neon 8.13.1 → 8.14.0

package/README.md

@@ -891,6 +891,8 @@ Unauthenticated `-y` skips linking and prints the next step: sign up at https://
 
 When init picks MCP auth (no `--mcp-auth`) and the CLI credential is an organization or project-scoped API key, which cannot mint the MCP server's key, init configures MCP with OAuth instead and continues. With `--mcp-auth api-key`, init skips MCP, finishes linking and `neon.ts`, then reports `Neon setup failed.` with the `neon mcp` commands to retry and exits 1.
 
+When the Neon plugin, skills, or MCP setup fails for an agent, init runs the remaining agent steps, links (or writes `.neon` offline), and writes `neon.ts` as it would have, then reports `Neon setup failed.` with the error and the `neon plugins`, `neon skills`, or `neon mcp` command to retry, and exits 1.
+
 Custom asks how to add Neon to coding agents (plugin, skills and MCP separately, or skip), then how to get a project (sign in and link, or a claimable project when you are not signed in), then which services `neon.ts` should declare. Skills and MCP use separate agent pickers, and either can be skipped. Postgres is listed first as always included. The package manager is inferred from the directory; Custom asks only when none is detected. `--skill` selects skills (not the plugin) and skips that picker. MCP flags (`--mcp-config-location`, `--mcp-auth`, `--mcp-project-scoped`) select skills and MCP. `--mcp-config-location` is where the config is written: `global` maps to `neon mcp`, and `project` maps to `neon mcp --project`. With `-y`, the location defaults to `global`; interactive Custom asks. If some selected agents cannot write that location, init warns and skips MCP for those agents while continuing with the supported agents. It fails when none of the selected agents support the location. `--mcp-project-scoped` limits MCP tools to the linked Neon project by passing its ID to `neon mcp --project-id`. Omitted is false, including in Custom; there is no prompt. `--no-agent-setup` skips agent setup.
 
 Empty directories are set up in place. `neon init` does not scaffold starter files.

package/dist/_chunks/{api-GbEaBZJ5.js → api-1MKsfpY3.js}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as __exportAll } from "./rolldown-runtime-BJohB4LM.js";
 import { codeFromBody, isNeonApiError } from "../api.js";
 import { writer } from "../writer.js";
 import { describeOperation, getEndpoints, loadSpec } from "../utils/openapi.js";
@@ -6,7 +6,7 @@ import { readFileSync } from "node:fs";
 import { resolve } from "node:path";
 import chalk from "chalk";
 import YAML from "yaml";
-//#region src/commands/api.ts
+// src/commands/api.ts
 var api_exports = /* @__PURE__ */ __exportAll({
 	buildBody: () => buildBody,
 	buildQuery: () => buildQuery,
@@ -384,5 +384,4 @@ const handler = async (args) => {
 	}
 	await runRequest(apiArgs);
 };
-//#endregion
 export { colorizeJson as a, handler as c, parseTypedValue as d, setDeep as f, builder as i, parseHeaders as l, buildBody as n, command as o, buildQuery as r, describe as s, api_exports as t, parseKeyValue as u };

package/dist/_chunks/{api_keys-CNnnugbQ.js → api_keys-6Xnxl7a8.js}

@@ -1,9 +1,9 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as __exportAll } from "./rolldown-runtime-BJohB4LM.js";
 import { log } from "../log.js";
 import { isNeonApiError } from "../api.js";
 import { writer } from "../writer.js";
 import { noPassthrough, single } from "../utils/flags.js";
-//#region src/commands/api_keys.ts
+// src/commands/api_keys.ts
 var api_keys_exports = /* @__PURE__ */ __exportAll({
 	aliases: () => aliases,
 	builder: () => builder,
@@ -277,5 +277,4 @@ const orgIdForProject = async (client, projectId, usage = "api-keys") => {
 	if (!orgId) throw new Error(usage === "mcp" ? `Project ${projectId} does not belong to an organization, so it cannot have a project-scoped API key. Pass --oauth to pin tools without minting, or omit --project-id to mint an account-wide key.` : `Project ${projectId} does not belong to an organization, so it cannot have a project-scoped API key. Omit --project-id to create an account key.`);
 	return orgId;
 };
-//#endregion
 export { describe as a, command as i, api_keys_exports as n, handler as o, builder as r, orgIdForProject as s, aliases as t };

package/dist/_chunks/{ask-DVwy0eUL.js → ask-Xlek1Pxh.js}

@@ -1,11 +1,11 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as __exportAll } from "./rolldown-runtime-BJohB4LM.js";
 import { isCi } from "../env.js";
 import { isNetworkError } from "../errors.js";
 import { writer } from "../writer.js";
 import { noPassthrough, single } from "../utils/flags.js";
 import { isEventStreamContentType, readAskSse } from "../commands/ask_sse.js";
 import { createThinkingSpinner } from "../commands/thinking_spinner.js";
-//#region src/commands/ask.ts
+// src/commands/ask.ts
 var ask_exports = /* @__PURE__ */ __exportAll({
 	DEFAULT_ASK_URL: () => DEFAULT_ASK_URL,
 	builder: () => builder,
@@ -151,5 +151,4 @@ async function askAssistant(opts) {
 	}
 	return askText(await readJsonBody(response));
 }
-//#endregion
 export { describe as a, command as i, ask_exports as n, handler as o, builder as r, resolveAskUrl as s, DEFAULT_ASK_URL as t };

