@garuhq/cli 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,34 @@
+# Changelog
+
+All notable changes to `@garuhq/cli` are documented in this file. Format:
+[Keep a Changelog](https://keepachangelog.com/en/1.1.0/). Versioning: [SemVer](https://semver.org/).
+
+## [0.1.0] — 2026-04-08
+
+### Added
+
+- Initial public beta. Single-binary CLI for the Garu payment gateway.
+- **`garu login`** — interactive paste-and-validate flow. Hits `/api/meta` to confirm reachability, stores the key at `~/.config/garu/credentials.json` with mode `0600` (directory `0700`). Honors `$XDG_CONFIG_HOME`.
+- **`garu logout`** — remove one profile or the entire credentials file.
+- **`garu auth switch <profile>`** — toggle the active credentials profile.
+- **`garu charges create`** — PIX, credit card, or boleto. Full flag set including `--idempotency-key`.
+- **`garu charges get <id>`** — fetch a single charge.
+- **`garu charges refund <id>`** — full or partial (`--amount`, `--reason`).
+- **`garu doctor`** — environment diagnostic: CLI version, API reachability, credentials source and file mode, installed agents (Claude Code, Cursor, Codex, Windsurf, Claude Desktop, VS Code MCP).
+- **Auth priority chain** per SPEC §7: `--api-key` > `GARU_API_KEY` > credentials file active profile.
+- **Output modes:** TTY-aware pretty output vs strict JSON on pipe or `--json`. Errors as `{"error":{"code","message"}}` on stdout + exit 1 in JSON mode; red `Error:` line on stderr in pretty mode.
+- **Global flags:** `--api-key`, `-p/--profile`, `--json`, `-q/--quiet`.
+- Dogfoods the official SDK: every HTTP call flows through `@garuhq/node@0.1.0`.
+- Two install channels at launch: **npm** (`npm install -g @garuhq/cli`) and **`curl | bash`** (`install.sh` served from GitHub raw).
+- Prebuilt binaries for `linux-x64`, `darwin-arm64`, `darwin-x64` via `bun build --compile` in the release workflow.
+- GitHub Actions CI runs typecheck, tests, and build on Node 18 / 20 / 22, plus shellcheck on `install.sh`.
+
+### Known limitations
+
+- **`garu charges list`** intentionally omitted — the backend does not yet expose `GET /api/transactions`. Will land when the backend grows a seller-scoped list endpoint.
+- **Windows binary** not yet shipped — `bun --target=windows-x64` is still beta. Windows users can `npm install -g @garuhq/cli` in the meantime.
+- **Homebrew tap** not yet published — use `curl | bash` or `npm` in v0.1.
+- **`garu.com.br/install.sh`** pretty URL not yet live — README advertises the GitHub raw URL until the marketing site (SPEC W1) ships.
+- **`garu mcp install <tool>`** depends on the MCP server (SPEC W4) which has not shipped yet.
+- **`customers`, `products`, `subscriptions`, `webhooks`, `keys`** command groups not included in v0.1 per SPEC Phase 1 scope.
+- **Browser-based OAuth** deferred; v0.1 uses paste-and-validate like Stripe CLI.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Garu Pagamentos
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,126 @@
+# garu-cli
+
+Official command-line interface for the [Garu](https://garu.com.br) payment gateway.
+
+```
+$ garu charges create --type pix --product-id prod-uuid \
+    --customer-name "Maria Silva" \
+    --customer-email maria@exemplo.com.br \
+    --customer-document 12345678909 \
+    --customer-phone 11987654321
+Charge 4472
+  status:  pending
+  amount:  4990
+  method:  pix
+  date:    2026-04-08T18:30:00.000Z
+```
+
+## Install
+
+```bash
+# curl | bash (Linux, macOS)
+curl -fsSL https://raw.githubusercontent.com/Garu-Pagamentos/garu-cli/main/install.sh | bash
+
+# npm (all platforms, including Windows)
+npm install -g @garuhq/cli
+```
+
+> The pretty URL `curl -fsSL https://garu.com.br/install.sh | bash` is coming —
+> waiting on the marketing site rebuild (SPEC W1). Use the GitHub raw URL for now.
+
+Verify the install:
+
+```bash
+garu doctor
+```
+
+## Authentication
+
+The CLI resolves your API key from the first of:
+
+1. `--api-key <key>` flag
+2. `GARU_API_KEY` environment variable
+3. `~/.config/garu/credentials.json` (created by `garu login`, mode `0600`)
+
+### Interactive
+
+```bash
+$ garu login
+? Paste your Garu API key (sk_live_... or sk_test_...) ****************
+→ Validating key with Garu...
+✓ Saved profile 'default' to ~/.config/garu/credentials.json
+```
+
+### Scripted (CI)
+
+```bash
+export GARU_API_KEY=sk_live_...
+garu charges create --type pix ...
+```
+
+### Multi-profile
+
+```bash
+garu login --profile test --api-key sk_test_...
+garu login --profile live --api-key sk_live_...
+garu auth switch live
+```
+
+## Commands
+
+| Command                          | Description                                 |
+| -------------------------------- | ------------------------------------------- |
+| `garu login`                     | Paste an API key, validate, save            |
+| `garu logout [--profile <name>]` | Remove saved credentials                    |
+| `garu auth switch <profile>`     | Set the active credentials profile          |
+| `garu charges create`            | Create a PIX, credit-card, or boleto charge |
+| `garu charges get <id>`          | Fetch a single charge                       |
+| `garu charges refund <id>`       | Refund a charge (full or partial)           |
+| `garu doctor`                    | Environment diagnostic                      |
+| `garu --version`                 | Print the CLI version                       |
+| `garu --help`                    | Top-level help                              |
+
+See `garu <command> --help` for per-command flags.
+
+## Output modes
+
+The CLI auto-detects whether it's running interactively:
+
+- **TTY (pretty):** colored output, status lines on stderr, formatted result on stdout.
+- **Pipe / CI / `--json`:** strict JSON on stdout, errors as `{"error":{"code","message"}}` on stdout with exit code 1. Nothing on stderr in this mode.
+
+```bash
+# Pipe-safe
+garu charges get 4472 | jq '.status'
+```
+
+Global flags:
+
+- `--api-key <key>` — override auth chain
+- `-p, --profile <name>` — use a specific credentials profile
+- `--json` — force JSON output
+- `-q, --quiet` — suppress status lines
+
+## `garu doctor`
+
+Prints a structured report of your environment:
+
+```json
+{
+  "cli": { "version": "0.1.0" },
+  "api": { "reachable": true, "url": "https://garu.com.br", "version": "1.3.2" },
+  "credentials": { "path": "...", "source": "file", "profile": "default", "fileMode": "0600" },
+  "agents": {
+    "claudeCode": true,
+    "cursor": true,
+    "codex": false,
+    "windsurf": false,
+    "claudeDesktop": true,
+    "vscodeMcpInCwd": false
+  }
+}
+```
+
+## License
+
+MIT.

package/bin/garu.cjs

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+// Thin shim for `npm i -g @garuhq/cli` installs.
+// The real CLI lives in `../dist/index.cjs`, produced by `npm run build`.
+require('../dist/index.cjs');

package/dist/index.cjs

@@ -0,0 +1,591 @@
+'use strict';
+
+var commander = require('commander');
+var os = require('os');
+var path = require('path');
+var promises = require('fs/promises');
+var pc = require('picocolors');
+var node = require('@garuhq/node');
+var fs = require('fs');
+var prompts = require('@inquirer/prompts');
+
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var pc__default = /*#__PURE__*/_interopDefault(pc);
+
+// src/index.ts
+
+// src/lib/errors.ts
+var CliError = class extends Error {
+  code;
+  exitCode;
+  constructor(code, message, exitCode = 1) {
+    super(message);
+    this.name = "CliError";
+    this.code = code;
+    this.exitCode = exitCode;
+  }
+};
+function toCliError(err) {
+  if (err instanceof CliError)
+    return err;
+  if (err && typeof err === "object" && "name" in err && "code" in err) {
+    const e = err;
+    if (typeof e.name === "string" && e.name.startsWith("Garu")) {
+      return new CliError(mapSdkCodeToCliCode(e.code), e.message ?? "Request failed", 1);
+    }
+  }
+  if (err instanceof Error)
+    return new CliError("unknown_error", err.message);
+  return new CliError("unknown_error", String(err));
+}
+function mapSdkCodeToCliCode(sdkCode) {
+  switch (sdkCode) {
+    case "authentication_error":
+    case "permission_error":
+      return "auth_error";
+    case "not_found":
+      return "not_found";
+    case "validation_error":
+      return "validation_error";
+    case "rate_limited":
+      return "rate_limited";
+    case "server_error":
+      return "server_error";
+    case "connection_error":
+      return "connection_error";
+    case "signature_verification_failed":
+      return "signature_verification_failed";
+    default:
+      return "unknown_error";
+  }
+}
+
+// src/lib/credentials.ts
