neonctl 2.34.1 → 2.35.1

package/README.md

@@ -58,6 +58,40 @@ neon projects list --api-key <neon_api_key>
 
 For information about obtaining an Neon API key, see [Authentication](https://api-docs.neon.tech/reference/authentication), in the _Neon API Reference_.
 
+## Project and branch creation
+
+Choose the PostgreSQL version when creating a project:
+
+```bash
+neon projects create --name my-project --pg-version 18
+```
+
+Supported versions are `14` through `19`; version `19` is available only in
+regions where it has been enabled.
+
+Create a protected branch when it should not be modified or deleted by routine
+automation:
+
+```bash
+neon branches create --project-id <project-id> --name production --protected
+```
+
+### Enable logical replication
+
+Enable logical replication for every endpoint in an existing project:
+
+```bash
+neon projects update <project-id> --enable-logical-replication
+```
+
+The CLI asks for confirmation because enabling logical replication suspends
+active endpoints and cannot be undone. For non-interactive automation, pass
+`--yes` explicitly:
+
+```bash
+neon projects update <project-id> --enable-logical-replication --yes
+```
+
 ## Connect with psql
 
 ### The `psql` command

package/dist/commands/branches.js

@@ -97,6 +97,10 @@ export const builder = (argv) => argv
         type: "string",
         requiresArg: true,
     },
+    protected: {
+        describe: branchCreateRequest["branch.protected"].description,
+        type: "boolean",
+    },
 }), (args) => create(args))
     .command("reset <id|name>", "Reset a branch", (yargs) => yargs.options({
     parent: {
@@ -299,6 +303,9 @@ const create = async (props) => {
                     expires_at: new Date(props["expires-at"]).toISOString(),
                 }
                 : {}),
+            ...(props.protected !== undefined
+                ? { protected: props.protected }
+                : {}),
         },
         endpoints: props.compute
             ? [

package/dist/commands/projects.js

@@ -92,6 +92,11 @@ export const builder = (argv) => {
                 .description,
             type: "string",
         },
+        "pg-version": {
+            describe: "Major PostgreSQL version (14–19). Version 19 is available only in regions where it has been enabled.",
+            type: "number",
+            choices: [14, 15, 16, 17, 18, 19],
+        },
         "set-context": {
             type: "boolean",
             describe: "Set the current context to the new project",
@@ -128,6 +133,15 @@ export const builder = (argv) => {
             describe: projectUpdateRequest["project.name"].description,
             type: "string",
         },
+        "enable-logical-replication": {
+            describe: "Enable logical replication for all project endpoints. This suspends active endpoints and cannot be disabled.",
+            type: "boolean",
+        },
+        yes: {
+            type: "boolean",
+            default: false,
+            describe: "Skip the confirmation prompt when enabling logical replication.",
+        },
     }), async (args) => {
         await update(args);
     })
@@ -226,6 +240,9 @@ const create = async (props) => {
     if (props.role) {
         project.branch.role_name = props.role;
     }
+    if (props.pgVersion !== undefined) {
+        project.pg_version = props.pgVersion;
+    }
     if (props.cu) {
         project.default_endpoint_settings = props.cu
             ? getComputeUnits(props.cu)
@@ -262,6 +279,30 @@ const deleteProject = async (props) => {
 };
 const update = async (props) => {
     const project = {};
+    if (props.enableLogicalReplication !== undefined) {
+        if (!props.enableLogicalReplication) {
+            throw new Error("Logical replication cannot be disabled once it has been enabled.");
+        }
+        if (!props.yes) {
+            if (isCi() || !process.stdin.isTTY) {
+                throw new Error("Enabling logical replication requires confirmation. Re-run interactively or pass --yes.");
+            }
+            const { proceed } = await prompts({
+                onState: onPromptState,
+                type: "confirm",
+                name: "proceed",
+                message: "Enable logical replication? This suspends active endpoints and cannot be undone.",
+                initial: false,
+            });
+            if (!proceed) {
+                log.info("Logical replication was not enabled.");
+                return;
+            }
+        }
+        project.settings = {
+            enable_logical_replication: true,
+        };
+    }
     if (props.hipaa !== undefined) {
         if (!project.settings) {
             project.settings = {};

