayPath } from "./env_output.js";
-import { _ as missingDependencies, d as ensureConfigPackages, g as installCommandFrom } from "../_chunks/config-BnwcGpbq.js";
+import { _ as missingDependencies, d as ensureConfigPackages, g as installCommandFrom } from "../_chunks/config-BH_qRHiG.js";
 import { recommendedOperations } from "../functions/registry.js";
 import { collidingFiles, operationsFromFlags, planConfigRegistration, planEnvExample, planScaffold, writeScaffold } from "../functions/scaffold.js";
 import { describeRegistrySource, openRegistry } from "../functions/source.js";

package/dist/commands/git.js

@@ -1 +1 @@
-export { t as aliases, n as builder, r as cleanup, i as command, a as describe, s as handler, c as install, l as partitionBranchesToPrune, u as status, d as sync, f as uninstall } from "../_chunks/git-pN4kMH0d.js";
+export { t as aliases, n as builder, r as cleanup, i as command, a as describe, s as handler, c as install, l as partitionBranchesToPrune, u as status, d as sync, f as uninstall } from "../_chunks/git-H32TNt6M.js";

package/dist/commands/index.js

@@ -2,29 +2,29 @@ import { r as auth_exports } from "../_chunks/auth-CIUtXByB.js";
 import { t as api_exports } from "../_chunks/api-GbEaBZJ5.js";
 import { n as api_keys_exports } from "../_chunks/api_keys-CNnnugbQ.js";
 import { n as ask_exports } from "../_chunks/ask-DVwy0eUL.js";
-import { o as env_exports } from "../_chunks/env-uVRY4xah.js";
-import { c as config_exports } from "../_chunks/config-BnwcGpbq.js";
+import { o as env_exports } from "../_chunks/env-5HS5qQGd.js";
+import { c as config_exports } from "../_chunks/config-BH_qRHiG.js";
 import { u as projects_exports } from "../_chunks/projects-BwI2Uo0z.js";
-import { a as link_exports } from "../_chunks/link-DOM84hYj.js";
+import { a as link_exports } from "../_chunks/link-BgtkOBws.js";
 import { o as mcp_exports } from "../_chunks/mcp-Bo-7TKc7.js";
-import { c as plugins_exports } from "../_chunks/plugins-DqD7BDO1.js";
+import { c as plugins_exports } from "../_chunks/plugins-Dj0H6lDA.js";
 import { l as skills_exports } from "../_chunks/skills-BP6pIm7O.js";
 import { t as bootstrap_exports } from "../_chunks/bootstrap-wPZWa1sT.js";
 import { r as branches_exports } from "../_chunks/branches-BNa1xX1L.js";
 import { n as bucket_exports } from "../_chunks/bucket-BCdryTkD.js";
-import { n as checkout_exports } from "../_chunks/checkout-BGvlLc43.js";
-import { o as claim_exports } from "../_chunks/claim-DqzLXZMN.js";
+import { n as checkout_exports } from "../_chunks/checkout-CXIOydqZ.js";
+import { o as claim_exports } from "../_chunks/claim-DqAvAvDm.js";
 import { a as connection_string_exports } from "../_chunks/connection_string-DB4awPzZ.js";
 import { a as credentials_exports } from "../_chunks/credentials-BSjE9fRR.js";
 import { r as data_api_exports } from "../_chunks/data_api-Djxj5ZQD.js";
 import { o as databases_exports } from "../_chunks/databases-Dok4wru7.js";
-import { r as deploy_exports } from "../_chunks/deploy-BCVcDR1O.js";
-import { s as dev_exports } from "../_chunks/dev-mrJKMt2R.js";
+import { r as deploy_exports } from "../_chunks/deploy-D7B0Xfjg.js";
+import { s as dev_exports } from "../_chunks/dev-CSvxAecE.js";
 import { i as diff_exports } from "../_chunks/diff-DhxxbdQE.js";
 import { c as docs_exports } from "../_chunks/docs-CrVybkTP.js";
 import { o as feedback_exports } from "../_chunks/feedback-CMayyTa8.js";
 import { o as functions_exports } from "../_chunks/functions-Q0zuvtnk.js";
-import { o as git_exports } from "../_chunks/git-pN4kMH0d.js";
+import { o as git_exports } from "../_chunks/git-H32TNt6M.js";
 import { a as init_exports } from "../_chunks/init-BkA6RilG.js";
 import { o as inspect_exports } from "../_chunks/inspect-g0wekylj.js";
 import { a as ip_allow_exports } from "../_chunks/ip_allow-5lLFvIuE.js";
@@ -39,7 +39,7 @@ import { s as realtime_exports } from "../_chunks/realtime-BRqIyGR-.js";
 import { l as roles_exports } from "../_chunks/roles-B4w3YT_7.js";
 import { a as set_context_exports } from "../_chunks/set_context-DbrwoImy.js";
 import { s as snapshots_exports } from "../_chunks/snapshots-RJBzW8GM.js";
-import { a as status_exports } from "../_chunks/status-DoNjIbKf.js";
+import { a as status_exports } from "../_chunks/status-DV8Z2kw3.js";
 import { d as triggers_exports } from "../_chunks/triggers-BrRo1z4b.js";
 import { s as user_exports } from "../_chunks/user-dlOGXbX9.js";
 import { i as vpc_endpoints_exports } from "../_chunks/vpc_endpoints-CNb0YfMo.js";

package/dist/commands/link.js

@@ -1 +1 @@
-export { t as builder, n as command, r as describe, i as handler, o as quoteFlagValue, s as runLink, c as shouldOfferConfigInit } from "../_chunks/link-DOM84hYj.js";
+export { t as builder, n as command, r as describe, i as handler, o as quoteFlagValue, s as runLink, c as shouldOfferConfigInit } from "../_chunks/link-BgtkOBws.js";

package/dist/commands/plugins.js

@@ -1 +1 @@
-export { t as aliases, n as builder, r as command, i as describe, a as handler, o as installPlugins, s as pluginsInstallError, l as reportPluginsInstall } from "../_chunks/plugins-DqD7BDO1.js";
+export { t as aliases, n as builder, r as command, i as describe, a as handler, o as installPlugins, s as pluginsInstallError, l as reportPluginsInstall } from "../_chunks/plugins-Dj0H6lDA.js";

package/dist/commands/status.js

@@ -1 +1 @@
-export { t as builder, n as command, r as describe, i as handler } from "../_chunks/status-DoNjIbKf.js";
+export { t as builder, n as command, r as describe, i as handler } from "../_chunks/status-DV8Z2kw3.js";