+var DEFAULT_FILE = {
+  version: 1,
+  activeProfile: "default",
+  profiles: {}
+};
+function credentialsPath(env = process.env) {
+  if (env.GARU_CREDENTIALS_PATH)
+    return env.GARU_CREDENTIALS_PATH;
+  const base = env.XDG_CONFIG_HOME || path.join(os.homedir(), ".config");
+  return path.join(base, "garu", "credentials.json");
+}
+async function loadCredentials(env = process.env) {
+  const path = credentialsPath(env);
+  try {
+    const raw = await promises.readFile(path, "utf8");
+    const parsed = JSON.parse(raw);
+    return normalize(parsed);
+  } catch (err) {
+    if (err.code === "ENOENT") {
+      return { ...DEFAULT_FILE };
+    }
+    throw new CliError(
+      "invalid_input",
+      `Failed to read credentials at ${path}: ${err.message}`
+    );
+  }
+}
+async function saveCredentials(file, env = process.env) {
+  const path = credentialsPath(env);
+  const dir = path.slice(0, path.lastIndexOf("/"));
+  await promises.mkdir(dir, { recursive: true, mode: 448 });
+  await promises.writeFile(path, JSON.stringify(file, null, 2) + "\n", { mode: 384 });
+}
+async function deleteCredentials(env = process.env) {
+  const path = credentialsPath(env);
+  try {
+    await promises.rm(path);
+  } catch (err) {
+    if (err.code !== "ENOENT")
+      throw err;
+  }
+}
+function upsertProfile(file, name, profile) {
+  return {
+    ...file,
+    activeProfile: name,
+    profiles: { ...file.profiles, [name]: profile }
+  };
+}
+async function credentialsFileMode(env = process.env) {
+  try {
+    const s = await promises.stat(credentialsPath(env));
+    return s.mode & 511;
+  } catch {
+    return null;
+  }
+}
+function normalize(raw) {
+  if (!raw || typeof raw !== "object")
+    return { ...DEFAULT_FILE };
+  const obj = raw;
+  return {
+    version: 1,
+    activeProfile: obj.activeProfile ?? "default",
+    profiles: obj.profiles && typeof obj.profiles === "object" ? obj.profiles : {}
+  };
+}
+function resolveMode(opts = {}, stdout = process.stdout) {
+  if (opts.mode)
+    return opts.mode;
+  return stdout.isTTY ? "pretty" : "json";
+}
+function printResult(value, opts = {}) {
+  const mode = resolveMode(opts);
+  if (mode === "json") {
+    process.stdout.write(`${JSON.stringify(value)}
+`);
+    return;
+  }
+  if (opts.prettyPrint) {
+    process.stdout.write(`${opts.prettyPrint(value)}
+`);
+    return;
+  }
+  process.stdout.write(`${JSON.stringify(value, null, 2)}
+`);
+}
+function printStatus(message, opts = {}) {
+  if (opts.quiet)
+    return;
+  if (resolveMode(opts) === "json")
+    return;
+  process.stderr.write(`${pc__default.default.dim("\u2192")} ${message}
+`);
+}
+function printSuccess(message, opts = {}) {
+  if (opts.quiet)
+    return;
+  if (resolveMode(opts) === "json")
+    return;
+  process.stderr.write(`${pc__default.default.green("\u2713")} ${message}
+`);
+}
+function printErrorAndExit(err, opts = {}) {
+  const cliErr = toCliError(err);
+  const payload = { error: { code: cliErr.code, message: cliErr.message } };
+  if (resolveMode(opts) === "json") {
+    process.stdout.write(`${JSON.stringify(payload)}
+`);
+  } else {
+    process.stderr.write(`${pc__default.default.red("Error:")} ${cliErr.message}
+`);
+    if (cliErr.code !== "unknown_error") {
+      process.stderr.write(`${pc__default.default.dim(`  code: ${cliErr.code}`)}
+`);
+    }
+  }
+  process.exit(cliErr.exitCode);
+}
+
+// src/commands/auth-switch.ts
+async function authSwitchCommand(opts) {
+  const file = await loadCredentials();
+  if (!file.profiles[opts.profile]) {
+    const available = Object.keys(file.profiles).join(", ") || "(none)";
+    throw new CliError("not_found", `Profile '${opts.profile}' not found. Available: ${available}`);
+  }
+  await saveCredentials({ ...file, activeProfile: opts.profile });
+  printSuccess(`Active profile set to '${opts.profile}'.`, opts);
+  return { activeProfile: opts.profile };
+}
+
+// src/lib/auth.ts
+async function resolveAuth(opts = {}) {
+  const env = opts.env ?? process.env;
+  if (opts.apiKey) {
+    return { apiKey: opts.apiKey, source: "flag" };
+  }
+  if (env.GARU_API_KEY) {
+    return { apiKey: env.GARU_API_KEY, source: "env" };
+  }
+  const file = await loadCredentials(env);
+  const profileName = opts.profile ?? file.activeProfile;
+  const profile = file.profiles[profileName];
+  if (profile && profile.apiKey) {
+    return {
+      apiKey: profile.apiKey,
+      source: "file",
+      profile: profileName,
+      fileProfile: profile
+    };
+  }
+  throw new CliError("auth_error", "No API key found. Run `garu login` or set GARU_API_KEY.");
+}
+async function resolveAuthOptional(opts = {}) {
+  try {
+    return await resolveAuth(opts);
+  } catch (err) {
+    if (err instanceof CliError && err.code === "auth_error")
+      return null;
+    throw err;
+  }
+}
+
+// src/version.ts
+var CLI_VERSION = "0.1.0";
+
+// src/lib/client.ts
+function createGaruClient(opts) {
+  return new node.Garu({
+    apiKey: opts.auth.apiKey,
+    baseUrl: opts.baseUrl
+  });
+}
+
+// src/commands/charges.ts
+async function getClient(opts) {
+  if (opts.garu)
+    return opts.garu;
+  const auth = await resolveAuth({
+    ...opts.apiKey !== void 0 ? { apiKey: opts.apiKey } : {},
+    ...opts.profile !== void 0 ? { profile: opts.profile } : {}
+  });
+  return createGaruClient({
+    auth,
+    ...opts.baseUrl !== void 0 ? { baseUrl: opts.baseUrl } : {}
+  });
+}
+async function chargesCreateCommand(opts) {
+  validateCreate(opts);
+  const garu = await getClient(opts);
+  const customer = {
+    name: opts.customerName,
+    email: opts.customerEmail,
+    document: opts.customerDocument,
+    phone: opts.customerPhone
+  };
+  const charge = await garu.charges.create({
+    productId: opts.productId,
+    paymentMethod: opts.type,
+    customer,
+    ...opts.additionalInfo !== void 0 ? { additionalInfo: opts.additionalInfo } : {},
+    ...opts.idempotencyKey !== void 0 ? { idempotencyKey: opts.idempotencyKey } : {},
+    ...opts.type === "credit_card" && opts.cardNumber ? {
+      cardInfo: {
+        cardNumber: opts.cardNumber,
+        cvv: opts.cardCvv,
+        expirationDate: opts.cardExpiration,
+        holderName: opts.cardHolder,
+        installments: opts.installments ?? 1
+      }
+    } : {}
+  });
+  printResult(charge, { ...opts, prettyPrint: prettyCharge });
+  return charge;
+}
+async function chargesGetCommand(opts) {
+  const garu = await getClient(opts);
+  const charge = await garu.charges.get(opts.id);
+  printResult(charge, { ...opts, prettyPrint: prettyCharge });
+  return charge;
+}
+async function chargesRefundCommand(opts) {
+  const garu = await getClient(opts);
+  const params = {};
+  if (opts.amount !== void 0)
+    params.amount = opts.amount;
+  if (opts.reason !== void 0)
+    params.reason = opts.reason;
+  if (opts.idempotencyKey !== void 0)
+    params.idempotencyKey = opts.idempotencyKey;
+  const charge = await garu.charges.refund(opts.id, params);
+  printResult(charge, { ...opts, prettyPrint: prettyCharge });
+  return charge;
+}
+function validateCreate(opts) {
+  if (opts.type === "credit_card") {
+    const missing = [];
+    if (!opts.cardNumber)
+      missing.push("--card-number");
+    if (!opts.cardCvv)
+      missing.push("--card-cvv");
+    if (!opts.cardExpiration)
+      missing.push("--card-expiration");
+    if (!opts.cardHolder)
+      missing.push("--card-holder");
+    if (missing.length) {
+      throw new CliError("invalid_input", `Credit-card charges require: ${missing.join(", ")}`);
+    }
+  }
+}
+function prettyCharge(charge) {
+  const lines = [
+    `Charge ${charge.id}`,
+    `  status:  ${charge.status}`,
+    `  amount:  ${charge.amount}`,
+    `  method:  ${charge.paymentMethodId}`,
+    `  date:    ${charge.date}`
+  ];
+  if (charge.deadline)
+    lines.push(`  deadline: ${charge.deadline}`);
+  return lines.join("\n");
+}
+async function doctorCommand(opts = {}) {
+  const home = opts.home ?? os.homedir();
+  const cwd = opts.cwd ?? process.cwd();
+  const plat = opts.platform ?? os.platform();
+  const credentials = await reportCredentials(opts);
+  const api = await reportApi(opts);
+  const agents = detectAgents(home, cwd, plat);
+  const report = {
+    cli: { version: CLI_VERSION },
+    api,
+    credentials,
+    agents
+  };
+  printResult(report, { ...opts, prettyPrint: prettyDoctor });
+  return report;
+}
+async function reportCredentials(opts) {
+  const path = credentialsPath();
+  const resolved = await resolveAuthOptional({
+    ...opts.apiKey !== void 0 ? { apiKey: opts.apiKey } : {},
+    ...opts.profile !== void 0 ? { profile: opts.profile } : {}
+  });
+  if (!resolved) {