package/dist/_chunks/{auth-CIUtXByB.js → auth-DPSDYYtG.js}

@@ -1,16 +1,16 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { a as OAUTH, i as API_KEY, l as interpretCredentials, s as credentialLabel, t as storeFor } from "./credential_io-BS-0Pmwc.js";
+import { t as __exportAll } from "./rolldown-runtime-BJohB4LM.js";
+import { a as OAUTH, i as API_KEY, l as interpretCredentials, s as credentialLabel, t as storeFor } from "./credential_io-DbeSh3Pl.js";
 import { isCi } from "../env.js";
 import { log } from "../log.js";
 import { withExclusiveLock } from "../refresh_lock.js";
 import { getApiClient, isNeonApiError } from "../api.js";
 import { setAuthContext } from "../auth_context.js";
-import { a as isOwnedCredentialPath } from "./paths-DMq0Lt7a.js";
+import { a as isOwnedCredentialPath } from "./paths-B55ZfOg1.js";
 import { currentContextFile, isAskCommand, isClaimCommand, isConfigAdd, isConfigInit, isCurrentBranchProbe, isDocsCommand, isFeedbackCommand, isFunctionsTemplateCommand, isGitLocalCommand, isInspectDbUrl, isMcpCommand, isMcpOauth, isPluginsCommand, isProfileCommand, isSkillsCommand, isUnfollowedGitHookSync, readContextFile } from "../context.js";
-import { _ as upsertProfile, d as newProfileLocation, g as selectProfileName, h as resolveProfile, i as assertValidProfileName, l as locationForName, m as readProfiles, n as KEYRING_CREDENTIALS, p as profilesUsingPath, r as assertProfilesUsable, s as isKeyringPointer, t as DEFAULT_PROFILE, u as locationOf } from "./profiles-DIB1av2Q.js";
+import { _ as upsertProfile, d as newProfileLocation, g as selectProfileName, h as resolveProfile, i as assertValidProfileName, l as locationForName, m as readProfiles, n as KEYRING_CREDENTIALS, p as profilesUsingPath, r as assertProfilesUsable, s as isKeyringPointer, t as DEFAULT_PROFILE, u as locationOf } from "./profiles-DTazQtjK.js";
 import { extendTokenSet } from "../utils/auth.js";
 import { AuthRefreshError, auth, classifyRefreshFailure, refreshToken } from "../auth.js";
-import { i as selectCredential, n as displacedProfileWarning, t as credentialInputs } from "./auth_selection-YX5_KZgD.js";
+import { i as selectCredential, n as displacedProfileWarning, t as credentialInputs } from "./auth_selection-CwGLN9Qz.js";
 import { ClaimableClient, ClaimableServiceError } from "../claimable/api.js";
 import { assertionHasExpired, claimableCredentialsExist, claimableCredentialsPath, readLinkedClaimableCredentials, shouldUseClaimableCredentials } from "../claimable/state.js";
 import { readOutgoingCredential, retirePreviousCredential } from "../retire_credential.js";
@@ -19,7 +19,7 @@ import { helpEpilogue, helpWidth, wrapHelpText } from "../utils/help_text.js";
 import { existsSync } from "node:fs";
 import { join } from "node:path";
 import { createHash } from "node:crypto";
-//#region src/commands/auth.ts
+// src/commands/auth.ts
 var auth_exports = /* @__PURE__ */ __exportAll({
 	aliases: () => aliases,
 	authFlow: () => authFlow,
@@ -491,5 +491,4 @@ const deleteCredentialsAt = (at, configDir) => {
 	}
 };
 const md5hash = (s) => createHash("md5").update(s).digest("hex");
-//#endregion
 export { command as a, ensureAuth as c, locationForAuth as d, refreshStoredCredentials as f, builder as i, handler as l, authFlow as n, deleteCredentialsAt as o, usableCredential as p, auth_exports as r, describe as s, aliases as t, isAccessTokenUsable as u };

package/dist/_chunks/{auth_selection-YX5_KZgD.js → auth_selection-CwGLN9Qz.js}

@@ -1,5 +1,5 @@
-import "./profiles-DIB1av2Q.js";
-//#region ../../internals/cli-core/dist/auth_selection.js
+import "./profiles-DTazQtjK.js";
+// ../../internals/cli-core/dist/auth_selection.js
 /**
 * # Which credential an invocation authenticates with
 *
@@ -81,5 +81,4 @@ function nonEmpty(value) {
 	const trimmed = value.trim();
 	return trimmed === "" ? void 0 : trimmed;
 }
-//#endregion
 export { selectCredential as i, displacedProfileWarning as n, recordCredentialInputs as r, credentialInputs as t };