package/dist/commands/subscribe.js

@@ -1,6 +1,6 @@
 import { writer } from "../writer.js";
-import { o as resolveNeonEnvVars } from "../_chunks/env-BNm69Qh8.js";
 import { branchIdFromProps } from "../utils/enrichers.js";
+import { o as resolveNeonEnvVars } from "../_chunks/env-BNm69Qh8.js";
 import YAML from "yaml";
 //#region src/commands/subscribe.ts
 const builder = (argv) => argv.usage("$0 realtime subscribe \"<query>\" [options]").positional("query", {

package/dist/init/auth.js

@@ -4,7 +4,7 @@ import "../config.js";
 import "../auth.js";
 import { c as ensureAuth } from "../_chunks/auth-CIUtXByB.js";
 import { recoverFrom401 } from "../auth_recovery.js";
-import { c as pull } from "../_chunks/env-uVRY4xah.js";
+import { c as pull } from "../_chunks/env-5HS5qQGd.js";
 import { c as setupNeonMcp } from "../_chunks/mcp-Bo-7TKc7.js";
 //#region src/init/auth.ts
 const isUnauthorized = (error) => isNeonApiError(error) && error.status === 401;

package/dist/init/copy.js

@@ -158,6 +158,17 @@ const mcpKeyFailedNext = (reason, mcp) => [
 	"Or with OAuth:",
 	`${mcp} --oauth`
 ];
+const AGENTS_NOT_INSTALLED = "not installed";
+const TOOLING_FAILED = {
+	plugins: "The Neon plugin was not installed. Retry with:",
+	skills: "Neon skills were not installed. Retry with:",
+	mcp: "The Neon MCP server was not configured. Retry with:"
+};
+const toolingFailedNext = (failures) => failures.flatMap((failure, index) => [
+	...index > 0 ? [""] : [],
+	TOOLING_FAILED[failure.kind],
+	failure.command
+]);
 const mcpAfterLinkNext = (mcp) => ["Then configure the Neon MCP server for that project:", mcp];
 const envPullFailedNext = () => ({
 	heading: HEADING_FAILED,
@@ -174,4 +185,4 @@ const headingForOutcome = (outcome) => {
 	}
 };
 //#endregion
-export { AGENT_DETECTED_DESCRIPTION, AGENT_MCP_PICKER_MESSAGE, AGENT_MCP_SKIP_MESSAGE, AGENT_OTHER_DESCRIPTION, AGENT_PICKER_MESSAGE, AGENT_PLUGIN_SKIP_MESSAGE, AGENT_SETUP_MESSAGE, AGENT_SETUP_PLUGIN_DESCRIPTION, AGENT_SETUP_PLUGIN_TITLE, AGENT_SETUP_SKILLS_DESCRIPTION, AGENT_SETUP_SKILLS_TITLE, AGENT_SETUP_SKIP_DESCRIPTION, AGENT_SETUP_SKIP_TITLE, AGENT_SKILLS_PICKER_MESSAGE, AGENT_SKILLS_SKIP_MESSAGE, CANCELLED_BODY, CLAIMABLE_ACCOUNT_FLAGS, CLAIMABLE_ALREADY_LINKED, CLAIMABLE_MCP_API_KEY, CLAIMABLE_NO_LINK, CONFIG_CONFIRM_HINT, CONFIG_CONFIRM_MESSAGE, HEADING_CANCELLED, HEADING_COMPLETE, HEADING_FAILED, HEADING_PENDING, INIT_NEEDS_YES, INIT_SUBTITLE, MCP_API_KEY_NEEDS_AUTH, MCP_AUTH_API_KEY_DESCRIPTION, MCP_AUTH_API_KEY_TITLE, MCP_AUTH_MESSAGE, MCP_AUTH_OAUTH_DESCRIPTION, MCP_AUTH_OAUTH_TITLE, MCP_OAUTH_FALLBACK, MCP_SCOPED_NEEDS_PROJECT, MCP_SCOPE_GLOBAL_DESCRIPTION, MCP_SCOPE_GLOBAL_TITLE, MCP_SCOPE_MESSAGE, MCP_SCOPE_PROJECT_DESCRIPTION, MCP_SCOPE_PROJECT_TITLE, MODE_CUSTOM_DESCRIPTION, MODE_CUSTOM_TITLE, MODE_MESSAGE, MODE_RECOMMENDED_DESCRIPTION, MODE_RECOMMENDED_TITLE, NON_TTY_AGENT_SETUP, NON_TTY_LINK_NEEDS_AUTH, NO_AGENTS_FALLBACK_STATUS, NO_AGENT_SETUP_CONFLICT, PACKAGE_MANAGER_MESSAGE, PROGRESS, PROJECT_PINNED_OFFLINE, PROJECT_SETUP_CLAIMABLE_DESCRIPTION, PROJECT_SETUP_CLAIMABLE_TITLE, PROJECT_SETUP_LINK_DESCRIPTION, PROJECT_SETUP_LINK_TITLE, PROJECT_SETUP_MESSAGE, SERVICES_HINT, SERVICES_MESSAGE, SKILLS_PICKER_MESSAGE, agentMissingCommandDescription, claimableNext, claimableThenServicesNext, configInitNext, envPullFailedNext, existingConfigNext, headingForOutcome, installFailedNext, mcpAfterLinkNext, mcpConfigLocationSkipped, mcpConfigLocationUnavailable, mcpKeyFailedNext, namedAgentsUnavailable, newConfigNext, offlinePinNext, skippedLinkNext, unattendedUnauthedNext };
+export { AGENTS_NOT_INSTALLED, AGENT_DETECTED_DESCRIPTION, AGENT_MCP_PICKER_MESSAGE, AGENT_MCP_SKIP_MESSAGE, AGENT_OTHER_DESCRIPTION, AGENT_PICKER_MESSAGE, AGENT_PLUGIN_SKIP_MESSAGE, AGENT_SETUP_MESSAGE, AGENT_SETUP_PLUGIN_DESCRIPTION, AGENT_SETUP_PLUGIN_TITLE, AGENT_SETUP_SKILLS_DESCRIPTION, AGENT_SETUP_SKILLS_TITLE, AGENT_SETUP_SKIP_DESCRIPTION, AGENT_SETUP_SKIP_TITLE, AGENT_SKILLS_PICKER_MESSAGE, AGENT_SKILLS_SKIP_MESSAGE, CANCELLED_BODY, CLAIMABLE_ACCOUNT_FLAGS, CLAIMABLE_ALREADY_LINKED, CLAIMABLE_MCP_API_KEY, CLAIMABLE_NO_LINK, CONFIG_CONFIRM_HINT, CONFIG_CONFIRM_MESSAGE, HEADING_CANCELLED, HEADING_COMPLETE, HEADING_FAILED, HEADING_PENDING, INIT_NEEDS_YES, INIT_SUBTITLE, MCP_API_KEY_NEEDS_AUTH, MCP_AUTH_API_KEY_DESCRIPTION, MCP_AUTH_API_KEY_TITLE, MCP_AUTH_MESSAGE, MCP_AUTH_OAUTH_DESCRIPTION, MCP_AUTH_OAUTH_TITLE, MCP_OAUTH_FALLBACK, MCP_SCOPED_NEEDS_PROJECT, MCP_SCOPE_GLOBAL_DESCRIPTION, MCP_SCOPE_GLOBAL_TITLE, MCP_SCOPE_MESSAGE, MCP_SCOPE_PROJECT_DESCRIPTION, MCP_SCOPE_PROJECT_TITLE, MODE_CUSTOM_DESCRIPTION, MODE_CUSTOM_TITLE, MODE_MESSAGE, MODE_RECOMMENDED_DESCRIPTION, MODE_RECOMMENDED_TITLE, NON_TTY_AGENT_SETUP, NON_TTY_LINK_NEEDS_AUTH, NO_AGENTS_FALLBACK_STATUS, NO_AGENT_SETUP_CONFLICT, PACKAGE_MANAGER_MESSAGE, PROGRESS, PROJECT_PINNED_OFFLINE, PROJECT_SETUP_CLAIMABLE_DESCRIPTION, PROJECT_SETUP_CLAIMABLE_TITLE, PROJECT_SETUP_LINK_DESCRIPTION, PROJECT_SETUP_LINK_TITLE, PROJECT_SETUP_MESSAGE, SERVICES_HINT, SERVICES_MESSAGE, SKILLS_PICKER_MESSAGE, agentMissingCommandDescription, claimableNext, claimableThenServicesNext, configInitNext, envPullFailedNext, existingConfigNext, headingForOutcome, installFailedNext, mcpAfterLinkNext, mcpConfigLocationSkipped, mcpConfigLocationUnavailable, mcpKeyFailedNext, namedAgentsUnavailable, newConfigNext, offlinePinNext, skippedLinkNext, toolingFailedNext, unattendedUnauthedNext };