+    return { path, source: "none" };
+  }
+  const out = { path, source: resolved.source };
+  if (resolved.profile)
+    out.profile = resolved.profile;
+  if (resolved.source === "file") {
+    const mode = await credentialsFileMode();
+    if (mode !== null) {
+      out.fileMode = `0${mode.toString(8)}`;
+      if (mode !== 384) {
+        out.warning = `credentials file mode is 0${mode.toString(8)}; expected 0600`;
+      }
+    }
+  }
+  return out;
+}
+async function reportApi(opts) {
+  const url = opts.baseUrl ?? "https://garu.com.br";
+  const garu = opts.garu ?? new node.Garu({
+    ...opts.baseUrl !== void 0 ? { baseUrl: opts.baseUrl } : {}
+  });
+  try {
+    const meta = await garu.meta.get();
+    return { reachable: true, url, version: meta.version };
+  } catch (err) {
+    return {
+      reachable: false,
+      url,
+      error: err instanceof Error ? err.message : String(err)
+    };
+  }
+}
+function detectAgents(home, cwd, plat) {
+  return {
+    claudeCode: fs.existsSync(path.join(home, ".claude")),
+    cursor: fs.existsSync(path.join(home, ".cursor")),
+    codex: fs.existsSync(path.join(home, ".codex")),
+    windsurf: fs.existsSync(path.join(home, ".windsurf")),
+    claudeDesktop: fs.existsSync(claudeDesktopConfigPath(home, plat)),
+    vscodeMcpInCwd: fs.existsSync(path.join(cwd, ".vscode", "mcp.json"))
+  };
+}
+function claudeDesktopConfigPath(home, plat) {
+  if (plat === "darwin") {
+    return path.join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json");
+  }
+  if (plat === "win32") {
+    return path.join(home, "AppData", "Roaming", "Claude", "claude_desktop_config.json");
+  }
+  return path.join(home, ".config", "Claude", "claude_desktop_config.json");
+}
+function prettyDoctor(r) {
+  const check = (ok) => ok ? "yes" : "no ";
+  const lines = [
+    `CLI:          garu ${r.cli.version}`,
+    `API:          ${r.api.reachable ? `reachable (${r.api.url}, backend ${r.api.version ?? "?"})` : `unreachable (${r.api.url})`}`,
+    r.api.error ? `              ${r.api.error}` : void 0,
+    `Credentials:  source=${r.credentials.source}${r.credentials.profile ? ` profile=${r.credentials.profile}` : ""}${r.credentials.fileMode ? ` mode=${r.credentials.fileMode}` : ""}`,
+    r.credentials.warning ? `              \u26A0 ${r.credentials.warning}` : void 0,
+    "",
+    "Detected agents:",
+    `  Claude Code:    ${check(r.agents.claudeCode)}`,
+    `  Cursor:         ${check(r.agents.cursor)}`,
+    `  Codex:          ${check(r.agents.codex)}`,
+    `  Windsurf:       ${check(r.agents.windsurf)}`,
+    `  Claude Desktop: ${check(r.agents.claudeDesktop)}`,
+    `  VS Code MCP:    ${check(r.agents.vscodeMcpInCwd)} (.vscode/mcp.json in cwd)`
+  ].filter((l) => l !== void 0);
+  return lines.join("\n");
+}
+async function loginCommand(opts = {}) {
+  const profile = opts.profile ?? "default";
+  const apiKey = opts.apiKey ?? await prompts.password({
+    message: "Paste your Garu API key (sk_live_... or sk_test_...)",
+    mask: "*"
+  }).catch(() => {
+    throw new CliError("user_cancelled", "Login cancelled.");
+  });
+  if (!apiKey || !/^sk_(live|test)_[A-Za-z0-9_]+$/.test(apiKey)) {
+    throw new CliError("invalid_input", "API key must look like `sk_live_...` or `sk_test_...`.");
+  }
+  printStatus("Validating key with Garu...", opts);
+  const garu = new node.Garu({
+    apiKey,
+    ...opts.baseUrl !== void 0 ? { baseUrl: opts.baseUrl } : {}
+  });
+  await garu.meta.get();
+  const file = await loadCredentials();
+  const updated = upsertProfile(file, profile, { apiKey });
+  await saveCredentials(updated);
+  printSuccess(`Saved profile '${profile}' to ~/.config/garu/credentials.json`, opts);
+  return { profile };
+}
+
+// src/commands/logout.ts
+async function logoutCommand(opts = {}) {
+  if (!opts.profile) {
+    await deleteCredentials();
+    printSuccess("All saved credentials deleted.", opts);
+    return { cleared: "all" };
+  }
+  const file = await loadCredentials();
+  if (!file.profiles[opts.profile]) {
+    throw new CliError("not_found", `Profile '${opts.profile}' not found.`);
+  }
+  const { [opts.profile]: _removed, ...rest } = file.profiles;
+  const nextActive = file.activeProfile === opts.profile ? Object.keys(rest)[0] ?? "default" : file.activeProfile;
+  await saveCredentials({ ...file, activeProfile: nextActive, profiles: rest });
+  printSuccess(`Profile '${opts.profile}' removed.`, opts);
+  return { cleared: opts.profile };
+}
+
+// src/index.ts
+function buildCli() {
+  const program = new commander.Command();
+  program.name("garu").description("Command-line interface for the Garu payment gateway.").version(getVersion(), "-v, --version").addOption(new commander.Option("--api-key <key>", "Garu API key (overrides env and credentials file)")).addOption(new commander.Option("-p, --profile <name>", "credentials profile name")).addOption(new commander.Option("--json", "emit strict JSON on stdout (forced in pipes)")).addOption(new commander.Option("-q, --quiet", "suppress status output; only print results and errors")).showHelpAfterError();
+  program.command("login").description("Save a Garu API key to the credentials file").option("--api-key <key>", "pre-supply the key instead of prompting").option("-p, --profile <name>", "profile name to store under", "default").action(async (cmdOpts) => {
+    const globals = getGlobals(program);
+    await loginCommand({
+      ...cmdOpts.apiKey !== void 0 ? { apiKey: cmdOpts.apiKey } : {},
+      profile: cmdOpts.profile,
+      ...globalsToOutput(globals)
+    }).catch((err) => printErrorAndExit(err, globalsToOutput(globals)));
+  });
+  program.command("logout").description("Remove saved credentials").option("-p, --profile <name>", "only remove this profile instead of the whole file").action(async (cmdOpts) => {
+    const globals = getGlobals(program);
+    await logoutCommand({
+      ...cmdOpts.profile !== void 0 ? { profile: cmdOpts.profile } : {},
+      ...globalsToOutput(globals)
+    }).catch((err) => printErrorAndExit(err, globalsToOutput(globals)));
+  });
+  const auth = program.command("auth").description("Manage credentials profiles");
+  auth.command("switch <profile>").description("Set the active credentials profile").action(async (profile) => {
+    const globals = getGlobals(program);
+    await authSwitchCommand({ profile, ...globalsToOutput(globals) }).catch(
+      (err) => printErrorAndExit(err, globalsToOutput(globals))
+    );
+  });
+  const charges = program.command("charges").description("Create, fetch, and refund charges");
+  charges.command("create").description("Create a charge (PIX, credit card, or boleto)").requiredOption("--type <type>", "payment method: pix | credit_card | boleto").requiredOption("--product-id <uuid>", "product UUID").requiredOption("--customer-name <name>", "customer full name").requiredOption("--customer-email <email>", "customer email").requiredOption(
+    "--customer-document <document>",
+    "CPF (11 digits) or CNPJ (14 digits), digits only"
+  ).requiredOption("--customer-phone <phone>", "customer phone with area code, digits only").option("--card-number <number>", "credit-card number (required for credit_card)").option("--card-cvv <cvv>", "credit-card CVV").option("--card-expiration <yyyy-mm>", "credit-card expiration date (YYYY-MM)").option("--card-holder <name>", "credit-card holder name").option("--installments <n>", "number of installments (1-12)", (v) => parseInt(v, 10), 1).option("--additional-info <text>", "free-form metadata attached to the charge").option("--idempotency-key <key>", "idempotency key (auto-generated if omitted)").action(async (cmdOpts) => {
+    const globals = getGlobals(program);
+    const type = parsePaymentMethod(cmdOpts.type);
+    await chargesCreateCommand({
+      type,
+      productId: cmdOpts.productId,
+      customerName: cmdOpts.customerName,
+      customerEmail: cmdOpts.customerEmail,
+      customerDocument: cmdOpts.customerDocument,
+      customerPhone: cmdOpts.customerPhone,
+      ...cmdOpts.cardNumber !== void 0 ? { cardNumber: cmdOpts.cardNumber } : {},
+      ...cmdOpts.cardCvv !== void 0 ? { cardCvv: cmdOpts.cardCvv } : {},
+      ...cmdOpts.cardExpiration !== void 0 ? { cardExpiration: cmdOpts.cardExpiration } : {},
+      ...cmdOpts.cardHolder !== void 0 ? { cardHolder: cmdOpts.cardHolder } : {},
+      ...cmdOpts.installments !== void 0 ? { installments: cmdOpts.installments } : {},
+      ...cmdOpts.additionalInfo !== void 0 ? { additionalInfo: cmdOpts.additionalInfo } : {},
+      ...cmdOpts.idempotencyKey !== void 0 ? { idempotencyKey: cmdOpts.idempotencyKey } : {},
+      ...globalFlagsToCommandOptions(globals)