package/dist/context.js

@@ -33,7 +33,37 @@ export const isCurrentBranchProbe = (args) => args.currentBranch === true &&
 export const isConfigInit = (args) => args._[0] === "config" && args._[1] === "init";
 const CONTEXT_FILE = ".neon";
 const GITIGNORE_FILE = ".gitignore";
-const wrapWithContextFile = (dir) => resolve(dir, CONTEXT_FILE);
+const canAccessFile = (file) => {
+    try {
+        accessSync(file);
+        return true;
+    }
+    catch {
+        return false;
+    }
+};
+/**
+ * Walk upward to find an existing `.neon` file.
+ *
+ * The walk keeps the established home and POSIX-root boundaries, then also
+ * stops when resolving a parent makes no progress. That second guard handles
+ * Windows drive and UNC-share roots, whose paths do not equal `normalize("/")`.
+ */
+export const walkContextFile = (cwd, root, home, resolvePath, canAccess) => {
+    let currentDir = cwd;
+    while (currentDir !== root && currentDir !== home) {
+        const contextFile = resolvePath(currentDir, CONTEXT_FILE);
+        if (canAccess(contextFile)) {
+            return contextFile;
+        }
+        const parentDir = resolvePath(currentDir, "..");
+        if (parentDir === currentDir) {
+            break;
+        }
+        currentDir = parentDir;
+    }
+    return resolvePath(cwd, CONTEXT_FILE);
+};
 /**
  * Resolve the default `.neon` path for the current working directory.
  *
@@ -52,22 +82,7 @@ const wrapWithContextFile = (dir) => resolve(dir, CONTEXT_FILE);
  * `cwd` is overridable so tests can exercise the walk-up without mutating
  * `process.cwd()` (which would race with other tests running in parallel).
  */
-export const currentContextFile = (cwd = process.cwd()) => {
-    let currentDir = cwd;
-    const root = normalize("/");
-    const home = homedir();
-    while (currentDir !== root && currentDir !== home) {
-        try {
-            accessSync(resolve(currentDir, CONTEXT_FILE));
-            return wrapWithContextFile(currentDir);
-        }
-        catch {
-            // ignore
-        }
-        currentDir = resolve(currentDir, "..");
-    }
-    return wrapWithContextFile(cwd);
-};
+export const currentContextFile = (cwd = process.cwd()) => walkContextFile(cwd, normalize("/"), homedir(), resolve, canAccessFile);
 export const readContextFile = (file) => {
     try {
         return JSON.parse(readFileSync(file, "utf-8"));

package/dist/dev/env.js

@@ -45,8 +45,9 @@ export class MissingBranchContextError extends Error {
  *      the branch is missing, we stop with a {@link DevEnvMismatchError} pointing at
  *      `neonctl deploy`. Otherwise `fetchEnv` evaluates the policy.
  *   2. no `neon.ts`, but a project + branch are known -> `pullConfig` reads the
- *      branch's live state (incl. Auth / Data API enablement) into a config, then
- *      `fetchEnv` resolves what is actually enabled.
+ *      branch's live state (Auth / Data API enablement plus any object-storage
+ *      buckets) into a config, then `fetchEnv` resolves what is actually enabled —
+ *      so a branch with a bucket gets its `AWS_*` storage vars pulled with no policy.
  *   3. otherwise -> throw {@link MissingBranchContextError}.
  *
  * Unlike {@link resolveDevEnv}, this never swallows errors — callers decide how to
@@ -78,8 +79,11 @@ export const resolveNeonEnvVars = async (ctx) => {
             branchId: ctx.branchId,
             ...apiOptions(ctx),
         });
-        // `pulled.config` is already a `Config` (static auth/dataApi toggles + a branch
-        // tuning closure), so it feeds straight into fetchEnv — no wrapping needed.
+        // `pulled.config` is already a `Config` (static auth/dataApi toggles, any
+        // object-storage `preview.buckets`, and a branch tuning closure), so it feeds
+        // straight into fetchEnv — no wrapping needed. pullConfig excludes functions and
+        // the AI Gateway (neither can be faithfully read back), so fetchEnv never probes
+        // the functions API here and only mints a storage credential when a bucket exists.
         return await fetchAndProject(pulled.config, ctx);
     }
     throw new MissingBranchContextError("No project/branch context found. Link a branch (`neonctl link` / " +

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "neonctl",
-  "version": "2.34.1",
+  "version": "2.35.1",
   "description": "CLI tool for Neon Serverless Postgres",
   "keywords": [
     "neon",
@@ -51,10 +51,10 @@
     "which": "3.0.1",
     "yaml": "^2.9.0",
     "yargs": "17.7.2",
+    "@neon/sdk": "1.2.0",
     "@neon/config": "0.9.5",
-    "@neon/config-runtime": "0.9.5",
-    "@neon/env": "0.11.4",
-    "@neon/sdk": "1.2.0"
+    "@neon/config-runtime": "0.9.6",
+    "@neon/env": "0.11.4"
   },
   "optionalDependencies": {
     "esbuild": "0.28.1"