package/dist/_chunks/{bootstrap-wPZWa1sT.js → bootstrap-BDkvsAVJ.js}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as __exportAll } from "./rolldown-runtime-BJohB4LM.js";
 import { isCi } from "../env.js";
 import { log } from "../log.js";
 import { recordCommandSuccessExtras, recordScaffoldedTemplate } from "../analytics.js";
@@ -17,7 +17,7 @@ import { runAgentTooling } from "../init/tooling.js";
 import { existsSync } from "node:fs";
 import { join, relative, resolve } from "node:path";
 import prompts from "prompts";
-//#region src/commands/bootstrap.ts
+// src/commands/bootstrap.ts
 var bootstrap_exports = /* @__PURE__ */ __exportAll({
 	builder: () => builder,
 	command: () => command,
@@ -495,5 +495,4 @@ const onPromptState = (state) => {
 		process.exit(1);
 	}
 };
-//#endregion
 export { handler as a, describe as i, builder as n, command as r, bootstrap_exports as t };

package/dist/_chunks/{branches-BNa1xX1L.js → branches-Bp-5z1lM.js}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as __exportAll } from "./rolldown-runtime-BJohB4LM.js";
 import { log } from "../log.js";
 import { retryOnLock } from "../api.js";
 import { contextBranch, readContextFile } from "../context.js";
@@ -12,7 +12,7 @@ import { psql } from "../utils/psql.js";
 import { parsePointInTime } from "../utils/point_in_time.js";
 import { parseSchemaDiffParams, schemaDiff } from "../commands/schema_diff.js";
 import chalk from "chalk";
-//#region src/commands/branches.ts
+// src/commands/branches.ts
 var branches_exports = /* @__PURE__ */ __exportAll({
 	BRANCH_FIELDS: () => BRANCH_FIELDS,
 	aliases: () => aliases,
@@ -456,5 +456,4 @@ const setExpiration = async (props) => {
 		})
 	});
 };
-//#endregion
 export { command as a, builder as i, aliases as n, describe as o, branches_exports as r, handler as s, BRANCH_FIELDS as t };

package/dist/_chunks/{bucket-BCdryTkD.js → bucket-D06bvDSa.js}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as __exportAll } from "./rolldown-runtime-BJohB4LM.js";
 import { log } from "../log.js";
 import { isNeonApiError, retryOnLock } from "../api.js";
 import { createProjectBranchBucket, deleteProjectBranchBucket, deleteProjectBranchBucketObject, deleteProjectBranchBucketObjectsByPrefix, getProjectBranchBucketObject, listProjectBranchBucketObjects, listProjectBranchBuckets, presignUpload } from "../storage_api.js";
@@ -8,7 +8,7 @@ import { createReadStream, createWriteStream } from "node:fs";
 import { basename } from "node:path";
 import { stat, unlink } from "node:fs/promises";
 import { pipeline } from "node:stream/promises";
-//#region src/commands/bucket.ts
+// src/commands/bucket.ts
 var bucket_exports = /* @__PURE__ */ __exportAll({
 	aliases: () => aliases,
 	builder: () => builder,
@@ -405,5 +405,4 @@ const deleteObject = async (props) => {
 	}
 	log.info(`Object "${rest}" deleted from bucket "${bucket}" on branch ${branchId}`);
 };
-//#endregion
 export { describe as a, splitBucketTarget as c, command as i, bucket_exports as n, handler as o, builder as r, resolveListDelimiter as s, aliases as t };

package/dist/_chunks/{checkout-CXIOydqZ.js → checkout-C6VMMgY6.js}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as __exportAll } from "./rolldown-runtime-BJohB4LM.js";
 import { isCi } from "../env.js";
 import { log } from "../log.js";
 import { isNeonApiError } from "../api.js";
@@ -11,12 +11,12 @@ import { looksLikeBranchId } from "../utils/formats.js";
 import { fillSingleProject, listAllProjectBranches } from "../utils/enrichers.js";
 import { buildCheckoutEvent, readGitContext } from "../utils/git.js";
 import { buildHookBranch, loadHookConfig, resolveHookEnv, runCheckoutAfterHook, runCheckoutBeforeHook, runCreateAfterHook, runCreateBeforeHook } from "../utils/hooks.js";
-import { n as autoPullEnvAfterPin } from "./env-5HS5qQGd.js";
-import { a as applyPolicyOnCreate, f as envFlag, l as createBranchFromPolicyOnCheckout } from "./config-BH_qRHiG.js";
-import { i as handler$1 } from "./link-BgtkOBws.js";
+import { n as autoPullEnvAfterPin } from "./env-BOt9AZ1j.js";
+import { a as applyPolicyOnCreate, f as envFlag, l as createBranchFromPolicyOnCheckout } from "./config-7SIE_C5O.js";
+import { i as handler$1 } from "./link-CcwTXRny.js";
 import chalk from "chalk";
 import prompts from "prompts";
-//#region src/commands/checkout.ts
+// src/commands/checkout.ts
 var checkout_exports = /* @__PURE__ */ __exportAll({
 	builder: () => builder,
 	command: () => command,
@@ -344,5 +344,4 @@ const tryAutoDetectProject = async (props) => {
 		return;
 	}
 };
-//#endregion
 export { formatCheckoutPolicyFailure as a, describe as i, checkout_exports as n, handler as o, command as r, builder as t };