+    }).catch((err) => printErrorAndExit(err, globalsToOutput(globals)));
+  });
+  charges.command("get <id>").description("Fetch a single charge by ID").action(async (id) => {
+    const globals = getGlobals(program);
+    await chargesGetCommand({
+      id: parseId(id),
+      ...globalFlagsToCommandOptions(globals)
+    }).catch((err) => printErrorAndExit(err, globalsToOutput(globals)));
+  });
+  charges.command("refund <id>").description("Refund a charge (full or partial)").option("--amount <centavos>", "partial refund amount in centavos", (v) => parseInt(v, 10)).option("--reason <text>", "optional refund reason").option("--idempotency-key <key>", "idempotency key (auto-generated if omitted)").action(async (id, cmdOpts) => {
+    const globals = getGlobals(program);
+    await chargesRefundCommand({
+      id: parseId(id),
+      ...cmdOpts.amount !== void 0 ? { amount: cmdOpts.amount } : {},
+      ...cmdOpts.reason !== void 0 ? { reason: cmdOpts.reason } : {},
+      ...cmdOpts.idempotencyKey !== void 0 ? { idempotencyKey: cmdOpts.idempotencyKey } : {},
+      ...globalFlagsToCommandOptions(globals)
+    }).catch((err) => printErrorAndExit(err, globalsToOutput(globals)));
+  });
+  program.command("doctor").description("Environment diagnostic").action(async () => {
+    const globals = getGlobals(program);
+    await doctorCommand({
+      ...globalFlagsToCommandOptions(globals)
+    }).catch((err) => printErrorAndExit(err, globalsToOutput(globals)));
+  });
+  return program;
+}
+function getGlobals(program) {
+  return program.opts();
+}
+function globalsToOutput(globals) {
+  const out = {};
+  if (globals.json)
+    out.mode = "json";
+  if (globals.quiet)
+    out.quiet = true;
+  return out;
+}
+function globalFlagsToCommandOptions(globals) {
+  const out = {};
+  if (globals.apiKey)
+    out.apiKey = globals.apiKey;
+  if (globals.profile)
+    out.profile = globals.profile;
+  if (globals.json)
+    out.mode = "json";
+  if (globals.quiet)
+    out.quiet = true;
+  return out;
+}
+function parsePaymentMethod(raw) {
+  if (raw === "pix" || raw === "credit_card" || raw === "boleto")
+    return raw;
+  throw new CliError(
+    "invalid_input",
+    `--type must be 'pix', 'credit_card', or 'boleto' (got '${raw}')`
+  );
+}
+function parseId(raw) {
+  const id = Number.parseInt(raw, 10);
+  if (!Number.isFinite(id) || id <= 0) {
+    throw new CliError("invalid_input", `Charge ID must be a positive integer (got '${raw}')`);
+  }
+  return id;
+}
+function getVersion() {
+  return "0.1.0";
+}
+async function main(argv = process.argv) {
+  const program = buildCli();
+  await program.parseAsync(argv);
+}
+var invokedDirectly = typeof process !== "undefined" && Array.isArray(process.argv) && process.argv[1] !== void 0 && /garu(-cli)?(\.(cjs|js|ts))?$/.test(process.argv[1] ?? "");
+if (invokedDirectly) {
+  main().catch((err) => printErrorAndExit(err));
+}
+
+exports.buildCli = buildCli;
+exports.main = main;
+//# sourceMappingURL=out.js.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/lib/credentials.ts","../src/lib/errors.ts","../src/lib/output.ts","../src/commands/auth-switch.ts","../src/lib/auth.ts","../src/lib/client.ts","../src/version.ts","../src/commands/charges.ts","../src/commands/doctor.ts","../src/commands/login.ts","../src/commands/logout.ts"],"names":["homedir","join","Garu"],"mappings":";AAAA,SAAS,SAAS,cAAc;;;ACAhC,SAAS,eAAe;AACxB,SAAS,YAAY;AACrB,SAAS,OAAO,UAAU,WAAW,IAAI,YAAY;;;ACgB9C,IAAM,WAAN,cAAuB,MAAM;AAAA,EAClB;AAAA,EACA;AAAA,EAEhB,YAAY,MAAoB,SAAiB,WAAW,GAAG;AAC7D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AACZ,SAAK,WAAW;AAAA,EAClB;AACF;AAGO,SAAS,WAAW,KAAwB;AACjD,MAAI,eAAe;AAAU,WAAO;AAGpC,MAAI,OAAO,OAAO,QAAQ,YAAY,UAAU,OAAO,UAAU,KAAK;AACpE,UAAM,IAAI;AACV,QAAI,OAAO,EAAE,SAAS,YAAY,EAAE,KAAK,WAAW,MAAM,GAAG;AAC3D,aAAO,IAAI,SAAS,oBAAoB,EAAE,IAAI,GAAG,EAAE,WAAW,kBAAkB,CAAC;AAAA,IACnF;AAAA,EACF;AACA,MAAI,eAAe;AAAO,WAAO,IAAI,SAAS,iBAAiB,IAAI,OAAO;AAC1E,SAAO,IAAI,SAAS,iBAAiB,OAAO,GAAG,CAAC;AAClD;AAEA,SAAS,oBAAoB,SAA+B;AAC1D,UAAQ,SAAS;AAAA,IACf,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;;;AD7CA,IAAM,eAAgC;AAAA,EACpC,SAAS;AAAA,EACT,eAAe;AAAA,EACf,UAAU,CAAC;AACb;AASO,SAAS,gBAAgB,MAAyB,QAAQ,KAAa;AAC5E,MAAI,IAAI;AAAuB,WAAO,IAAI;AAC1C,QAAM,OAAO,IAAI,mBAAmB,KAAK,QAAQ,GAAG,SAAS;AAC7D,SAAO,KAAK,MAAM,QAAQ,kBAAkB;AAC9C;AAGA,eAAsB,gBACpB,MAAyB,QAAQ,KACP;AAC1B,QAAM,OAAO,gBAAgB,GAAG;AAChC,MAAI;AACF,UAAM,MAAM,MAAM,SAAS,MAAM,MAAM;AACvC,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,WAAO,UAAU,MAAM;AAAA,EACzB,SAAS,KAAK;AACZ,QAAK,IAA8B,SAAS,UAAU;AACpD,aAAO,EAAE,GAAG,aAAa;AAAA,IAC3B;AACA,UAAM,IAAI;AAAA,MACR;AAAA,MACA,iCAAiC,IAAI,KAAM,IAAc,OAAO;AAAA,IAClE;AAAA,EACF;AACF;AAMA,eAAsB,gBACpB,MACA,MAAyB,QAAQ,KAClB;AACf,QAAM,OAAO,gBAAgB,GAAG;AAChC,QAAM,MAAM,KAAK,MAAM,GAAG,KAAK,YAAY,GAAG,CAAC;AAC/C,QAAM,MAAM,KAAK,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACjD,QAAM,UAAU,MAAM,KAAK,UAAU,MAAM,MAAM,CAAC,IAAI,MAAM,EAAE,MAAM,IAAM,CAAC;AAC7E;AAGA,eAAsB,kBAAkB,MAAyB,QAAQ,KAAoB;AAC3F,QAAM,OAAO,gBAAgB,GAAG;AAChC,MAAI;AACF,UAAM,GAAG,IAAI;AAAA,EACf,SAAS,KAAK;AACZ,QAAK,IAA8B,SAAS;AAAU,YAAM;AAAA,EAC9D;AACF;AAGO,SAAS,cACd,MACA,MACA,SACiB;AACjB,SAAO;AAAA,IACL,GAAG;AAAA,IACH,eAAe;AAAA,IACf,UAAU,EAAE,GAAG,KAAK,UAAU,CAAC,IAAI,GAAG,QAAQ;AAAA,EAChD;AACF;AAGA,eAAsB,oBACpB,MAAyB,QAAQ,KACT;AACxB,MAAI;AACF,UAAM,IAAI,MAAM,KAAK,gBAAgB,GAAG,CAAC;AACzC,WAAO,EAAE,OAAO;AAAA,EAClB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,UAAU,KAA+B;AAChD,MAAI,CAAC,OAAO,OAAO,QAAQ;AAAU,WAAO,EAAE,GAAG,aAAa;AAC9D,QAAM,MAAM;AACZ,SAAO;AAAA,IACL,SAAS;AAAA,IACT,eAAe,IAAI,iBAAiB;AAAA,IACpC,UAAU,IAAI,YAAY,OAAO,IAAI,aAAa,WAAW,IAAI,WAAW,CAAC;AAAA,EAC/E;AACF;;;AEpHA,OAAO,QAAQ;AAmBR,SAAS,YACd,OAAsB,CAAC,GACvB,SAA6B,QAAQ,QACzB;AACZ,MAAI,KAAK;AAAM,WAAO,KAAK;AAC3B,SAAO,OAAO,QAAQ,WAAW;AACnC;AAOO,SAAS,YACd,OACA,OAA+D,CAAC,GAC1D;AACN,QAAM,OAAO,YAAY,IAAI;AAC7B,MAAI,SAAS,QAAQ;AACnB,YAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,KAAK,CAAC;AAAA,CAAI;AACjD;AAAA,EACF;AACA,MAAI,KAAK,aAAa;AACpB,YAAQ,OAAO,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC;AAAA,CAAI;AACnD;AAAA,EACF;AACA,UAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,CAAI;AAC5D;AAGO,SAAS,YAAY,SAAiB,OAAsB,CAAC,GAAS;AAC3E,MAAI,KAAK;AAAO;AAChB,MAAI,YAAY,IAAI,MAAM;AAAQ;AAClC,UAAQ,OAAO,MAAM,GAAG,GAAG,IAAI,QAAG,CAAC,IAAI,OAAO;AAAA,CAAI;AACpD;AAGO,SAAS,aAAa,SAAiB,OAAsB,CAAC,GAAS;AAC5E,MAAI,KAAK;AAAO;AAChB,MAAI,YAAY,IAAI,MAAM;AAAQ;AAClC,UAAQ,OAAO,MAAM,GAAG,GAAG,MAAM,QAAG,CAAC,IAAI,OAAO;AAAA,CAAI;AACtD;AAOO,SAAS,kBAAkB,KAAc,OAAsB,CAAC,GAAU;AAC/E,QAAM,SAAmB,WAAW,GAAG;AACvC,QAAM,UAAU,EAAE,OAAO,EAAE,MAAM,OAAO,MAAM,SAAS,OAAO,QAAQ,EAAE;AAExE,MAAI,YAAY,IAAI,MAAM,QAAQ;AAChC,YAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,OAAO,CAAC;AAAA,CAAI;AAAA,EACrD,OAAO;AACL,YAAQ,OAAO,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,IAAI,OAAO,OAAO;AAAA,CAAI;AAC9D,QAAI,OAAO,SAAS,iBAAiB;AACnC,cAAQ,OAAO,MAAM,GAAG,GAAG,IAAI,WAAW,OAAO,IAAI,EAAE,CAAC;AAAA,CAAI;AAAA,IAC9D;AAAA,EACF;AACA,UAAQ,KAAK,OAAO,QAAQ;AAC9B;;;ACxEA,eAAsB,kBACpB,MACoC;AACpC,QAAM,OAAO,MAAM,gBAAgB;AACnC,MAAI,CAAC,KAAK,SAAS,KAAK,OAAO,GAAG;AAChC,UAAM,YAAY,OAAO,KAAK,KAAK,QAAQ,EAAE,KAAK,IAAI,KAAK;AAC3D,UAAM,IAAI,SAAS,aAAa,YAAY,KAAK,OAAO,2BAA2B,SAAS,EAAE;AAAA,EAChG;AAEA,QAAM,gBAAgB,EAAE,GAAG,MAAM,eAAe,KAAK,QAAQ,CAAC;AAC9D,eAAa,0BAA0B,KAAK,OAAO,MAAM,IAAI;AAC7D,SAAO,EAAE,eAAe,KAAK,QAAQ;AACvC;;;ACSA,eAAsB,YAAY,OAA2B,CAAC,GAA0B;AACtF,QAAM,MAAM,KAAK,OAAO,QAAQ;AAEhC,MAAI,KAAK,QAAQ;AACf,WAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,OAAO;AAAA,EAC/C;AAEA,MAAI,IAAI,cAAc;AACpB,WAAO,EAAE,QAAQ,IAAI,cAAc,QAAQ,MAAM;AAAA,EACnD;AAEA,QAAM,OAAO,MAAM,gBAAgB,GAAG;AACtC,QAAM,cAAc,KAAK,WAAW,KAAK;AACzC,QAAM,UAAU,KAAK,SAAS,WAAW;AACzC,MAAI,WAAW,QAAQ,QAAQ;AAC7B,WAAO;AAAA,MACL,QAAQ,QAAQ;AAAA,MAChB,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,aAAa;AAAA,IACf;AAAA,EACF;AAEA,QAAM,IAAI,SAAS,cAAc,yDAAyD;AAC5F;AAMA,eAAsB,oBACpB,OAA2B,CAAC,GACE;AAC9B,MAAI;AACF,WAAO,MAAM,YAAY,IAAI;AAAA,EAC/B,SAAS,KAAK;AACZ,QAAI,eAAe,YAAY,IAAI,SAAS;AAAc,aAAO;AACjE,UAAM;AAAA,EACR;AACF;;;ACpEA,SAAS,YAAY;;;ACOd,IAAM,cAAc;;;ADUpB,SAAS,iBAAiB,MAA+B;AAC9D,SAAO,IAAI,KAAK;AAAA,IACd,QAAQ,KAAK,KAAK;AAAA,IAClB,SAAS,KAAK;AAAA,EAChB,CAAC;AACH;;;AEoBA,eAAe,UAAU,MAA2C;AAClE,MAAI,KAAK;AAAM,WAAO,KAAK;AAC3B,QAAM,OAAO,MAAM,YAAY;AAAA,IAC7B,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,OAAO,IAAI,CAAC;AAAA,IAC3D,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,EAChE,CAAC;AACD,SAAO,iBAAiB;AAAA,IACtB;AAAA,IACA,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,EAChE,CAAC;AACH;AAEA,eAAsB,qBAAqB,MAA6C;AACtF,iBAAe,IAAI;AACnB,QAAM,OAAO,MAAM,UAAU,IAAI;AAEjC,QAAM,WAAqB;AAAA,IACzB,MAAM,KAAK;AAAA,IACX,OAAO,KAAK;AAAA,IACZ,UAAU,KAAK;AAAA,IACf,OAAO,KAAK;AAAA,EACd;AAEA,QAAM,SAAS,MAAM,KAAK,QAAQ,OAAO;AAAA,IACvC,WAAW,KAAK;AAAA,IAChB,eAAe,KAAK;AAAA,IACpB;AAAA,IACA,GAAI,KAAK,mBAAmB,SAAY,EAAE,gBAAgB,KAAK,eAAe,IAAI,CAAC;AAAA,IACnF,GAAI,KAAK,mBAAmB,SAAY,EAAE,gBAAgB,KAAK,eAAe,IAAI,CAAC;AAAA,IACnF,GAAI,KAAK,SAAS,iBAAiB,KAAK,aACpC;AAAA,MACE,UAAU;AAAA,QACR,YAAY,KAAK;AAAA,QACjB,KAAK,KAAK;AAAA,QACV,gBAAgB,KAAK;AAAA,QACrB,YAAY,KAAK;AAAA,QACjB,cAAc,KAAK,gBAAgB;AAAA,MACrC;AAAA,IACF,IACA,CAAC;AAAA,EACP,CAAC;AAED,cAAY,QAAQ,EAAE,GAAG,MAAM,aAAa,aAAa,CAAC;AAC1D,SAAO;AACT;AAEA,eAAsB,kBAAkB,MAA2C;AACjF,QAAM,OAAO,MAAM,UAAU,IAAI;AACjC,QAAM,SAAS,MAAM,KAAK,QAAQ,IAAI,KAAK,EAAE;AAC7C,cAAY,QAAQ,EAAE,GAAG,MAAM,aAAa,aAAa,CAAC;AAC1D,SAAO;AACT;AAEA,eAAsB,qBAAqB,MAA6C;AACtF,QAAM,OAAO,MAAM,UAAU,IAAI;AACjC,QAAM,SAA6B,CAAC;AACpC,MAAI,KAAK,WAAW;AAAW,WAAO,SAAS,KAAK;AACpD,MAAI,KAAK,WAAW;AAAW,WAAO,SAAS,KAAK;AACpD,MAAI,KAAK,mBAAmB;AAAW,WAAO,iBAAiB,KAAK;AACpE,QAAM,SAAS,MAAM,KAAK,QAAQ,OAAO,KAAK,IAAI,MAAM;AACxD,cAAY,QAAQ,EAAE,GAAG,MAAM,aAAa,aAAa,CAAC;AAC1D,SAAO;AACT;AAEA,SAAS,eAAe,MAAkC;AACxD,MAAI,KAAK,SAAS,eAAe;AAC/B,UAAM,UAAoB,CAAC;AAC3B,QAAI,CAAC,KAAK;AAAY,cAAQ,KAAK,eAAe;AAClD,QAAI,CAAC,KAAK;AAAS,cAAQ,KAAK,YAAY;AAC5C,QAAI,CAAC,KAAK;AAAgB,cAAQ,KAAK,mBAAmB;AAC1D,QAAI,CAAC,KAAK;AAAY,cAAQ,KAAK,eAAe;AAClD,QAAI,QAAQ,QAAQ;AAClB,YAAM,IAAI,SAAS,iBAAiB,gCAAgC,QAAQ,KAAK,IAAI,CAAC,EAAE;AAAA,IAC1F;AAAA,EACF;AACF;AAEA,SAAS,aAAa,QAAwB;AAC5C,QAAM,QAAQ;AAAA,IACZ,UAAU,OAAO,EAAE;AAAA,IACnB,cAAc,OAAO,MAAM;AAAA,IAC3B,cAAc,OAAO,MAAM;AAAA,IAC3B,cAAc,OAAO,eAAe;AAAA,IACpC,cAAc,OAAO,IAAI;AAAA,EAC3B;AACA,MAAI,OAAO;AAAU,UAAM,KAAK,eAAe,OAAO,QAAQ,EAAE;AAChE,SAAO,MAAM,KAAK,IAAI;AACxB;;;ACjIA,SAAS,kBAAkB;AAC3B,SAAS,WAAAA,UAAS,gBAAgB;AAClC,SAAS,QAAAC,aAAY;AAErB,SAAS,QAAAC,aAAY;AAgDrB,eAAsB,cAAc,OAAsB,CAAC,GAA0B;AACnF,QAAM,OAAO,KAAK,QAAQF,SAAQ;AAClC,QAAM,MAAM,KAAK,OAAO,QAAQ,IAAI;AACpC,QAAM,OAAO,KAAK,YAAY,SAAS;AAEvC,QAAM,cAAc,MAAM,kBAAkB,IAAI;AAChD,QAAM,MAAM,MAAM,UAAU,IAAI;AAChC,QAAM,SAAS,aAAa,MAAM,KAAK,IAAI;AAE3C,QAAM,SAAuB;AAAA,IAC3B,KAAK,EAAE,SAAS,YAAY;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,cAAY,QAAQ,EAAE,GAAG,MAAM,aAAa,aAAa,CAAC;AAC1D,SAAO;AACT;AAEA,eAAe,kBAAkB,MAA2D;AAC1F,QAAM,OAAO,gBAAgB;AAC7B,QAAM,WAAW,MAAM,oBAAoB;AAAA,IACzC,GAAI,KAAK,WAAW,SAAY,EAAE,QAAQ,KAAK,OAAO,IAAI,CAAC;AAAA,IAC3D,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,EAChE,CAAC;AAED,MAAI,CAAC,UAAU;AACb,WAAO,EAAE,MAAM,QAAQ,OAAO;AAAA,EAChC;AAEA,QAAM,MAAmC,EAAE,MAAM,QAAQ,SAAS,OAAO;AACzE,MAAI,SAAS;AAAS,QAAI,UAAU,SAAS;AAE7C,MAAI,SAAS,WAAW,QAAQ;AAC9B,UAAM,OAAO,MAAM,oBAAoB;AACvC,QAAI,SAAS,MAAM;AACjB,UAAI,WAAW,IAAI,KAAK,SAAS,CAAC,CAAC;AACnC,UAAI,SAAS,KAAO;AAClB,YAAI,UAAU,6BAA6B,KAAK,SAAS,CAAC,CAAC;AAAA,MAC7D;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,eAAe,UAAU,MAAmD;AAC1E,QAAM,MAAM,KAAK,WAAW;AAC5B,QAAM,OACJ,KAAK,QACL,IAAIE,MAAK;AAAA,IACP,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,EAChE,CAAC;AAEH,MAAI;AACF,UAAM,OAAO,MAAM,KAAK,KAAK,IAAI;AACjC,WAAO,EAAE,WAAW,MAAM,KAAK,SAAS,KAAK,QAAQ;AAAA,EACvD,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,WAAW;AAAA,MACX;AAAA,MACA,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,IACxD;AAAA,EACF;AACF;AAEA,SAAS,aAAa,MAAc,KAAa,MAA+C;AAC9F,SAAO;AAAA,IACL,YAAY,WAAWD,MAAK,MAAM,SAAS,CAAC;AAAA,IAC5C,QAAQ,WAAWA,MAAK,MAAM,SAAS,CAAC;AAAA,IACxC,OAAO,WAAWA,MAAK,MAAM,QAAQ,CAAC;AAAA,IACtC,UAAU,WAAWA,MAAK,MAAM,WAAW,CAAC;AAAA,IAC5C,eAAe,WAAW,wBAAwB,MAAM,IAAI,CAAC;AAAA,IAC7D,gBAAgB,WAAWA,MAAK,KAAK,WAAW,UAAU,CAAC;AAAA,EAC7D;AACF;AAEA,SAAS,wBAAwB,MAAc,MAA+B;AAC5E,MAAI,SAAS,UAAU;AACrB,WAAOA,MAAK,MAAM,WAAW,uBAAuB,UAAU,4BAA4B;AAAA,EAC5F;AACA,MAAI,SAAS,SAAS;AACpB,WAAOA,MAAK,MAAM,WAAW,WAAW,UAAU,4BAA4B;AAAA,EAChF;AACA,SAAOA,MAAK,MAAM,WAAW,UAAU,4BAA4B;AACrE;AAEA,SAAS,aAAa,GAAyB;AAC7C,QAAM,QAAQ,CAAC,OAAiB,KAAK,QAAQ;AAC7C,QAAM,QAAQ;AAAA,IACZ,sBAAsB,EAAE,IAAI,OAAO;AAAA,IACnC,iBAAiB,EAAE,IAAI,YAAY,cAAc,EAAE,IAAI,GAAG,aAAa,EAAE,IAAI,WAAW,GAAG,MAAM,gBAAgB,EAAE,IAAI,GAAG,GAAG;AAAA,IAC7H,EAAE,IAAI,QAAQ,iBAAiB,EAAE,IAAI,KAAK,KAAK;AAAA,IAC/C,wBAAwB,EAAE,YAAY,MAAM,GAAG,EAAE,YAAY,UAAU,YAAY,EAAE,YAAY,OAAO,KAAK,EAAE,GAAG,EAAE,YAAY,WAAW,SAAS,EAAE,YAAY,QAAQ,KAAK,EAAE;AAAA,IACjL,EAAE,YAAY,UAAU,wBAAmB,EAAE,YAAY,OAAO,KAAK;AAAA,IACrE;AAAA,IACA;AAAA,IACA,qBAAqB,MAAM,EAAE,OAAO,UAAU,CAAC;AAAA,IAC/C,qBAAqB,MAAM,EAAE,OAAO,MAAM,CAAC;AAAA,IAC3C,qBAAqB,MAAM,EAAE,OAAO,KAAK,CAAC;AAAA,IAC1C,qBAAqB,MAAM,EAAE,OAAO,QAAQ,CAAC;AAAA,IAC7C,qBAAqB,MAAM,EAAE,OAAO,aAAa,CAAC;AAAA,IAClD,qBAAqB,MAAM,EAAE,OAAO,cAAc,CAAC;AAAA,EACrD,EAAE,OAAO,CAAC,MAAmB,MAAM,MAAS;AAC5C,SAAO,MAAM,KAAK,IAAI;AACxB;;;AC9JA,SAAS,YAAY,sBAAsB;AAE3C,SAAS,QAAAC,aAAY;AAerB,eAAsB,aAAa,OAAqB,CAAC,GAAiC;AACxF,QAAM,UAAU,KAAK,WAAW;AAEhC,QAAM,SACJ,KAAK,UACJ,MAAM,eAAe;AAAA,IACpB,SAAS;AAAA,IACT,MAAM;AAAA,EACR,CAAC,EAAE,MAAM,MAAM;AACb,UAAM,IAAI,SAAS,kBAAkB,kBAAkB;AAAA,EACzD,CAAC;AAEH,MAAI,CAAC,UAAU,CAAC,iCAAiC,KAAK,MAAM,GAAG;AAC7D,UAAM,IAAI,SAAS,iBAAiB,wDAAwD;AAAA,EAC9F;AAEA,cAAY,+BAA+B,IAAI;AAC/C,QAAM,OAAO,IAAIA,MAAK;AAAA,IACpB;AAAA,IACA,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,EAChE,CAAC;AAOD,QAAM,KAAK,KAAK,IAAI;AAEpB,QAAM,OAAO,MAAM,gBAAgB;AACnC,QAAM,UAAU,cAAc,MAAM,SAAS,EAAE,OAAO,CAAC;AACvD,QAAM,gBAAgB,OAAO;AAE7B,eAAa,kBAAkB,OAAO,wCAAwC,IAAI;AAClF,SAAO,EAAE,QAAQ;AACnB;;;ACzCA,eAAsB,cAAc,OAAsB,CAAC,GAAiC;AAC1F,MAAI,CAAC,KAAK,SAAS;AACjB,UAAM,kBAAkB;AACxB,iBAAa,kCAAkC,IAAI;AACnD,WAAO,EAAE,SAAS,MAAM;AAAA,EAC1B;AAEA,QAAM,OAAO,MAAM,gBAAgB;AACnC,MAAI,CAAC,KAAK,SAAS,KAAK,OAAO,GAAG;AAChC,UAAM,IAAI,SAAS,aAAa,YAAY,KAAK,OAAO,cAAc;AAAA,EACxE;AAEA,QAAM,EAAE,CAAC,KAAK,OAAO,GAAG,UAAU,GAAG,KAAK,IAAI,KAAK;AAGnD,QAAM,aACJ,KAAK,kBAAkB,KAAK,UAAW,OAAO,KAAK,IAAI,EAAE,CAAC,KAAK,YAAa,KAAK;AAEnF,QAAM,gBAAgB,EAAE,GAAG,MAAM,eAAe,YAAY,UAAU,KAAK,CAAC;AAC5E,eAAa,YAAY,KAAK,OAAO,cAAc,IAAI;AACvD,SAAO,EAAE,SAAS,KAAK,QAAQ;AACjC;;;AXTO,SAAS,WAAoB;AAClC,QAAM,UAAU,IAAI,QAAQ;AAE5B,UACG,KAAK,MAAM,EACX,YAAY,sDAAsD,EAClE,QAAQ,WAAW,GAAG,eAAe,EACrC,UAAU,IAAI,OAAO,mBAAmB,mDAAmD,CAAC,EAC5F,UAAU,IAAI,OAAO,wBAAwB,0BAA0B,CAAC,EACxE,UAAU,IAAI,OAAO,UAAU,8CAA8C,CAAC,EAC9E,UAAU,IAAI,OAAO,eAAe,uDAAuD,CAAC,EAC5F,mBAAmB;AAGtB,UACG,QAAQ,OAAO,EACf,YAAY,6CAA6C,EACzD,OAAO,mBAAmB,yCAAyC,EACnE,OAAO,wBAAwB,+BAA+B,SAAS,EACvE,OAAO,OAAO,YAAkD;AAC/D,UAAM,UAAU,WAAW,OAAO;AAClC,UAAM,aAAa;AAAA,MACjB,GAAI,QAAQ,WAAW,SAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,MACjE,SAAS,QAAQ;AAAA,MACjB,GAAG,gBAAgB,OAAO;AAAA,IAC5B,CAAC,EAAE,MAAM,CAAC,QAAQ,kBAAkB,KAAK,gBAAgB,OAAO,CAAC,CAAC;AAAA,EACpE,CAAC;AAGH,UACG,QAAQ,QAAQ,EAChB,YAAY,0BAA0B,EACtC,OAAO,wBAAwB,oDAAoD,EACnF,OAAO,OAAO,YAAkC;AAC/C,UAAM,UAAU,WAAW,OAAO;AAClC,UAAM,cAAc;AAAA,MAClB,GAAI,QAAQ,YAAY,SAAY,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,MACpE,GAAG,gBAAgB,OAAO;AAAA,IAC5B,CAAC,EAAE,MAAM,CAAC,QAAQ,kBAAkB,KAAK,gBAAgB,OAAO,CAAC,CAAC;AAAA,EACpE,CAAC;AAGH,QAAM,OAAO,QAAQ,QAAQ,MAAM,EAAE,YAAY,6BAA6B;AAC9E,OACG,QAAQ,kBAAkB,EAC1B,YAAY,oCAAoC,EAChD,OAAO,OAAO,YAAoB;AACjC,UAAM,UAAU,WAAW,OAAO;AAClC,UAAM,kBAAkB,EAAE,SAAS,GAAG,gBAAgB,OAAO,EAAE,CAAC,EAAE;AAAA,MAAM,CAAC,QACvE,kBAAkB,KAAK,gBAAgB,OAAO,CAAC;AAAA,IACjD;AAAA,EACF,CAAC;AAGH,QAAM,UAAU,QAAQ,QAAQ,SAAS,EAAE,YAAY,mCAAmC;AAE1F,UACG,QAAQ,QAAQ,EAChB,YAAY,+CAA+C,EAC3D,eAAe,iBAAiB,4CAA4C,EAC5E,eAAe,uBAAuB,cAAc,EACpD,eAAe,0BAA0B,oBAAoB,EAC7D,eAAe,4BAA4B,gBAAgB,EAC3D;AAAA,IACC;AAAA,IACA;AAAA,EACF,EACC,eAAe,4BAA4B,4CAA4C,EACvF,OAAO,0BAA0B,+CAA+C,EAChF,OAAO,oBAAoB,iBAAiB,EAC5C,OAAO,+BAA+B,uCAAuC,EAC7E,OAAO,wBAAwB,yBAAyB,EACxD,OAAO,sBAAsB,iCAAiC,CAAC,MAAM,SAAS,GAAG,EAAE,GAAG,CAAC,EACvF,OAAO,4BAA4B,2CAA2C,EAC9E,OAAO,2BAA2B,6CAA6C,EAC/E,OAAO,OAAO,YAAY;AACzB,UAAM,UAAU,WAAW,OAAO;AAClC,UAAM,OAAO,mBAAmB,QAAQ,IAAI;AAC5C,UAAM,qBAAqB;AAAA,MACzB;AAAA,MACA,WAAW,QAAQ;AAAA,MACnB,cAAc,QAAQ;AAAA,MACtB,eAAe,QAAQ;AAAA,MACvB,kBAAkB,QAAQ;AAAA,MAC1B,eAAe,QAAQ;AAAA,MACvB,GAAI,QAAQ,eAAe,SAAY,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;AAAA,MAC7E,GAAI,QAAQ,YAAY,SAAY,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,MACpE,GAAI,QAAQ,mBAAmB,SAAY,EAAE,gBAAgB,QAAQ,eAAe,IAAI,CAAC;AAAA,MACzF,GAAI,QAAQ,eAAe,SAAY,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;AAAA,MAC7E,GAAI,QAAQ,iBAAiB,SAAY,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;AAAA,MACnF,GAAI,QAAQ,mBAAmB,SAAY,EAAE,gBAAgB,QAAQ,eAAe,IAAI,CAAC;AAAA,MACzF,GAAI,QAAQ,mBAAmB,SAAY,EAAE,gBAAgB,QAAQ,eAAe,IAAI,CAAC;AAAA,MACzF,GAAG,4BAA4B,OAAO;AAAA,IACxC,CAAC,EAAE,MAAM,CAAC,QAAQ,kBAAkB,KAAK,gBAAgB,OAAO,CAAC,CAAC;AAAA,EACpE,CAAC;AAEH,UACG,QAAQ,UAAU,EAClB,YAAY,6BAA6B,EACzC,OAAO,OAAO,OAAe;AAC5B,UAAM,UAAU,WAAW,OAAO;AAClC,UAAM,kBAAkB;AAAA,MACtB,IAAI,QAAQ,EAAE;AAAA,MACd,GAAG,4BAA4B,OAAO;AAAA,IACxC,CAAC,EAAE,MAAM,CAAC,QAAQ,kBAAkB,KAAK,gBAAgB,OAAO,CAAC,CAAC;AAAA,EACpE,CAAC;AAEH,UACG,QAAQ,aAAa,EACrB,YAAY,mCAAmC,EAC/C,OAAO,uBAAuB,qCAAqC,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC,EACzF,OAAO,mBAAmB,wBAAwB,EAClD,OAAO,2BAA2B,6CAA6C,EAC/E,OAAO,OAAO,IAAY,YAAY;AACrC,UAAM,UAAU,WAAW,OAAO;AAClC,UAAM,qBAAqB;AAAA,MACzB,IAAI,QAAQ,EAAE;AAAA,MACd,GAAI,QAAQ,WAAW,SAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,MACjE,GAAI,QAAQ,WAAW,SAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,MACjE,GAAI,QAAQ,mBAAmB,SAAY,EAAE,gBAAgB,QAAQ,eAAe,IAAI,CAAC;AAAA,MACzF,GAAG,4BAA4B,OAAO;AAAA,IACxC,CAAC,EAAE,MAAM,CAAC,QAAQ,kBAAkB,KAAK,gBAAgB,OAAO,CAAC,CAAC;AAAA,EACpE,CAAC;AAGH,UACG,QAAQ,QAAQ,EAChB,YAAY,wBAAwB,EACpC,OAAO,YAAY;AAClB,UAAM,UAAU,WAAW,OAAO;AAClC,UAAM,cAAc;AAAA,MAClB,GAAG,4BAA4B,OAAO;AAAA,IACxC,CAAC,EAAE,MAAM,CAAC,QAAQ,kBAAkB,KAAK,gBAAgB,OAAO,CAAC,CAAC;AAAA,EACpE,CAAC;AAEH,SAAO;AACT;AAEA,SAAS,WAAW,SAA+B;AACjD,SAAO,QAAQ,KAAkB;AACnC;AAEA,SAAS,gBAAgB,SAA8D;AACrF,QAAM,MAA8C,CAAC;AACrD,MAAI,QAAQ;AAAM,QAAI,OAAO;AAC7B,MAAI,QAAQ;AAAO,QAAI,QAAQ;AAC/B,SAAO;AACT;AAEA,SAAS,4BAA4B,SAKnC;AACA,QAAM,MAAiF,CAAC;AACxF,MAAI,QAAQ;AAAQ,QAAI,SAAS,QAAQ;AACzC,MAAI,QAAQ;AAAS,QAAI,UAAU,QAAQ;AAC3C,MAAI,QAAQ;AAAM,QAAI,OAAO;AAC7B,MAAI,QAAQ;AAAO,QAAI,QAAQ;AAC/B,SAAO;AACT;AAEA,SAAS,mBAAmB,KAA4B;AACtD,MAAI,QAAQ,SAAS,QAAQ,iBAAiB,QAAQ;AAAU,WAAO;AACvE,QAAM,IAAI;AAAA,IACR;AAAA,IACA,0DAA0D,GAAG;AAAA,EAC/D;AACF;AAEA,SAAS,QAAQ,KAAqB;AACpC,QAAM,KAAK,OAAO,SAAS,KAAK,EAAE;AAClC,MAAI,CAAC,OAAO,SAAS,EAAE,KAAK,MAAM,GAAG;AACnC,UAAM,IAAI,SAAS,iBAAiB,8CAA8C,GAAG,IAAI;AAAA,EAC3F;AACA,SAAO;AACT;AAEA,SAAS,aAAqB;AAG5B,SAAO;AACT;AAGA,eAAsB,KAAK,OAAiB,QAAQ,MAAqB;AACvE,QAAM,UAAU,SAAS;AACzB,QAAM,QAAQ,WAAW,IAAI;AAC/B;AAGA,IAAM,kBACJ,OAAO,YAAY,eACnB,MAAM,QAAQ,QAAQ,IAAI,KAC1B,QAAQ,KAAK,CAAC,MAAM,UACpB,+BAA+B,KAAK,QAAQ,KAAK,CAAC,KAAK,EAAE;AAE3D,IAAI,iBAAiB;AACnB,OAAK,EAAE,MAAM,CAAC,QAAQ,kBAAkB,GAAG,CAAC;AAC9C","sourcesContent":["import { Command, Option } from 'commander';\n\nimport { authSwitchCommand } from './commands/auth-switch.js';\nimport {\n  chargesCreateCommand,\n  chargesGetCommand,\n  chargesRefundCommand\n} from './commands/charges.js';\nimport { doctorCommand } from './commands/doctor.js';\nimport { loginCommand } from './commands/login.js';\nimport { logoutCommand } from './commands/logout.js';\nimport type { PaymentMethod } from '@garuhq/node';\nimport { CliError } from './lib/errors.js';\nimport { printErrorAndExit, type OutputMode } from './lib/output.js';\n\ninterface GlobalFlags {\n  apiKey?: string;\n  profile?: string;\n  json?: boolean;\n  quiet?: boolean;\n}\n\n/** Build the top-level command tree. Exposed so tests can exercise the router. */\nexport function buildCli(): Command {\n  const program = new Command();\n\n  program\n    .name('garu')\n    .description('Command-line interface for the Garu payment gateway.')\n    .version(getVersion(), '-v, --version')\n    .addOption(new Option('--api-key <key>', 'Garu API key (overrides env and credentials file)'))\n    .addOption(new Option('-p, --profile <name>', 'credentials profile name'))\n    .addOption(new Option('--json', 'emit strict JSON on stdout (forced in pipes)'))\n    .addOption(new Option('-q, --quiet', 'suppress status output; only print results and errors'))\n    .showHelpAfterError();\n\n  // login\n  program\n    .command('login')\n    .description('Save a Garu API key to the credentials file')\n    .option('--api-key <key>', 'pre-supply the key instead of prompting')\n    .option('-p, --profile <name>', 'profile name to store under', 'default')\n    .action(async (cmdOpts: { apiKey?: string; profile: string }) => {\n      const globals = getGlobals(program);\n      await loginCommand({\n        ...(cmdOpts.apiKey !== undefined ? { apiKey: cmdOpts.apiKey } : {}),\n        profile: cmdOpts.profile,\n        ...globalsToOutput(globals)\n      }).catch((err) => printErrorAndExit(err, globalsToOutput(globals)));\n    });\n\n  // logout\n  program\n    .command('logout')\n    .description('Remove saved credentials')\n    .option('-p, --profile <name>', 'only remove this profile instead of the whole file')\n    .action(async (cmdOpts: { profile?: string }) => {\n      const globals = getGlobals(program);\n      await logoutCommand({\n        ...(cmdOpts.profile !== undefined ? { profile: cmdOpts.profile } : {}),\n        ...globalsToOutput(globals)\n      }).catch((err) => printErrorAndExit(err, globalsToOutput(globals)));\n    });\n\n  // auth switch\n  const auth = program.command('auth').description('Manage credentials profiles');\n  auth\n    .command('switch <profile>')\n    .description('Set the active credentials profile')\n    .action(async (profile: string) => {\n      const globals = getGlobals(program);\n      await authSwitchCommand({ profile, ...globalsToOutput(globals) }).catch((err) =>\n        printErrorAndExit(err, globalsToOutput(globals))\n      );\n    });\n\n  // charges\n  const charges = program.command('charges').description('Create, fetch, and refund charges');\n\n  charges\n    .command('create')\n    .description('Create a charge (PIX, credit card, or boleto)')\n    .requiredOption('--type <type>', 'payment method: pix | credit_card | boleto')\n    .requiredOption('--product-id <uuid>', 'product UUID')\n    .requiredOption('--customer-name <name>', 'customer full name')\n    .requiredOption('--customer-email <email>', 'customer email')\n    .requiredOption(\n      '--customer-document <document>',\n      'CPF (11 digits) or CNPJ (14 digits), digits only'\n    )\n    .requiredOption('--customer-phone <phone>', 'customer phone with area code, digits only')\n    .option('--card-number <number>', 'credit-card number (required for credit_card)')\n    .option('--card-cvv <cvv>', 'credit-card CVV')\n    .option('--card-expiration <yyyy-mm>', 'credit-card expiration date (YYYY-MM)')\n    .option('--card-holder <name>', 'credit-card holder name')\n    .option('--installments <n>', 'number of installments (1-12)', (v) => parseInt(v, 10), 1)\n    .option('--additional-info <text>', 'free-form metadata attached to the charge')\n    .option('--idempotency-key <key>', 'idempotency key (auto-generated if omitted)')\n    .action(async (cmdOpts) => {\n      const globals = getGlobals(program);\n      const type = parsePaymentMethod(cmdOpts.type);\n      await chargesCreateCommand({\n        type,\n        productId: cmdOpts.productId,\n        customerName: cmdOpts.customerName,\n        customerEmail: cmdOpts.customerEmail,\n        customerDocument: cmdOpts.customerDocument,\n        customerPhone: cmdOpts.customerPhone,\n        ...(cmdOpts.cardNumber !== undefined ? { cardNumber: cmdOpts.cardNumber } : {}),\n        ...(cmdOpts.cardCvv !== undefined ? { cardCvv: cmdOpts.cardCvv } : {}),\n        ...(cmdOpts.cardExpiration !== undefined ? { cardExpiration: cmdOpts.cardExpiration } : {}),\n        ...(cmdOpts.cardHolder !== undefined ? { cardHolder: cmdOpts.cardHolder } : {}),\n        ...(cmdOpts.installments !== undefined ? { installments: cmdOpts.installments } : {}),\n        ...(cmdOpts.additionalInfo !== undefined ? { additionalInfo: cmdOpts.additionalInfo } : {}),\n        ...(cmdOpts.idempotencyKey !== undefined ? { idempotencyKey: cmdOpts.idempotencyKey } : {}),\n        ...globalFlagsToCommandOptions(globals)\n      }).catch((err) => printErrorAndExit(err, globalsToOutput(globals)));\n    });\n\n  charges\n    .command('get <id>')\n    .description('Fetch a single charge by ID')\n    .action(async (id: string) => {\n      const globals = getGlobals(program);\n      await chargesGetCommand({\n        id: parseId(id),\n        ...globalFlagsToCommandOptions(globals)\n      }).catch((err) => printErrorAndExit(err, globalsToOutput(globals)));\n    });\n\n  charges\n    .command('refund <id>')\n    .description('Refund a charge (full or partial)')\n    .option('--amount <centavos>', 'partial refund amount in centavos', (v) => parseInt(v, 10))\n    .option('--reason <text>', 'optional refund reason')\n    .option('--idempotency-key <key>', 'idempotency key (auto-generated if omitted)')\n    .action(async (id: string, cmdOpts) => {\n      const globals = getGlobals(program);\n      await chargesRefundCommand({\n        id: parseId(id),\n        ...(cmdOpts.amount !== undefined ? { amount: cmdOpts.amount } : {}),\n        ...(cmdOpts.reason !== undefined ? { reason: cmdOpts.reason } : {}),\n        ...(cmdOpts.idempotencyKey !