PlanetScale CLI

Parameter listings now display required updates.

Added per-deploy-request aggressive cutover. The refresh-schema command now waits for the schema snapshot and returns poll failures instead of a refresh timeout.

The CLI now supports Postgres extension toggle commands and VTGate parameter commands, and deploy requests can be retried for failed operations. Keyspace --max-storage and --storage accept human-readable sizes, and auth login messaging now describes expired and denied device logins in plain terms.

Read-only replica CLI commands are renamed, and deprecated read-only-replica subcommands now emit a warning. The deprecated replica command is hidden and the delete JSON output stays compatible.

New commands manage keyspace parameters, using namespaces and skipping unchanged values. Unknown commands now fail with exit code 2, and the CLI warns when routing rules may not describe live routing.

The pscale data-imports command has been removed, and move-tables complete and cancel now accept --ignore-source-keyspace.

Keyspace settings commands now accept storage settings, with the API validating --storage against the keyspace's disk scaling strategy. The workflow and data-imports subcommands now show a deprecation notice and point to move-tables.

Adds pscale branch vtctld move-tables start and stop commands and renames the CLI subcommand to vtctl, and clarifies what --keep-data keeps on move-tables complete and cancel. Also fixes d1 import Postgres SSL defaults, the D1 metadata table, verify errors, and a false-positive verify mismatch on UUID column case.

Extension commands now pick up profile updates instead of relying on the previous profile handling.

Fixed a SQL injection vulnerability in D1 import CHECK expression parsing. Exploit-narration comments were also trimmed to short invariant notes.

The CLI adds external keyspace creation and keyspace rollout concurrency settings, including a --max-rollout flag shown with a default of 1 in help. Reported schema lint errors from create-external --dry-run, trimmed spaces around extension names, and noted that pscale workflow will be deprecated soon.

Fixed a Neki role lookup failure when targeting a router, replica, or shard, and pinned inspect to a shard. Also documented Neki inherited roles and updated agent guide concepts.

Adds MoveTables list support with lifecycle guidance and raw list response handling, plus a metrics report catalog and branch-wide change request commands. Traffic state matching now aligns with the exact states the API reports.

The pscale keyspace update-settings command accepts throttler flags, which are omitted when unchanged, and throttler help text is clarified. Also consolidated dependency bumps and resolved a Go versus Vitess version conflict.

The CLI now supports Neki, and Neki restore sizing and cluster size are fixed.

Keyspace settings commands now support disk autoscaling configuration.

D1 CHECK and GENERATED expression rewrites now handle SQLite-only functions, preserving IN() spacing and fixing Bugbot findings. Includes a fix for GLOB rewrites against literals.

Adds commands for managing read-only replicas, including replica selection for Postgres restores, and a webhook authorization token option aligned with the authorization header API. Also includes a --db-name flag for Postgres psql sessions and a live connections request timeout increase.

Adds org SSO domain show and verify --wait, plus new IdP role flags with mutual exclusion enforcement. Lookup-vindex now defaults continue-after-copy-with-owner to true. Stops the verify spinner before printing domain and tightens SSO client/JSON behavior.

Adds new commands for Insights (query show, summary, recommendations, traffic budget) and billing (invoice list/show/line-items), plus backup protection status control and organization team management. Fixes include making --protected=false actually unprotect backups, rejecting invalid query/filter values, and improving spend-alert flag semantics.