package/dist/init/funnel.js

@@ -1,6 +1,10 @@
 import pkg_default from "../pkg.js";
-import { trackEvent } from "../analytics.js";
+import { codeFromBody, isNeonApiError } from "../api.js";
+import { isNetworkError, matchErrorCode } from "../errors.js";
+import { redactCredentialTokenIds, trackEvent } from "../analytics.js";
+import { AuthRefreshError } from "../auth.js";
 import { randomUUID } from "node:crypto";
+import { stripVTControlCharacters } from "node:util";
 //#region src/init/funnel.ts
 const CLI_INIT_START = "cli_init_start";
 const CLI_INIT_END = "cli_init_end";
@@ -70,17 +74,45 @@ const initStartProperties = (input) => ({
 	detected_agents: input.detection.detectedAgents,
 	ci: input.detection.ci
 });
-const initEndProperties = (input) => ({
-	init_run_id: input.initRunId,
-	cli_version: pkg_default.version,
-	mode: input.mode,
-	agent_setup: input.agentSetup,
-	agents_installed: input.agentsInstalled,
-	link: input.link,
-	config: input.config,
-	services: input.services,
-	outcome: input.outcome
-});
+/** Longer messages are cut so one plugin CLI dump cannot dominate the event. */
+const ERROR_MESSAGE_LIMIT = 2e3;
+/**
+* The `errCode` the top-level failure handler (`index.ts`) sends on `CLI Error` for the same
+* error, so a run's `error_code` and its `CLI Error` event agree.
+*/
+const initErrorCode = (error) => {
+	if (error instanceof AuthRefreshError) return "AUTH_FAILED";
+	if (isNetworkError(error)) return "NETWORK_ERROR";
+	if (isNeonApiError(error)) {
+		if (error.code === "ECONNABORTED") return "REQUEST_TIMEOUT";
+		const bodyCode = codeFromBody(error.data);
+		if (error.status === 401 || bodyCode === "SSO_AUTHORIZATION_REQUIRED" || bodyCode === "SSO_ORG_CREDS_ONLY") return "AUTH_FAILED";
+		return "API_ERROR";
+	}
+	return matchErrorCode(error instanceof Error ? error.message : void 0);
+};
+const initErrorMessage = (error) => {
+	const raw = error instanceof Error ? error.message : String(error);
+	return redactCredentialTokenIds(stripVTControlCharacters(raw)).slice(0, ERROR_MESSAGE_LIMIT);
+};
+const initEndProperties = (input) => {
+	const reported = input.errors.find((entry) => entry.error === input.exitError) ?? input.errors[0];
+	return {
+		init_run_id: input.initRunId,
+		cli_version: pkg_default.version,
+		mode: input.mode,
+		agent_setup: input.agentSetup,
+		agents_installed: input.agentsInstalled,
+		link: input.link,
+		config: input.config,
+		services: input.services,
+		outcome: input.outcome,
+		error_step: reported?.step ?? null,
+		error_code: reported === void 0 ? null : initErrorCode(reported.error),
+		error_message: reported === void 0 ? null : initErrorMessage(reported.error),
+		error_steps: [...new Set(input.errors.map((entry) => entry.step))]
+	};
+};
 const emitInitStart = (properties) => {
 	trackEvent(CLI_INIT_START, properties);
 };
@@ -95,8 +127,22 @@ const createInitFunnel = (initRunId = createInitRunId()) => ({
 	link: null,
 	config: null,
 	services: null,
+	errors: [],
+	exitError: void 0,
 	ended: false
 });
+/** Records a failure once: a deferred error rethrown at the end keeps the step it failed in. */
+const recordInitError = (state, step, error) => {
+	if (state.errors.some((entry) => entry.error === error)) return;
+	state.errors.push({
+		step,
+		error
+	});
+};
+const recordInitExit = (state, step, error) => {
+	recordInitError(state, step, error);
+	state.exitError = error;
+};
 const finishInitFunnel = (state, outcome, analytics) => {
 	if (state.ended || !analytics) return;
 	state.ended = true;
@@ -108,8 +154,10 @@ const finishInitFunnel = (state, outcome, analytics) => {
 		link: state.link,
 		config: state.config,
 		services: state.services,
-		outcome
+		outcome,
+		errors: state.errors,
+		exitError: state.exitError
 	}));
 };
 //#endregion
-export { CLI_INIT_END, CLI_INIT_START, createInitFunnel, createInitRunId, emitInitEnd, emitInitStart, finishInitFunnel, initEndProperties, initFlagsFromArgv, initStartProperties };
+export { CLI_INIT_END, CLI_INIT_START, createInitFunnel, createInitRunId, emitInitEnd, emitInitStart, finishInitFunnel, initEndProperties, initErrorCode, initErrorMessage, initFlagsFromArgv, initStartProperties, recordInitError, recordInitExit };