== undefined ? { idempotencyKey: cmdOpts.idempotencyKey } : {}),\n        ...globalFlagsToCommandOptions(globals)\n      }).catch((err) => printErrorAndExit(err, globalsToOutput(globals)));\n    });\n\n  // doctor\n  program\n    .command('doctor')\n    .description('Environment diagnostic')\n    .action(async () => {\n      const globals = getGlobals(program);\n      await doctorCommand({\n        ...globalFlagsToCommandOptions(globals)\n      }).catch((err) => printErrorAndExit(err, globalsToOutput(globals)));\n    });\n\n  return program;\n}\n\nfunction getGlobals(program: Command): GlobalFlags {\n  return program.opts<GlobalFlags>();\n}\n\nfunction globalsToOutput(globals: GlobalFlags): { mode?: OutputMode; quiet?: boolean } {\n  const out: { mode?: OutputMode; quiet?: boolean } = {};\n  if (globals.json) out.mode = 'json';\n  if (globals.quiet) out.quiet = true;\n  return out;\n}\n\nfunction globalFlagsToCommandOptions(globals: GlobalFlags): {\n  apiKey?: string;\n  profile?: string;\n  mode?: OutputMode;\n  quiet?: boolean;\n} {\n  const out: { apiKey?: string; profile?: string; mode?: OutputMode; quiet?: boolean } = {};\n  if (globals.apiKey) out.apiKey = globals.apiKey;\n  if (globals.profile) out.profile = globals.profile;\n  if (globals.json) out.mode = 'json';\n  if (globals.quiet) out.quiet = true;\n  return out;\n}\n\nfunction parsePaymentMethod(raw: string): PaymentMethod {\n  if (raw === 'pix' || raw === 'credit_card' || raw === 'boleto') return raw;\n  throw new CliError(\n    'invalid_input',\n    `--type must be 'pix', 'credit_card', or 'boleto' (got '${raw}')`\n  );\n}\n\nfunction parseId(raw: string): number {\n  const id = Number.parseInt(raw, 10);\n  if (!Number.isFinite(id) || id <= 0) {\n    throw new CliError('invalid_input', `Charge ID must be a positive integer (got '${raw}')`);\n  }\n  return id;\n}\n\nfunction getVersion(): string {\n  // Statically imported so `bun build --compile` can inline it.\n  // eslint-disable-next-line @typescript-eslint/no-require-imports\n  return '0.1.0';\n}\n\n/** Main entry invoked by `bin/garu.js` and `src/index.ts` when run directly. */\nexport async function main(argv: string[] = process.argv): Promise<void> {\n  const program = buildCli();\n  await program.parseAsync(argv);\n}\n\n// Auto-run when invoked directly (not imported).\nconst invokedDirectly =\n  typeof process !== 'undefined' &&\n  Array.isArray(process.argv) &&\n  process.argv[1] !== undefined &&\n  /garu(-cli)?(\\.(cjs|js|ts))?$/.test(process.argv[1] ?? '');\n\nif (invokedDirectly) {\n  main().catch((err) => printErrorAndExit(err));\n}\n","import { homedir } from 'node:os';\nimport { join } from 'node:path';\nimport { mkdir, readFile, writeFile, rm, stat } from 'node:fs/promises';\n\nimport { CliError } from './errors.js';\n\nexport interface CredentialProfile {\n  apiKey: string;\n  /** Optional seller ID to render in `garu doctor` output. */\n  sellerId?: number;\n  /** Human-readable label for multi-profile setups. */\n  label?: string;\n}\n\nexport interface CredentialsFile {\n  version: 1;\n  activeProfile: string;\n  profiles: Record<string, CredentialProfile>;\n}\n\nconst DEFAULT_FILE: CredentialsFile = {\n  version: 1,\n  activeProfile: 'default',\n  profiles: {}\n};\n\n/**\n * Resolve the credentials file path.\n *\n * Honors `$XDG_CONFIG_HOME` per the XDG base-dir spec, falling back to\n * `~/.config/garu/credentials.json`. Override with `$GARU_CREDENTIALS_PATH`\n * (primarily for tests).\n */\nexport function credentialsPath(env: NodeJS.ProcessEnv = process.env): string {\n  if (env.GARU_CREDENTIALS_PATH) return env.GARU_CREDENTIALS_PATH;\n  const base = env.XDG_CONFIG_HOME || join(homedir(), '.config');\n  return join(base, 'garu', 'credentials.json');\n}\n\n/** Read the credentials file. Returns the default (empty) file if it doesn't exist. */\nexport async function loadCredentials(\n  env: NodeJS.ProcessEnv = process.env\n): Promise<CredentialsFile> {\n  const path = credentialsPath(env);\n  try {\n    const raw = await readFile(path, 'utf8');\n    const parsed = JSON.parse(raw);\n    return normalize(parsed);\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === 'ENOENT') {\n      return { ...DEFAULT_FILE };\n    }\n    throw new CliError(\n      'invalid_input',\n      `Failed to read credentials at ${path}: ${(err as Error).message}`\n    );\n  }\n}\n\n/**\n * Write the credentials file atomically with tight file-mode (0600) and\n * directory-mode (0700).\n */\nexport async function saveCredentials(\n  file: CredentialsFile,\n  env: NodeJS.ProcessEnv = process.env\n): Promise<void> {\n  const path = credentialsPath(env);\n  const dir = path.slice(0, path.lastIndexOf('/'));\n  await mkdir(dir, { recursive: true, mode: 0o700 });\n  await writeFile(path, JSON.stringify(file, null, 2) + '\\n', { mode: 0o600 });\n}\n\n/** Delete the credentials file. No-op if it doesn't exist. */\nexport async function deleteCredentials(env: NodeJS.ProcessEnv = process.env): Promise<void> {\n  const path = credentialsPath(env);\n  try {\n    await rm(path);\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code !== 'ENOENT') throw err;\n  }\n}\n\n/** Add or replace a profile and set it active. */\nexport function upsertProfile(\n  file: CredentialsFile,\n  name: string,\n  profile: CredentialProfile\n): CredentialsFile {\n  return {\n    ...file,\n    activeProfile: name,\n    profiles: { ...file.profiles, [name]: profile }\n  };\n}\n\n/** Check whether the credentials file has the expected 0600 mode. Returns null on any error. */\nexport async function credentialsFileMode(\n  env: NodeJS.ProcessEnv = process.env\n): Promise<number | null> {\n  try {\n    const s = await stat(credentialsPath(env));\n    return s.mode & 0o777;\n  } catch {\n    return null;\n  }\n}\n\nfunction normalize(raw: unknown): CredentialsFile {\n  if (!raw || typeof raw !== 'object') return { ...DEFAULT_FILE };\n  const obj = raw as Partial<CredentialsFile>;\n  return {\n    version: 1,\n    activeProfile: obj.activeProfile ?? 'default',\n    profiles: obj.profiles && typeof obj.profiles === 'object' ? obj.profiles : {}\n  };\n}\n","/**\n * CLI error model. All user-visible failures flow through these types so that\n * the output layer can render them consistently — pretty with a red prefix in\n * TTY mode, strict `{\"error\":{\"code\",\"message\"}}` on stdout + exit 1 in JSON mode.\n */\n\nexport type CliErrorCode =\n  | 'auth_error'\n  | 'not_found'\n  | 'validation_error'\n  | 'rate_limited'\n  | 'server_error'\n  | 'connection_error'\n  | 'signature_verification_failed'\n  | 'user_cancelled'\n  | 'invalid_input'\n  | 'unknown_error';\n\nexport class CliError extends Error {\n  public readonly code: CliErrorCode;\n  public readonly exitCode: number;\n\n  constructor(code: CliErrorCode, message: string, exitCode = 1) {\n    super(message);\n    this.name = 'CliError';\n    this.code = code;\n    this.exitCode = exitCode;\n  }\n}\n\n/** Wrap an unknown thrown value as a {@link CliError}. */\nexport function toCliError(err: unknown): CliError {\n  if (err instanceof CliError) return err;\n  // Duck-type the SDK's GaruError — avoids importing the SDK class hierarchy\n  // just for instanceof checks, and keeps this module dependency-free.\n  if (err && typeof err === 'object' && 'name' in err && 'code' in err) {\n    const e = err as { name: string; code: string; message?: string };\n    if (typeof e.name === 'string' && e.name.startsWith('Garu')) {\n      return new CliError(mapSdkCodeToCliCode(e.code), e.message ?? 'Request failed', 1);\n    }\n  }\n  if (err instanceof Error) return new CliError('unknown_error', err.message);\n  return new CliError('unknown_error', String(err));\n}\n\nfunction mapSdkCodeToCliCode(sdkCode: string): CliErrorCode {\n  switch (sdkCode) {\n    case 'authentication_error':\n    case 'permission_error':\n      return 'auth_error';\n    case 'not_found':\n      return 'not_found';\n    case 'validation_error':\n      return 'validation_error';\n    case 'rate_limited':\n      return 'rate_limited';\n    case 'server_error':\n      return 'server_error';\n    case 'connection_error':\n      return 'connection_error';\n    case 'signature_verification_failed':\n      return 'signature_verification_failed';\n    default:\n      return 'unknown_error';\n  }\n}\n","import pc from 'picocolors';\n\nimport { CliError, toCliError } from './errors.js';\n\nexport type OutputMode = 'pretty' | 'json';\n\nexport interface OutputOptions {\n  /** Force a mode. If omitted, auto-detect from TTY. */\n  mode?: OutputMode;\n  /** Passed by `--quiet`; suppresses everything except errors and the final value. */\n  quiet?: boolean;\n}\n\n/**\n * Resolve the output mode. Rules:\n *   - Explicit `--json` (or `opts.mode === 'json'`) wins.\n *   - Non-TTY stdout (pipe, CI) → `json`.\n *   - Everything else → `pretty`.\n */\nexport function resolveMode(\n  opts: OutputOptions = {},\n  stdout: NodeJS.WriteStream = process.stdout\n): OutputMode {\n  if (opts.mode) return opts.mode;\n  return stdout.isTTY ? 'pretty' : 'json';\n}\n\n/**\n * Print a successful command result. In JSON mode the full object is written\n * to stdout with a trailing newline. In pretty mode the caller's `prettyPrint`\n * fallback (if provided) is used; otherwise the JSON is indented.