package/dist/_chunks/{claim-DqAvAvDm.js → claim-DlLZmcq0.js}

@@ -1,9 +1,9 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as __exportAll } from "./rolldown-runtime-BJohB4LM.js";
 import { isCi } from "../env.js";
 import { log } from "../log.js";
 import { getApiClient } from "../api.js";
 import { applyContext, contextBranch, readContextFile } from "../context.js";
-import { t as credentialInputs } from "./auth_selection-YX5_KZgD.js";
+import { t as credentialInputs } from "./auth_selection-CwGLN9Qz.js";
 import { ClaimableClient, ClaimableServiceError } from "../claimable/api.js";
 import { assertionHasExpired, listClaimableCredentials, readClaimableCredentials, readLinkedClaimableCredentials, removeClaimableCredentials, writeClaimableCredentials } from "../claimable/state.js";
 import { NEON_SERVICES, deprecatedServiceMessage, parseServices, servicesFlagValue, servicesOption } from "../neon_services.js";
@@ -12,12 +12,12 @@ import { projectConfigPath } from "../project.js";
 import { resolveEnvFilePath } from "../env_file.js";
 import { writer } from "../writer.js";
 import { noPassthrough } from "../utils/flags.js";
-import { c as pull } from "./env-5HS5qQGd.js";
+import { c as pull } from "./env-BOt9AZ1j.js";
 import { existsSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
 import open from "open";
 import prompts from "prompts";
 import { loadConfigFromFile } from "@neon/config-runtime";
-//#region src/commands/claim.ts
+// src/commands/claim.ts
 var claim_exports = /* @__PURE__ */ __exportAll({
 	CLAIM_CREATE_FIELDS: () => CLAIM_CREATE_FIELDS,
 	CLAIM_LIST_FIELDS: () => CLAIM_LIST_FIELDS,
@@ -469,5 +469,4 @@ const finishClaimedContext = (props, projectId, contextMatches) => {
 	}
 	log.info("Dropped the local identity assertion. The next command needs `neon login` or `neon link`.");
 };
-//#endregion
 export { claimCreateFields as a, command as c, handler as d, builder as i, create as l, CLAIM_LIST_FIELDS as n, claim_exports as o, aliases as r, claimableCapabilities as s, CLAIM_CREATE_FIELDS as t, describe as u };

package/dist/_chunks/{cmd_pipeline-CEk93dGN.js → cmd_pipeline-BDE-TGto.js}

@@ -15,7 +15,7 @@ import { closeSync, createWriteStream, fsyncSync, openSync, promises } from "nod
 import * as path from "node:path";
 import { platform } from "node:os";
 import { spawn } from "node:child_process";
-//#region src/psql/core/common.ts
+// src/psql/core/common.ts
 /**
 * psql common — the unified send-query / process-result pipeline.
 *
@@ -836,8 +836,7 @@ const __testing = {
 	SAVEPOINT_NAME,
 	CURSOR_NAME
 };
-//#endregion
-//#region src/psql/command/cmd_io.ts
+// src/psql/command/cmd_io.ts
 /**
 * psql I/O & control backslash commands.
 *
@@ -2222,8 +2221,7 @@ const registerIoCommands = (registry) => {
 	registry.register(cmdGexec);
 	registry.register(cmdWatch);
 };
-//#endregion
-//#region src/psql/command/cmd_pipeline.ts
+// src/psql/command/cmd_pipeline.ts
 /**
 * psql pipeline / extended-query backslash commands (WP-21).
 *
@@ -2816,5 +2814,4 @@ const registerPipelineCommands = (registry) => {
 	registry.register(cmdSendPipeline);
 	registry.register(cmdGetResults);
 };
-//#endregion
 export { cmdPrint as A, psqlExec as B, cmdGdesc as C, cmdInclude as D, cmdGx as E, registerIoCommands as F, writeQueryError as G, renderResultSet as H, __testing as I, captureLastError as L, cmdWrite as M, formatWatchTimestamp as N, cmdIncludeRel as O, getQueryFout as P, executeAndPrint as R, cmdG as S, cmdGset as T, sendQuery as U, refreshErrorVars as V, stripLeadingCommentsAndWS as W, stagedNamedBindPresent as _, cmdFlush as a, WATCH_TEST_CONTROLLER as b, cmdParse as c, cmdSyncPipeline as d, consumeBindState as f, registerPipelineCommands as g, lookupPrepared as h, cmdEndPipeline as i, cmdWatch as j, cmdOut as k, cmdSendPipeline as l, getPipelineState as m, cmdBindNamed as n, cmdFlushRequest as o, dropPrepared as p, cmdClosePrepared as r, cmdGetResults as s, cmdBind as t, cmdStartPipeline as u, stashPrepared as v, cmdGexec as w, clearPipelineGateErrors as x, DEFAULT_WATCH_INTERVAL as y, pickOut$1 as z };