package/dist/init/link.js

@@ -4,7 +4,7 @@ import "../config.js";
 import "../auth.js";
 import { c as ensureAuth } from "../_chunks/auth-CIUtXByB.js";
 import { recoverFrom401 } from "../auth_recovery.js";
-import { s as runLink } from "../_chunks/link-DOM84hYj.js";
+import { s as runLink } from "../_chunks/link-BgtkOBws.js";
 //#region src/init/link.ts
 const isUnauthorized = (error) => isNeonApiError(error) && error.status === 401;
 const authenticationFailed = () => /* @__PURE__ */ new Error("Authentication failed.");

package/dist/init/run.js

@@ -15,20 +15,20 @@ import { missingPluginsCommands, pluginsInstallableAgents } from "../plugins/tar
 import { skillsInstallableAgents } from "../skills/targets.js";
 import { FALLBACK_SKILLS_AGENTS, assertNamedAgentTooling, funnelAgentSetup, planInitToolingSteps, recommendedTooling, resolveNamedAgents, splitInitTooling } from "./plan.js";
 import { inferPackageManager, resolvePackageManager } from "../utils/package_manager.js";
-import { CANCELLED_BODY, CLAIMABLE_ACCOUNT_FLAGS, CLAIMABLE_ALREADY_LINKED, CLAIMABLE_MCP_API_KEY, CLAIMABLE_NO_LINK, MCP_API_KEY_NEEDS_AUTH, MCP_SCOPED_NEEDS_PROJECT, NON_TTY_LINK_NEEDS_AUTH, NO_AGENTS_FALLBACK_STATUS, PROGRESS, PROJECT_PINNED_OFFLINE, claimableNext, claimableThenServicesNext, configInitNext, envPullFailedNext, existingConfigNext, installFailedNext, mcpAfterLinkNext, mcpConfigLocationSkipped, mcpConfigLocationUnavailable, mcpKeyFailedNext, namedAgentsUnavailable, newConfigNext, offlinePinNext, skippedLinkNext, unattendedUnauthedNext } from "./copy.js";
+import { AGENTS_NOT_INSTALLED, CANCELLED_BODY, CLAIMABLE_ACCOUNT_FLAGS, CLAIMABLE_ALREADY_LINKED, CLAIMABLE_MCP_API_KEY, CLAIMABLE_NO_LINK, MCP_API_KEY_NEEDS_AUTH, MCP_SCOPED_NEEDS_PROJECT, NON_TTY_LINK_NEEDS_AUTH, NO_AGENTS_FALLBACK_STATUS, PROGRESS, PROJECT_PINNED_OFFLINE, claimableNext, claimableThenServicesNext, configInitNext, envPullFailedNext, existingConfigNext, installFailedNext, mcpAfterLinkNext, mcpConfigLocationSkipped, mcpConfigLocationUnavailable, mcpKeyFailedNext, namedAgentsUnavailable, newConfigNext, offlinePinNext, skippedLinkNext, toolingFailedNext, unattendedUnauthedNext } from "./copy.js";
 import { agentsRowValue, configRowValue, formatInitDone, headingForKind, printInitBanner, printInitDone, printInitProgress, projectRowValue, shouldPrintInitBanner } from "./chrome.js";
-import { h as initCmd, t as ConfigInstallFailed } from "../_chunks/config-BnwcGpbq.js";
-import { o as quoteFlagValue, s as runLink } from "../_chunks/link-DOM84hYj.js";
+import { h as initCmd, t as ConfigInstallFailed } from "../_chunks/config-BH_qRHiG.js";
+import { o as quoteFlagValue, s as runLink } from "../_chunks/link-BgtkOBws.js";
 import { runAuthenticatedLink } from "./link.js";
 import { CannotMintApiKeyError } from "../mcp/mint.js";
 import { pullInitEnv } from "./auth.js";
 import { InitCancelled, raceSigint, restoreCursor } from "./cancelled.js";
 import { pickAgentSetupInteractively, pickInitAgentsInteractively, pickInitConfigInteractively, pickInitMcpAuthInteractively, pickInitMcpConfigLocationInteractively, pickInitModeInteractively, pickInitPackageManagerInteractively, pickInitProjectSetupInteractively, pickInitServicesInteractively, pickInitSkillsInteractively } from "./wizard.js";
-import { runToolingSteps } from "./tooling.js";
-import { l as create } from "../_chunks/claim-DqzLXZMN.js";
+import { runToolingSteps, toolingStepCommandText } from "./tooling.js";
+import { l as create } from "../_chunks/claim-DqAvAvDm.js";
 import { INIT_CONFIG_SERVICES_CONFLICT, configPlanFromResolution, initEnvPullAfterConfig, resolveInitConfigChoice } from "./choices.js";
 import { detectInitEnvironment } from "./detect.js";
-import { createInitFunnel, emitInitStart, finishInitFunnel, initStartProperties } from "./funnel.js";
+import { createInitFunnel, emitInitStart, finishInitFunnel, initStartProperties, recordInitError, recordInitExit } from "./funnel.js";
 import { assertAgentSetupFlags, hasInitMcpFlags, inferInitAgentSetup, resolveInitMode } from "./mode.js";
 import { resolve } from "node:path";
 //#region src/init/run.ts
@@ -197,6 +197,8 @@ const runInit = async (props) => {
 	const funnel = createInitFunnel();
 	let outcome = "error";
 	let printed = false;
+	let step = "setup";
+	let deferredFailureNext = () => [];
 	try {
 		const detectOpts = {
 			cwd,
@@ -332,7 +334,23 @@ const runInit = async (props) => {
 		const mcpOauth = mcpAuth === "oauth";
 		const earlyTooling = delayMcp ? withoutMcp(tooling) : tooling;
 		const mcpState = {};
-		const reportedTooling = () => mcpState.error === void 0 && mcpState.deferredPin === void 0 ? tooling : withoutMcp(tooling);
+		const toolingFailures = [];
+		const reportedTooling = () => {
+			const dropped = new Set(toolingFailures.map((failure) => failure.kind));
+			if (mcpState.error !== void 0 || mcpState.deferredPin !== void 0) dropped.add("mcp");
+			return withoutKinds(tooling, dropped);
+		};
+		const agentsRow = () => {
+			const reported = reportedTooling();
+			return toolingFailures.length > 0 && reported.setup === "skip" ? AGENTS_NOT_INSTALLED : agentsRowValue({
+				tooling: reported,
+				installed: funnel.agentsInstalled
+			});
+		};
+		const toolingFailedNextLines = () => toolingFailedNext(toolingFailures.map((failure) => ({
+			kind: failure.kind,
+			command: failure.command
+		})));
 		const mcpCommand = (projectIdArg) => [
 			`${getCliName()} mcp -y`,
 			...mcpConfigLocation === "project" ? ["--project"] : [],
@@ -340,25 +358,35 @@ const runInit = async (props) => {
 			...("mcpAgents" in tooling ? tooling.mcpAgents : []).map((agent) => `--agent ${agent}`)
 		].join(" ");
 		const mcpFailedNext = () => mcpState.error === void 0 ? [] : mcpKeyFailedNext(mcpState.reason ?? "cannot-mint", mcpCommand(mcpState.pinId !== void 0 ? quoteFlagValue(mcpState.pinId) : void 0));