package/dist/_chunks/{config-BH_qRHiG.js → config-7SIE_C5O.js}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as __exportAll } from "./rolldown-runtime-BJohB4LM.js";
 import { isCi, isInteractiveTerminal } from "../env.js";
 import { log } from "../log.js";
 import { getApiClient } from "../api.js";
@@ -23,13 +23,13 @@ import { readGitContext } from "../utils/git.js";
 import { resolveHookEnv, runDeployAfterHook, runDeployBeforeHook } from "../utils/hooks.js";
 import { pickServicesInteractively } from "../utils/service_picker.js";
 import { zipBundle } from "../utils/zip.js";
-import { n as autoPullEnvAfterPin } from "./env-5HS5qQGd.js";
+import { n as autoPullEnvAfterPin } from "./env-BOt9AZ1j.js";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join, relative, resolve } from "node:path";
 import chalk from "chalk";
 import { defineConfig, packagesToStage, previewGaWarningForConfig, resolveConfig } from "@neon/config";
 import { PushAbortedError, PushConflictError, apply, assertZipWithinLimits, bundleAsIs, createBranch, describeNativeFinding, enforceLimits, findUndeclaredNativePackages, inspect, isPartialBranchCreateError, plan, resolveEsbuildEntry, traceNativePackages, zipFunctionBundle } from "@neon/config-runtime";
-//#region src/commands/config.ts
+// src/commands/config.ts
 var config_exports = /* @__PURE__ */ __exportAll({
 	ConfigInstallFailed: () => ConfigInstallFailed,
 	addCmd: () => addCmd,
@@ -1109,5 +1109,4 @@ const createBranchFromPolicyOnCheckout = async (props) => {
 		throw err;
 	}
 };
-//#endregion
 export { missingDependencies as _, applyPolicyOnCreate as a, config_exports as c, ensureConfigPackages as d, envFlag as f, installCommandFrom as g, initCmd as h, applyFlags as i, createBranchFromPolicyOnCheckout as l, handler as m, addCmd as n, builder as o, envPullFlag as p, applyCmd as r, command as s, ConfigInstallFailed as t, describe as u, planCmd as v, status as y };

package/dist/_chunks/{connection_string-DB4awPzZ.js → connection_string-C9e7N4xk.js}

@@ -1,11 +1,11 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { n as defaultConnectionRole } from "./roles-C3M4q9DS.js";
+import { t as __exportAll } from "./rolldown-runtime-BJohB4LM.js";
+import { n as defaultConnectionRole } from "./roles-Bd9r8_pX.js";
 import { writer } from "../writer.js";
 import { EndpointType } from "../utils/api_enums.js";
 import { branchIdFromProps, fillSingleProject } from "../utils/enrichers.js";
 import { psql } from "../utils/psql.js";
 import { parsePITBranch } from "../utils/point_in_time.js";
-//#region src/commands/connection_string.ts
+// src/commands/connection_string.ts
 var connection_string_exports = /* @__PURE__ */ __exportAll({
 	SSL_MODES: () => SSL_MODES,
 	aliases: () => aliases,
@@ -150,5 +150,4 @@ const handler = async (props) => {
 	] });
 	else process.stdout.write(connectionString.toString() + "\n");
 };
-//#endregion
 export { connection_string_exports as a, command as i, aliases as n, describe as o, builder as r, handler as s, SSL_MODES as t };

package/dist/_chunks/{credential_io-BS-0Pmwc.js → credential_io-DbeSh3Pl.js}

@@ -1,11 +1,11 @@
-import { t as writeSecretFile } from "./secure_file-BucZj4yQ.js";
-import { a as isOwnedCredentialPath } from "./paths-DMq0Lt7a.js";
-import { f as profilesFilePath, v as CRED_STORAGE_FILE, y as CRED_STORAGE_KEYRING } from "./profiles-DIB1av2Q.js";
+import { t as writeSecretFile } from "./secure_file-Caskdohg.js";
+import { a as isOwnedCredentialPath } from "./paths-B55ZfOg1.js";
+import { f as profilesFilePath, v as CRED_STORAGE_FILE, y as CRED_STORAGE_KEYRING } from "./profiles-DTazQtjK.js";
 import { tryLoadKeyring } from "../keyring.js";
 import { existsSync, readFileSync, rmSync } from "node:fs";
 import { dirname } from "node:path";
 import { createHash } from "node:crypto";
-//#region ../../internals/cli-core/dist/credentials.js
+// ../../internals/cli-core/dist/credentials.js
 /**
 * # Stored credentials — one file per account, two kinds
 *
@@ -188,8 +188,7 @@ const isSameCredential = (existingKey, replacementKey) => {
 	const trimmed = existingKey.trim();
 	return trimmed !== "" && trimmed === replacementKey.trim();
 };
-//#endregion
-//#region ../../internals/cli-core/dist/credential_store.js
+// ../../internals/cli-core/dist/credential_store.js
 const KEYRING_SERVICE = "com.neon.neon-cli";
 /** Hashing the resolved profiles directory isolates config roots while keeping profile names visible. */
 const keyringAccount = (configDir, profile) => `cli:${createHash("sha256").update(dirname(profilesFilePath(configDir))).digest("hex")}:${profile}`;
@@ -411,8 +410,6 @@ const createCredentialStore = (dir, options = {}) => {
 		assertKeyringWritable
 	};
 };
-//#endregion
-//#region src/credential_io.ts
+// src/credential_io.ts
 const storeFor = (dir) => createCredentialStore(dir, { keyring: tryLoadKeyring() });
-//#endregion
 export { OAUTH as a, describeScope as c, scopeOf as d, API_KEY as i, interpretCredentials as l, KEYRING_SERVICE as n, apiKeyCredentials as o, keyringAccount as r, credentialLabel as s, storeFor as t, isSameCredential as u };