+		deferredFailureNext = () => joinNext(toolingFailedNextLines(), mcpFailedNext());
 		const mcpDeferredNext = () => mcpState.deferredPin === void 0 ? [] : mcpAfterLinkNext(`${mcpCommand(mcpState.deferredPin)}${mcpOauth ? " --oauth" : ""}`);
 		const runTooling = async (steps, plan) => {
-			let ran = plan;
-			try {
-				await runToolingSteps(steps, {
-					cwd,
-					output: props.output,
-					auth,
-					operations: props.operations,
-					narrate: "human",
-					mcpOauthFallback: !mcpAuthChosen
-				});
-			} catch (error) {
-				if (!(error instanceof CannotMintApiKeyError)) throw error;
-				mcpState.error = error;
-				mcpState.reason = "cannot-mint";
-				ran = withoutMcp(plan);
+			for (const toolingStep of steps) {
+				let completed;
+				try {
+					completed = await runToolingSteps([toolingStep], {
+						cwd,
+						output: props.output,
+						auth,
+						operations: props.operations,
+						narrate: "human",
+						mcpOauthFallback: !mcpAuthChosen
+					});
+				} catch (error) {
+					if (error instanceof InitCancelled) throw error;
+					if (error instanceof CannotMintApiKeyError) {
+						mcpState.error = error;
+						mcpState.reason = "cannot-mint";
+					} else toolingFailures.push({
+						kind: toolingStep.kind,
+						command: `${getCliName()} ${toolingStepCommandText(toolingStep)}`,
+						error
+					});
+					recordInitError(funnel, toolingStep.kind, error);
+					continue;
+				}
+				if (completed.includes(toolingStep.kind)) funnel.agentsInstalled = uniqueAgents([...funnel.agentsInstalled, ...agentsForStep(plan, toolingStep.kind)]);
 			}
-			funnel.agentsInstalled = uniqueAgents([...funnel.agentsInstalled, ...agentsFromTooling(ran)]);
 		};
 		const toolingSteps = planInitToolingSteps({
 			tooling: earlyTooling,
@@ -370,6 +398,7 @@ const runInit = async (props) => {
 			...selectedSkills !== void 0 ? { skills: selectedSkills } : {}
 		});
 		if (toolingSteps.length > 0) await runTooling(toolingSteps, earlyTooling);
+		step = "link";
 		let projectSetup = "skip";
 		let claimExpiresAt;
 		const noLink = props.link === false;
@@ -419,6 +448,7 @@ const runInit = async (props) => {
 		};
 		if (usesMcp && mcpAuth === "api-key" && (projectSetup === "claimable" || props.claimable === true)) throw new Error(CLAIMABLE_MCP_API_KEY);
 		if (projectSetup === "claimable") {
+			step = "claimable";
 			printInitProgress(PROGRESS.claim);
 			await (props.createClaimable ?? defaultCreateClaimable)({
 				cwd,
@@ -432,12 +462,14 @@ const runInit = async (props) => {
 			funnel.link = "claimable";
 			claimExpiresAt = readLinkedClaimableCredentials(configDir, readContextFile(contextFile))?.expiresAt;
 		} else if (projectSetup === "link") {
+			step = "link";
 			printInitProgress(detection.authenticated ? PROGRESS.link : PROGRESS.auth);
 			await (props.linkProject ?? runAuthenticatedLink)(linkProps);
 			funnel.link = "linked";
 		}
 		const pinnedOffline = funnel.link === "skipped" && !noLink && linkInputs.orgId !== void 0 && linkInputs.projectId !== void 0 && linkInputs.branch !== void 0 && linkInputs.projectName === void 0 && linkInputs.regionId === void 0;
 		if (pinnedOffline) {
+			step = "link";
 			await runLink({
 				...linkProps,
 				checks: false,
@@ -449,9 +481,11 @@ const runInit = async (props) => {
 		else if (delayMcp && tooling.setup !== "skip" && mcpAuth === "api-key" && yes && !detection.authenticated) {
 			mcpState.error = new Error(MCP_API_KEY_NEEDS_AUTH);
 			mcpState.reason = "signed-out";
+			recordInitError(funnel, "mcp", mcpState.error);
 			const linkedId = readContextFile(contextFile).projectId;
 			if (props.mcpProjectScoped === true && typeof linkedId === "string") mcpState.pinId = linkedId;
 		} else if (delayMcp && tooling.setup !== "skip") {
+			step = "mcp";
 			const linkedId = readContextFile(contextFile).projectId;
 			let pinId;
 			if (props.mcpProjectScoped === true) {
@@ -479,6 +513,7 @@ const runInit = async (props) => {
 			mcpState.pinId = pinId;
 			if (mcpSteps.length > 0) await runTooling(mcpSteps, mcpOnly);
 		}
+		step = "config";
 		const canAskConfig = props.pickConfig !== void 0 || detection.interactive;
 		const configResolution = resolveInitConfigChoice({
 			flag: recommended ? props.config ?? true : props.config,
@@ -536,7 +571,7 @@ const runInit = async (props) => {
 						heading: failed.heading,
 						body: failed.body,
 						rows: [],
-						next: joinNext(failed.next, mcpFailedNext())
+						next: joinNext(failed.next, joinNext(toolingFailedNextLines(), mcpFailedNext()))
 					}));
 					printed = true;
 					outcome = "error";
@@ -557,48 +592,48 @@ const runInit = async (props) => {
 			...typeof context.projectId === "string" ? { projectId: context.projectId } : {},
 			...branch !== void 0 ? { branch } : {}
 		});
-		if (envPullPlan.kind !== "skip") try {
-			if (typeof context.projectId !== "string" || typeof branch !== "string") throw new Error("Env pull requires a linked project and branch.");
-			printInitProgress(PROGRESS.env);
-			await raceSigint((props.envPull ?? pullInitEnv)({
-				...auth,
-				output: props.output,
-				cwd,
-				projectId: context.projectId,
-				branch,
-				...envPullPlan.kind === "services" ? {
-					services: envPullPlan.services,
-					envKeys: envPullPlan.envKeys
-				} : {}
-			}));
-		} catch (error) {
-			if (error instanceof InitCancelled) throw error;
-			const failed = envPullFailedNext();
-			printInitDone(formatInitDone({
-				heading: failed.heading,
-				body: failed.body,
-				rows: [
-					{
-						label: "Agents",
-						value: agentsRowValue({
-							tooling: reportedTooling(),
-							installed: funnel.agentsInstalled
-						})
-					},
-					{
-						label: "Project",
-						value: projectRowValue(funnel.link)
-					},
-					{
-						label: "Config",
-						value: configRowValue(funnel.config, existingFilename)
-					}
-				],
-				next: joinNext(failed.next, mcpFailedNext())
-			}));
-			printed = true;
-			outcome = "error";
-			throw error;
+		if (envPullPlan.kind !== "skip") {
+			step = "env_pull";
+			try {
+				if (typeof context.projectId !== "string" || typeof branch !== "string") throw new Error("Env pull requires a linked project and branch.");
+				printInitProgress(PROGRESS.env);
+				await raceSigint((props.envPull ?? pullInitEnv)({
+					...auth,
+					output: props.output,
+					cwd,
+					projectId: context.projectId,
+					branch,
+					...envPullPlan.kind === "services" ? {
+						services: envPullPlan.services,
+						envKeys: envPullPlan.envKeys
+					} : {}
+				}));
+			} catch (error) {
+				if (error instanceof InitCancelled) throw error;
+				const failed = envPullFailedNext();
+				printInitDone(formatInitDone({
+					heading: failed.heading,
+					body: failed.body,
+					rows: [
+						{
+							label: "Agents",
+							value: agentsRow()
+						},
+						{
+							label: "Project",
+							value: projectRowValue(funnel.link)
+						},
+						{
+							label: "Config",
+							value: configRowValue(funnel.config, existingFilename)
+						}
+					],
+					next: joinNext(failed.next, joinNext(toolingFailedNextLines(), mcpFailedNext()))
+				}));
+				printed = true;
+				outcome = "error";
+				throw error;
+			}
 		}
 		const pendingUnauthed = funnel.link === "skipped" && !noLink;
 		const pendingServices = extraServices && linked;
@@ -640,16 +675,14 @@ const runInit = async (props) => {
 		outcome = pending && !pendingUnauthed && noLink ? "success" : pending ? "pending" : "success";
 		if (pendingUnauthed) outcome = "pending";
 		if (noLink && !pendingUnauthed && !pendingServices && !pendingExisting) outcome = "success";
-		if (mcpState.error !== void 0) outcome = "error";
+		const deferredError = toolingFailures[0]?.error ?? mcpState.error;
+		if (deferredError !== void 0) outcome = "error";
 		printInitDone(formatInitDone({
 			heading: headingForKind(outcome),
 			rows: [
 				{
 					label: "Agents",
-					value: agentsRowValue({
-						tooling: reportedTooling(),
-						installed: funnel.agentsInstalled
-					})
+					value: agentsRow()
 				},
 				{
 					label: "Project",
@@ -660,10 +693,10 @@ const runInit = async (props) => {
 					value: configRowValue(funnel.config, existingFilename)
 				}
 			],
-			next: joinNext(mcpFailedNext(), next)
+			next: joinNext(joinNext(toolingFailedNextLines(), mcpFailedNext()), next)
 		}));
 		printed = true;
-		if (mcpState.error !== void 0) throw mcpState.error;
+		if (deferredError !== void 0) throw deferredError;
 		takeCommandSuccessExtras();
 		recordCommandSuccessExtras({
 			init_kind: detection.emptyDirectory ? "empty-skip" : "existing",
@@ -682,6 +715,13 @@ const runInit = async (props) => {
 			throw error;
 		}
 		outcome = "error";
+		recordInitExit(funnel, step, error);
+		const deferred = deferredFailureNext();
+		if (!printed && deferred.length > 0) printInitDone(formatInitDone({
+			heading: headingForKind("error"),
+			rows: [],
+			next: deferred
+		}));
 		throw error;
 	} finally {
 		finishInitFunnel(funnel, outcome, analytics);
@@ -702,31 +742,46 @@ const joinNext = (first, second) => first.length === 0 || second.length === 0 ?
 	"",
 	...second
 ];
-const withoutMcp = (tooling) => {
-	if (tooling.setup === "mixed") return {
-		...tooling,
-		mcpAgents: []
-	};
-	if (tooling.setup === "skills-mcp") return tooling.skillsAgents.length === 0 ? { setup: "skip" } : {
-		...tooling,
-		mcpAgents: []
-	};
-	return tooling;
+const withoutKinds = (tooling, kinds) => {
+	switch (tooling.setup) {
+		case "skip": return tooling;
+		case "plugin": return kinds.has("plugins") ? { setup: "skip" } : tooling;
+		case "skills": return kinds.has("skills") ? { setup: "skip" } : tooling;
+		case "skills-mcp": {
+			const skillsAgents = kinds.has("skills") ? [] : tooling.skillsAgents;
+			const mcpAgents = kinds.has("mcp") ? [] : tooling.mcpAgents;
+			return skillsAgents.length === 0 && mcpAgents.length === 0 ? { setup: "skip" } : {
+				...tooling,
+				skillsAgents,
+				mcpAgents
+			};
+		}
+		case "mixed": {
+			const skillsAgents = kinds.has("skills") ? [] : tooling.skillsAgents;
+			const mcpAgents = kinds.has("mcp") ? [] : tooling.mcpAgents;
+			if (!kinds.has("plugins")) return {
+				...tooling,
+				skillsAgents,
+				mcpAgents
+			};
+			return skillsAgents.length === 0 && mcpAgents.length === 0 ? { setup: "skip" } : {
+				setup: "skills-mcp",
+				skillsAgents,
+				mcpAgents
+			};
+		}
+		default: return tooling;
+	}
 };
+const withoutMcp = (tooling) => withoutKinds(tooling, /* @__PURE__ */ new Set(["mcp"]));
 /** The Neon plugin bundles the skills. */
 const installsSkills = (tooling) => tooling.setup === "skills-mcp" ? tooling.skillsAgents.length > 0 : tooling.setup !== "skip";
-const agentsFromTooling = (tooling) => {
-	switch (tooling.setup) {
-		case "skip": return [];
-		case "plugin": return [...tooling.agents];
-		case "skills": return [...tooling.agents];
-		case "skills-mcp": return uniqueAgents([...tooling.skillsAgents, ...tooling.mcpAgents]);
-		case "mixed": return uniqueAgents([
-			...tooling.pluginAgents,
-			...tooling.skillsAgents,
-			...tooling.mcpAgents
-		]);
-		default: return tooling;
+const agentsForStep = (tooling, kind) => {
+	switch (kind) {
+		case "plugins": return tooling.setup === "plugin" ? [...tooling.agents] : tooling.setup === "mixed" ? [...tooling.pluginAgents] : [];
+		case "skills": return tooling.setup === "skills" ? [...tooling.agents] : tooling.setup === "skills-mcp" || tooling.setup === "mixed" ? [...tooling.skillsAgents] : [];
+		case "mcp": return tooling.setup === "skills-mcp" || tooling.setup === "mixed" ? [...tooling.mcpAgents] : [];
+		default: return kind;
 	}
 };
 //#endregion