package/dist/_chunks/{credentials-BSjE9fRR.js → credentials-BMBNmW0t.js}

@@ -1,9 +1,9 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as __exportAll } from "./rolldown-runtime-BJohB4LM.js";
 import { log } from "../log.js";
 import { isNeonApiError, messageFromBody, retryOnLock } from "../api.js";
 import { writer } from "../writer.js";
 import { branchIdFromProps, fillSingleProject } from "../utils/enrichers.js";
-//#region src/commands/credentials.ts
+// src/commands/credentials.ts
 var credentials_exports = /* @__PURE__ */ __exportAll({
 	aliases: () => aliases,
 	builder: () => builder,
@@ -142,5 +142,4 @@ const revoke = async (props) => {
 	await withCredentialNotFound(props.tokenId, branchId, () => retryOnLock(() => props.apiClient.revokeCredential(props.projectId, branchId, props.tokenId)));
 	log.info(`Credential ${props.tokenId} revoked`);
 };
-//#endregion
 export { credentials_exports as a, list as c, rotate as d, create as i, reveal as l, builder as n, describe as o, command as r, handler as s, aliases as t, revoke as u };

package/dist/_chunks/{data_api-Djxj5ZQD.js → data_api-CHDwvMTG.js}

@@ -1,10 +1,10 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as __exportAll } from "./rolldown-runtime-BJohB4LM.js";
 import { log } from "../log.js";
 import { isNeonApiError, retryOnLock } from "../api.js";
 import { getCliName } from "../utils/cli_name.js";
 import { writer } from "../writer.js";
 import { branchIdFromProps, fillSingleProject, resolveSingleDatabase } from "../utils/enrichers.js";
-//#region src/commands/data_api.ts
+// src/commands/data_api.ts
 var data_api_exports = /* @__PURE__ */ __exportAll({
 	builder: () => builder,
 	command: () => command,
@@ -259,5 +259,4 @@ const deleteDataApi = async (props) => {
 	}
 	log.info(`Data API deleted for ${database} on branch ${branchId}`);
 };
-//#endregion
 export { handler as a, describe as i, command as n, data_api_exports as r, builder as t };

package/dist/_chunks/{databases-Dok4wru7.js → databases-DC2h6IW2.js}

@@ -1,8 +1,8 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as __exportAll } from "./rolldown-runtime-BJohB4LM.js";
 import { retryOnLock } from "../api.js";
 import { writer } from "../writer.js";
 import { fillSingleProject, resolveBranchFromProps } from "../utils/enrichers.js";
-//#region src/commands/databases.ts
+// src/commands/databases.ts
 var databases_exports = /* @__PURE__ */ __exportAll({
 	DATABASE_FIELDS: () => DATABASE_FIELDS,
 	aliases: () => aliases,
@@ -80,5 +80,4 @@ const deleteDb = async (props) => {
 		humanTitle: `Database deleted from ${branch?.name ?? branchId}`
 	});
 };
-//#endregion
 export { create as a, describe as c, command as i, handler as l, aliases as n, databases_exports as o, builder as r, deleteDb as s, DATABASE_FIELDS as t, list as u };

package/dist/_chunks/{deploy-D7B0Xfjg.js → deploy-DmKZcAnR.js}

@@ -1,8 +1,8 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as __exportAll } from "./rolldown-runtime-BJohB4LM.js";
 import { fillSingleProject } from "../utils/enrichers.js";
-import { f as envFlag, i as applyFlags, p as envPullFlag, r as applyCmd } from "./config-BH_qRHiG.js";
+import { f as envFlag, i as applyFlags, p as envPullFlag, r as applyCmd } from "./config-7SIE_C5O.js";
 import { DEPLOY_COMMANDS_EPILOGUE } from "../commands/deploy_help.js";
-//#region src/commands/deploy.ts
+// src/commands/deploy.ts
 var deploy_exports = /* @__PURE__ */ __exportAll({
 	builder: () => builder,
 	command: () => command,
@@ -29,5 +29,4 @@ const builder = (argv) => argv.usage("$0 deploy [options]").options({
 	...envPullFlag
 }).middleware(fillSingleProject).epilogue(DEPLOY_COMMANDS_EPILOGUE).strict();
 const handler = (props) => applyCmd(props);
-//#endregion
 export { handler as a, describe as i, command as n, deploy_exports as r, builder as t };