package/dist/init/tooling.js

@@ -6,7 +6,7 @@ import { CannotMintApiKeyError } from "../mcp/mint.js";
 import { detectAgent } from "./detect_host.js";
 import { AgentSelectionSkipped, canPickAgentsInteractively } from "../utils/agent_picker.js";
 import { a as mcpInstallError, s as reportMcpInstall } from "../_chunks/mcp-Bo-7TKc7.js";
-import { l as reportPluginsInstall, o as installPlugins, s as pluginsInstallError } from "../_chunks/plugins-DqD7BDO1.js";
+import { l as reportPluginsInstall, o as installPlugins, s as pluginsInstallError } from "../_chunks/plugins-Dj0H6lDA.js";
 import { c as skillsInstallError, o as installSkills, s as reportSkillsInstall } from "../_chunks/skills-BP6pIm7O.js";
 import { runAuthenticatedMcp } from "./auth.js";
 import { raceSigint } from "./cancelled.js";
@@ -19,7 +19,7 @@ const TOOLING_STEP_LABELS = {
 	skills: PROGRESS.skills,
 	mcp: PROGRESS.mcp
 };
-/** Reconstructs a display-only, `neon <command> <flags>` style string for a step. Never executed — only ever logged. */
+/** The `<command> <flags>` a user can run to repeat this step on its own. Never executed here. */
 const toolingStepCommandText = (step) => {
 	const flags = [];
 	switch (step.kind) {
@@ -185,4 +185,4 @@ const runAgentTooling = async (options) => {
 	}));
 };
 //#endregion
-export { runAgentTooling, runToolingSteps };
+export { runAgentTooling, runToolingSteps, toolingStepCommandText };

package/dist/skills/freshness.js

@@ -83,17 +83,23 @@ const folderKey = ({ source, folder }) => `${source}:${folder}`;
 /** `undefined` when the remote side has not been fetched yet. */
 const skillStatus = (skill, remote) => {
 	if (remote?.missing === true) return "not found upstream";
-	const latest = skill.hashKind === "tree" ? remote?.tree : remote?.content;
-	if (latest === void 0) return void 0;
-	return latest === skill.hash ? "up to date" : "outdated";
+	if (skill.hashKind === "tree") {
+		if (remote?.tree === void 0) return void 0;
+		return remote.tree === skill.hash ? "up to date" : "outdated";
+	}
+	if (remote?.content === void 0) return void 0;
+	if (skill.hash === remote.content) return "up to date";
+	if (remote.contentCrlf === void 0) return void 0;
+	return skill.hash === remote.contentCrlf ? "up to date" : "outdated";
 };
 const parseRemoteFolder = (value) => {
 	if (!isRecord(value)) return void 0;
-	const { tree, content, missing, pending } = value;
-	if (tree !== void 0 && typeof tree !== "string" || content !== void 0 && typeof content !== "string" || missing !== void 0 && missing !== true || pending !== void 0 && pending !== true) return;
+	const { tree, content, contentCrlf, missing, pending } = value;
+	if (tree !== void 0 && typeof tree !== "string" || content !== void 0 && typeof content !== "string" || contentCrlf !== void 0 && typeof contentCrlf !== "string" || missing !== void 0 && missing !== true || pending !== void 0 && pending !== true) return;
 	return {
 		...tree === void 0 ? {} : { tree },
 		...content === void 0 ? {} : { content },
+		...contentCrlf === void 0 ? {} : { contentCrlf },
 		...missing === void 0 ? {} : { missing },
 		...pending === void 0 ? {} : { pending }
 	};
@@ -137,6 +143,41 @@ const skillContentHash = (files) => {
 	}
 	return hash.digest("hex");
 };
+const LF = 10;
+const CR = 13;
+/** Control bytes Git counts as printable text: backspace, tab, form feed, escape. */
+const PRINTABLE_CONTROLS = /* @__PURE__ */ new Set([
+	8,
+	9,
+	12,
+	27
+]);
+/**
+* The bytes Git writes for a blob when `core.autocrlf=true`, the Git for Windows default. The
+* skills CLI hashes that checkout, so a Windows install records a hash of these bytes. Mirrors
+* Git's `convert.c`: a blob that has any CR, a NUL, or mostly non-printable bytes is written
+* unchanged, and every LF in any other blob becomes CRLF.
+*/
+const autocrlfCheckout = (bytes) => {
+	let lf = 0;
+	let printable = 0;
+	let nonprintable = 0;
+	for (const byte of bytes) {
+		if (byte === CR || byte === 0) return bytes;
+		if (byte === LF) lf += 1;
+		else if (byte === 127 || byte < 32 && !PRINTABLE_CONTROLS.has(byte)) nonprintable += 1;
+		else printable += 1;
+	}
+	if (bytes[bytes.length - 1] === 26) nonprintable -= 1;
+	if (lf === 0 || printable >> 7 < nonprintable) return bytes;
+	const out = new Uint8Array(bytes.length + lf);
+	let at = 0;
+	for (const byte of bytes) {
+		if (byte === LF) out[at++] = CR;
+		out[at++] = byte;
+	}
+	return out;
+};
 const gitBlobSha = (bytes) => createHash("sha1").update(`blob ${bytes.byteLength}\0`).update(bytes).digest("hex");
 const isTreeEntry = (value) => isRecord(value) && typeof value.path === "string" && typeof value.mode === "string" && typeof value.type === "string" && typeof value.sha === "string";
 const githubHeaders = (env) => {
@@ -168,7 +209,7 @@ const folderFiles = (tree, folder) => tree.filter((entry) => {
 	const dirs = entry.path.slice(folder.length + 1).split("/").slice(0, -1);
 	return !dirs.includes(".git") && !dirs.includes("node_modules");
 });
-const fetchContentHash = async (source, folder, tree) => {
+const fetchContentHashes = async (source, folder, tree) => {
 	const files = await Promise.all(folderFiles(tree, folder).map(async (entry) => {
 		const path = entry.path.split("/").map(encodeURIComponent).join("/");
 		const response = await fetch(`https://raw.githubusercontent.com/${source}/HEAD/${path}`, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });
@@ -180,7 +221,13 @@ const fetchContentHash = async (source, folder, tree) => {
 			bytes
 		};
 	}));
-	return skillContentHash(files);
+	return {
+		content: skillContentHash(files),
+		contentCrlf: skillContentHash(files.map((file) => ({
+			...file,
+			bytes: autocrlfCheckout(file.bytes)
+		})))
+	};
 };
 /**
 * The folders to fetch: the given skills, plus every folder already in the cache so
@@ -232,11 +279,14 @@ const refreshSkillsCheckCache = async ({ cachePath, skills, env = process.env, n
 				continue;
 			}
 			const prior = previous[key];
-			let content = prior?.tree === node.sha ? prior.content : void 0;
-			if (request.content && content === void 0) content = await fetchContentHash(source, request.folder, tree);
+			let hashes = prior?.tree === node.sha && prior.content !== void 0 && prior.contentCrlf !== void 0 ? {
+				content: prior.content,
+				contentCrlf: prior.contentCrlf
+			} : void 0;
+			if (request.content && hashes === void 0) hashes = await fetchContentHashes(source, request.folder, tree);
 			folders[key] = {
 				tree: node.sha,
-				...content === void 0 ? {} : { content }
+				...hashes
 			};
 		}
 	}
@@ -394,4 +444,4 @@ const notifyIfSkillsOutdated = ({ configDir, cwd, now = Date.now() }) => {
 	}, "skills check cache")) spawnSkillsCheckWorker(cachePath, cwd);
 };
 //#endregion
-export { formatSkillsNotice, globalLockPath, lockPath, neonSkillsUpdateCommand, notifyIfSkillsOutdated, parseSkillsCheckCache, parseSkillsLock, planSkillsCheck, projectLockPath, readLockedSkills, readSkillsTelemetry, refreshSkillsCheckCache, scopeLabel, skillContentHash, skillStatus, skillsCheckCachePath, skillsStatusRows, skillsTelemetry };
+export { autocrlfCheckout, formatSkillsNotice, globalLockPath, lockPath, neonSkillsUpdateCommand, notifyIfSkillsOutdated, parseSkillsCheckCache, parseSkillsLock, planSkillsCheck, projectLockPath, readLockedSkills, readSkillsTelemetry, refreshSkillsCheckCache, scopeLabel, skillContentHash, skillStatus, skillsCheckCachePath, skillsStatusRows, skillsTelemetry };

package/dist/skills/run.js

@@ -37,11 +37,13 @@ const assertSkillsNode = (version = process.version) => {
 	if (nodeMeetsMinimum(version, "22.20.0")) return;
 	throw new Error(`neon skills needs Node.js ${SKILLS_MIN_NODE} or newer to run the skills CLI. This process is Node.js ${version.replace(/^v/, "")}. Upgrade Node.js, then retry.`);
 };
+/** A bare `skills` makes npx run any copy already installed globally or cached, however old. */
+const SKILLS_PACKAGE = "skills@latest";
 const skillsAddArgs = (options) => {
 	if (options.skills.length === 0) throw new Error("skills add needs at least one --skill.");
 	const args = [
 		"-y",
-		"skills",
+		SKILLS_PACKAGE,
 		"add",
 		options.source
 	];
@@ -83,7 +85,7 @@ const skillsUpdateDetail = (output) => {
 };
 const skillsUpdateArgs = (options) => [
 	"-y",
-	"skills",
+	SKILLS_PACKAGE,
 	"update",
 	options.global ? "-g" : "-p",
 	"-y"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "neon",
-  "version": "8.13.0",
+  "version": "8.13.2",
   "description": "CLI tool for Neon, the cloud backend primitives built around Lakebase Postgres",
   "keywords": [
     "neon",
@@ -72,9 +72,9 @@
     "yaml": "^2.9.0",
     "yargs": "17.7.2",
     "yoctocolors": "^2.1.2",
+    "@neon/config": "1.9.5",
     "@neon/config-runtime": "1.10.4",
     "@neon/realtime": "0.1.2",
-    "@neon/config": "1.9.5",
     "@neon/sdk": "7.6.0"
   },
   "optionalDependencies": {

package/dist/_chunks/{env-uVRY4xah.js → env-5HS5qQGd.js}

@@ -7,9 +7,9 @@ import { deprecatedServiceMessage, parseServices, servicesFlagValue, servicesOpt
 import { mergeEnvFile, readEnvFile, resolveEnvFilePath } from "../env_file.js";
 import { t as NEON_ENV_VAR_KEYS, u as isFunctionBaseUrlKey } from "./env-BpP3Dqpe.js";
 import { ENV_PULL_KEY_HELP, ENV_PULL_SERVICES, envKeysForSelection, envPullFlagValue, ownedEnvServiceKeys, parseEnvPullKeys } from "../env_services.js";
-import { i as dropClaimableUnsupported, o as resolveNeonEnvVars } from "./env-BNm69Qh8.js";
 import { fillSingleProject, resolveBranchRef } from "../utils/enrichers.js";
 import { warnAiGateway } from "../utils/ai_gateway_notice.js";
+import { i as dropClaimableUnsupported, o as resolveNeonEnvVars } from "./env-BNm69Qh8.js";
 import { formatPulledEnv, pulledBranch } from "../commands/env_output.js";
 import { existsSync } from "node:fs";
 import chalk from "chalk";