package/dist/_chunks/{dev-CSvxAecE.js → dev-Dv0HKcFF.js}

@@ -1,15 +1,15 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as __exportAll } from "./rolldown-runtime-BJohB4LM.js";
 import { log } from "../log.js";
 import { isClaimableEnvTarget } from "../claimable/state.js";
 import { getCliName } from "../utils/cli_name.js";
 import { defaultDevEnvFiles, readEnvFile, resolveEnvFilePath } from "../env_file.js";
-import { l as functionBaseUrlKey } from "./env-BpP3Dqpe.js";
-import { branchIdResolve } from "../utils/enrichers.js";
-import { bundleEntry } from "../utils/esbuild.js";
-import { a as resolveDevEnv } from "./env-BNm69Qh8.js";
-import { f as envFlag } from "./config-BH_qRHiG.js";
+import { l as functionBaseUrlKey } from "./env-JgoSsmyt.js";
+import { a as resolveDevEnv } from "./env-CIFMBEon.js";
 import { findConfigFunctionBySource, resolveFunctionsFromConfig } from "../dev/functions.js";
 import { resolveWatchInputs } from "../dev/inputs.js";
+import { branchIdResolve } from "../utils/enrichers.js";
+import { bundleEntry } from "../utils/esbuild.js";
+import { f as envFlag } from "./config-7SIE_C5O.js";
 import { existsSync, mkdirSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { basename, dirname, join, relative, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -18,7 +18,7 @@ import { spawn, spawnSync } from "node:child_process";
 import { bundleAsIs, describeNativeFinding, findUndeclaredNativePackages, resolveEsbuildEntry } from "@neon/config-runtime";
 import { once } from "node:events";
 import { createServer } from "node:net";
-//#region src/commands/dev.ts
+// src/commands/dev.ts
 var dev_exports = /* @__PURE__ */ __exportAll({
 	builder: () => builder,
 	captureShellEnv: () => captureShellEnv,
@@ -941,5 +941,4 @@ const resolveRuntimePath = () => {
 	if (!existsSync(candidate)) throw new Error(`Could not locate the dev runtime at ${candidate}`);
 	return candidate;
 };
-//#endregion
 export { devBundleDir as a, diffUnits as c, handler as d, loadDevEnvFiles as f, sourceFunctionUrlOverlay as g, reportDevCredential as h, describe as i, formatEnvFiles as l, planFunctionsToUnits as m, captureShellEnv as n, devEnvContext as o, localFunctionUrlEnv as p, command as r, dev_exports as s, builder as t, formatEnvSummary as u };

package/dist/_chunks/{diff-DhxxbdQE.js → diff-dnxneH0u.js}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as __exportAll } from "./rolldown-runtime-BJohB4LM.js";
 import { log } from "../log.js";
 import { isNeonApiError } from "../api.js";
 import { writer } from "../writer.js";
@@ -6,7 +6,7 @@ import { looksLikeBranchId } from "../utils/formats.js";
 import { fillSingleProject, listAllProjectBranches } from "../utils/enrichers.js";
 import { renderDatabaseSchemaDiff, renderSchemaDiffReport } from "../utils/git_diff.js";
 import chalk from "chalk";
-//#region src/commands/diff.ts
+// src/commands/diff.ts
 var diff_exports = /* @__PURE__ */ __exportAll({
 	builder: () => builder,
 	command: () => command,
@@ -174,5 +174,4 @@ const writeStructured = (props, diffs) => {
 		"diff"
 	] });
 };
-//#endregion
 export { handler as a, diff_exports as i, command as n, describe as r, builder as t };

package/dist/_chunks/{docs-CrVybkTP.js → docs-CClmgj_Z.js}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as __exportAll } from "./rolldown-runtime-BJohB4LM.js";
 import { getCliAgent, isCi } from "../env.js";
 import pkg_default from "../pkg.js";
 import { isNetworkError } from "../errors.js";
@@ -6,7 +6,7 @@ import { resolveOutputWidth, stripAnsi, truncateTo } from "../human_table.js";
 import { writer } from "../writer.js";
 import { single } from "../utils/flags.js";
 import chalk from "chalk";
-//#region src/commands/docs.ts
+// src/commands/docs.ts
 var docs_exports = /* @__PURE__ */ __exportAll({
 	DEFAULT_SITE_SEARCH_URL: () => DEFAULT_SITE_SEARCH_URL,
 	MAX_LIMIT: () => 40,
@@ -193,5 +193,4 @@ function parseSearchHits(raw) {
 		};
 	});
 }
-//#endregion
 export { builder as a, docs_exports as c, resolveSiteSearchUrl as d, siteSearchHeaders as f, SITE_SEARCH_CATEGORIES as i, formatSearchResults as l, MAX_LIMIT as n, command as o, MAX_QUERY_LENGTH as r, describe as s, DEFAULT_SITE_SEARCH_URL as t, parseSearchHits as u };

package/dist/_chunks/{env-5HS5qQGd.js → env-BOt9AZ1j.js}

@@ -1,19 +1,19 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as __exportAll } from "./rolldown-runtime-BJohB4LM.js";
 import { log } from "../log.js";
 import { ensureGitignored } from "../context.js";
 import { isClaimableEnvTarget } from "../claimable/state.js";
 import { getCliName } from "../utils/cli_name.js";
 import { deprecatedServiceMessage, parseServices, servicesFlagValue, servicesOption } from "../neon_services.js";
 import { mergeEnvFile, readEnvFile, resolveEnvFilePath } from "../env_file.js";
-import { t as NEON_ENV_VAR_KEYS, u as isFunctionBaseUrlKey } from "./env-BpP3Dqpe.js";
+import { t as NEON_ENV_VAR_KEYS, u as isFunctionBaseUrlKey } from "./env-JgoSsmyt.js";
 import { ENV_PULL_KEY_HELP, ENV_PULL_SERVICES, envKeysForSelection, envPullFlagValue, ownedEnvServiceKeys, parseEnvPullKeys } from "../env_services.js";
+import { i as dropClaimableUnsupported, o as resolveNeonEnvVars } from "./env-CIFMBEon.js";
 import { fillSingleProject, resolveBranchRef } from "../utils/enrichers.js";
 import { warnAiGateway } from "../utils/ai_gateway_notice.js";
-import { i as dropClaimableUnsupported, o as resolveNeonEnvVars } from "./env-BNm69Qh8.js";
 import { formatPulledEnv, pulledBranch } from "../commands/env_output.js";
 import { existsSync } from "node:fs";
 import chalk from "chalk";
-//#region src/commands/env.ts
+// src/commands/env.ts
 var env_exports = /* @__PURE__ */ __exportAll({
 	ENV_PULL_SKIPPED_HINT: () => ENV_PULL_SKIPPED_HINT,
 	autoPullEnvAfterPin: () => autoPullEnvAfterPin,
@@ -280,5 +280,4 @@ const pickNeonVars = (vars) => {
 	for (const [name, value] of Object.entries(vars)) if (NEON_VAR_NAMES.some((key) => key === name) || isFunctionBaseUrlKey(name)) out[name] = value;
 	return out;
 };
-//#endregion
 export { describe as a, pull as c, command as i, autoPullEnvAfterPin as n, env_exports as o, builder as r, handler as s, ENV_PULL_SKIPPED_HINT as t };

package/dist/_chunks/{env-BNm69Qh8.js → env-CIFMBEon.js}

@@ -2,14 +2,14 @@ import { log } from "../log.js";
 import { getCliName } from "../utils/cli_name.js";
 import { declaredNeonServices } from "../config_services.js";
 import { loadProjectConfig } from "../project.js";
-import { a as defaultAiGatewayCredential, c as fetchEnvKeysState, d as isLiveCredential, h as toEntries, i as credentialName, l as functionBaseUrlKey, m as resolveBranchPolicy, n as createApiFromOptions, o as defaultStorageCredential, p as policyEnvKeys, r as credentialEnvKeys, t as NEON_ENV_VAR_KEYS, u as isFunctionBaseUrlKey } from "./env-BpP3Dqpe.js";
+import { a as defaultAiGatewayCredential, c as fetchEnvKeysState, d as isLiveCredential, h as toEntries, i as credentialName, l as functionBaseUrlKey, m as resolveBranchPolicy, n as createApiFromOptions, o as defaultStorageCredential, p as policyEnvKeys, r as credentialEnvKeys, t as NEON_ENV_VAR_KEYS, u as isFunctionBaseUrlKey } from "./env-JgoSsmyt.js";
 import { ENV_PULL_SERVICES, envKeysForSelection, serviceForEnvKey, servicesForEnvKeys } from "../env_services.js";
 import { formatInstallCommand, resolvePackageManager } from "../utils/package_manager.js";
 import { StagingOnlyError } from "../utils/staging.js";
 import { ErrorCode, PlatformError, createNeonApiFromOptions, isPlatformError } from "@neon/config";
 import { credentialScopesSatisfied } from "@neon/config/v1";
 import { plan, pullConfig } from "@neon/config-runtime";
-//#region ../../internals/env-core/dist/reuse-secrets.js
+// ../../internals/env-core/dist/reuse-secrets.js
 /**
 * Resolve a branch's env while keeping secrets the caller already holds.
 *
@@ -198,8 +198,7 @@ function halfReusable(named, defaultMeta, requiredScopes) {
 	if (defaultMeta !== null) return named.tokenId === defaultMeta.tokenId;
 	return credentialScopesSatisfied(named.scopes, requiredScopes);
 }
-//#endregion
-//#region src/dev/env.ts
+// src/dev/env.ts
 /** The API-targeting options every runtime call forwards from the context. */
 const apiOptions = (ctx) => ({
 	...ctx.apiKey ? { apiKey: ctx.apiKey } : {},
@@ -764,5 +763,4 @@ const loadNeonConfig = async (ctx) => {
 		throw err;
 	}
 };
-//#endregion
 export { resolveDevEnv as a, dropClaimableUnsupported as i, MissingBranchContextError as n, resolveNeonEnvVars as o, ServiceNotOnBranchError as r, DevEnvMismatchError as t };

package/dist/_chunks/{env-BpP3Dqpe.js → env-JgoSsmyt.js}

@@ -1,6 +1,6 @@
-import { n as defaultConnectionRole, t as NEON_DEFAULT_OWNER_ROLE } from "./roles-C3M4q9DS.js";
+import { n as defaultConnectionRole, t as NEON_DEFAULT_OWNER_ROLE } from "./roles-Bd9r8_pX.js";
 import { ErrorCode, PlatformError, createNeonApiFromOptions, deriveCredentialScopes, isPlatformError, resolveConfig } from "@neon/config/v1";
-//#region ../../internals/env-core/dist/env.js
+// ../../internals/env-core/dist/env.js
 /**
 * The Neon env core — resolving a branch's env from the Neon API, and projecting it into
 * OS-level `{ KEY: value }` pairs.
@@ -651,5 +651,4 @@ function toEntries(env) {
 	if (env.functions) for (const slug of Object.keys(env.functions).sort()) put(functionBaseUrlKey(slug), env.functions[slug]?.baseUrl);
 	return out;
 }
-//#endregion
 export { defaultAiGatewayCredential as a, fetchEnvKeysState as c, isLiveCredential as d, parseFunctionBaseUrlKey as f, toEntries as h, credentialName as i, functionBaseUrlKey as l, resolveBranchPolicy as m, createApiFromOptions as n, defaultStorageCredential as o, policyEnvKeys as p, credentialEnvKeys as r, fetchEnvKeys as s, NEON_ENV_VAR_KEYS as t, isFunctionBaseUrlKey as u };