\n */\nexport function printResult<T>(\n  value: T,\n  opts: OutputOptions & { prettyPrint?: (value: T) => string } = {}\n): void {\n  const mode = resolveMode(opts);\n  if (mode === 'json') {\n    process.stdout.write(`${JSON.stringify(value)}\\n`);\n    return;\n  }\n  if (opts.prettyPrint) {\n    process.stdout.write(`${opts.prettyPrint(value)}\\n`);\n    return;\n  }\n  process.stdout.write(`${JSON.stringify(value, null, 2)}\\n`);\n}\n\n/** Print a short status line — suppressed in JSON mode and when `--quiet`. */\nexport function printStatus(message: string, opts: OutputOptions = {}): void {\n  if (opts.quiet) return;\n  if (resolveMode(opts) === 'json') return;\n  process.stderr.write(`${pc.dim('→')} ${message}\\n`);\n}\n\n/** Print a success line — suppressed in JSON mode and when `--quiet`. */\nexport function printSuccess(message: string, opts: OutputOptions = {}): void {\n  if (opts.quiet) return;\n  if (resolveMode(opts) === 'json') return;\n  process.stderr.write(`${pc.green('✓')} ${message}\\n`);\n}\n\n/**\n * Print an error and exit with the appropriate code. Always uses the\n * CLI-standard shape `{\"error\":{\"code\",\"message\"}}` on stdout in JSON mode,\n * or a red `Error:` line on stderr in pretty mode.\n */\nexport function printErrorAndExit(err: unknown, opts: OutputOptions = {}): never {\n  const cliErr: CliError = toCliError(err);\n  const payload = { error: { code: cliErr.code, message: cliErr.message } };\n\n  if (resolveMode(opts) === 'json') {\n    process.stdout.write(`${JSON.stringify(payload)}\\n`);\n  } else {\n    process.stderr.write(`${pc.red('Error:')} ${cliErr.message}\\n`);\n    if (cliErr.code !== 'unknown_error') {\n      process.stderr.write(`${pc.dim(`  code: ${cliErr.code}`)}\\n`);\n    }\n  }\n  process.exit(cliErr.exitCode);\n}\n","import { loadCredentials, saveCredentials } from '../lib/credentials.js';\nimport { CliError } from '../lib/errors.js';\nimport { printSuccess, type OutputOptions } from '../lib/output.js';\n\nexport interface AuthSwitchOptions extends OutputOptions {\n  profile: string;\n}\n\nexport async function authSwitchCommand(\n  opts: AuthSwitchOptions\n): Promise<{ activeProfile: string }> {\n  const file = await loadCredentials();\n  if (!file.profiles[opts.profile]) {\n    const available = Object.keys(file.profiles).join(', ') || '(none)';\n    throw new CliError('not_found', `Profile '${opts.profile}' not found. Available: ${available}`);\n  }\n\n  await saveCredentials({ ...file, activeProfile: opts.profile });\n  printSuccess(`Active profile set to '${opts.profile}'.`, opts);\n  return { activeProfile: opts.profile };\n}\n","import { loadCredentials, type CredentialProfile } from './credentials.js';\nimport { CliError } from './errors.js';\n\nexport interface ResolvedAuth {\n  apiKey: string;\n  /** Where the key came from, for `doctor` and debug output. */\n  source: 'flag' | 'env' | 'file';\n  /** Profile name if resolved from file; undefined otherwise. */\n  profile?: string;\n  fileProfile?: CredentialProfile;\n}\n\nexport interface ResolveAuthOptions {\n  /** `--api-key` flag value. Highest precedence. */\n  apiKey?: string;\n  /** `--profile` flag value. When set, reads that profile instead of the active one. */\n  profile?: string;\n  env?: NodeJS.ProcessEnv;\n}\n\n/**\n * Resolve the API key following SPEC §7 auth priority:\n *\n *   1. `--api-key` flag\n *   2. `GARU_API_KEY` environment variable\n *   3. credentials file active profile (or profile selected with `--profile`)\n *\n * Throws {@link CliError} with code `auth_error` if no key is found. Never logs.\n */\nexport async function resolveAuth(opts: ResolveAuthOptions = {}): Promise<ResolvedAuth> {\n  const env = opts.env ?? process.env;\n\n  if (opts.apiKey) {\n    return { apiKey: opts.apiKey, source: 'flag' };\n  }\n\n  if (env.GARU_API_KEY) {\n    return { apiKey: env.GARU_API_KEY, source: 'env' };\n  }\n\n  const file = await loadCredentials(env);\n  const profileName = opts.profile ?? file.activeProfile;\n  const profile = file.profiles[profileName];\n  if (profile && profile.apiKey) {\n    return {\n      apiKey: profile.apiKey,\n      source: 'file',\n      profile: profileName,\n      fileProfile: profile\n    };\n  }\n\n  throw new CliError('auth_error', 'No API key found. Run `garu login` or set GARU_API_KEY.');\n}\n\n/**\n * Same as {@link resolveAuth} but returns `null` instead of throwing when no\n * credentials are available. Used by `garu doctor`.\n */\nexport async function resolveAuthOptional(\n  opts: ResolveAuthOptions = {}\n): Promise<ResolvedAuth | null> {\n  try {\n    return await resolveAuth(opts);\n  } catch (err) {\n    if (err instanceof CliError && err.code === 'auth_error') return null;\n    throw err;\n  }\n}\n","import { Garu } from '@garuhq/node';\n\nimport type { ResolvedAuth } from './auth.js';\nimport { CLI_VERSION } from '../version.js';\n\nexport interface GaruClientOptions {\n  auth: ResolvedAuth;\n  baseUrl?: string;\n}\n\n/**\n * Construct a `Garu` SDK instance from resolved auth.\n *\n * The CLI dogfoods `@garuhq/node` — every HTTP call flows through the SDK we\n * shipped in Chunk 3. This keeps retries, idempotency, and error mapping\n * consistent between the CLI, MCP server, and any user-written integration.\n */\nexport function createGaruClient(opts: GaruClientOptions): Garu {\n  return new Garu({\n    apiKey: opts.auth.apiKey,\n    baseUrl: opts.baseUrl\n  });\n}\n\n/** User-Agent used for CLI requests. Surfaces the CLI version in backend logs. */\nexport function cliUserAgent(): string {\n  return `garu-cli/${CLI_VERSION}`;\n}\n","/**\n * CLI version.\n *\n * Kept as a plain string so `bun build --compile` can inline it at compile time\n * and the resulting binary has no runtime dependency on `package.json`.\n * The release workflow bumps this in lockstep with `package.json` on `v*` tags.\n */\nexport const CLI_VERSION = '0.1.0';\n","import type { Charge, Customer, Garu, PaymentMethod, RefundChargeParams } from '@garuhq/node';\n\nimport { resolveAuth } from '../lib/auth.js';\nimport { createGaruClient } from '../lib/client.js';\nimport { CliError } from '../lib/errors.js';\nimport { printResult, type OutputOptions } from '../lib/output.js';\n\nexport interface ChargesGlobalOptions extends OutputOptions {\n  apiKey?: string;\n  profile?: string;\n  baseUrl?: string;\n  /** Injectable for tests — bypass auth resolution + SDK construction. */\n  garu?: Garu;\n}\n\nexport interface ChargesCreateOptions extends ChargesGlobalOptions {\n  type: PaymentMethod;\n  productId: string;\n  customerName: string;\n  customerEmail: string;\n  customerDocument: string;\n  customerPhone: string;\n  cardNumber?: string;\n  cardCvv?: string;\n  cardExpiration?: string;\n  cardHolder?: string;\n  installments?: number;\n  idempotencyKey?: string;\n  additionalInfo?: string;\n}\n\nexport interface ChargesByIdOptions extends ChargesGlobalOptions {\n  id: number;\n}\n\nexport interface ChargesRefundOptions extends ChargesByIdOptions {\n  /** Amount in centavos. Omit for full refund. */\n  amount?: number;\n  reason?: string;\n  idempotencyKey?: string;\n}\n\nasync function getClient(opts: ChargesGlobalOptions): Promise<Garu> {\n  if (opts.garu) return opts.garu;\n  const auth = await resolveAuth({\n    ...(opts.apiKey !== undefined ? { apiKey: opts.apiKey } : {}),\n    ...(opts.profile !== undefined ? { profile: opts.profile } : {})\n  });\n  return createGaruClient({\n    auth,\n    ...(opts.baseUrl !== undefined ? { baseUrl: opts.baseUrl } : {})\n  });\n}\n\nexport async function chargesCreateCommand(opts: ChargesCreateOptions): Promise<Charge> {\n  validateCreate(opts);\n  const garu = await getClient(opts);\n\n  const customer: Customer = {\n    name: opts.customerName,\n    email: opts.customerEmail,\n    document: opts.customerDocument,\n    phone: opts.customerPhone\n  };\n\n  const charge = await garu.charges.create({\n    productId: opts.productId,\n    paymentMethod: opts.type,\n    customer,\n    ...(opts.additionalInfo !== undefined ? { additionalInfo: opts.additionalInfo } : {}),\n    ...(opts.idempotencyKey !== undefined ? { idempotencyKey: opts.idempotencyKey } : {}),\n    ...(opts.type === 'credit_card' && opts.cardNumber\n      ? {\n          cardInfo: {\n            cardNumber: opts.cardNumber,\n            cvv: opts.cardCvv!,\n            expirationDate: opts.cardExpiration!,\n            holderName: opts.cardHolder!,\n            installments: opts.installments ?? 1\n          }\n        }\n      : {})\n  });\n\n  printResult(charge, { ...opts, prettyPrint: prettyCharge });\n  return charge;\n}\n\nexport async function chargesGetCommand(opts: ChargesByIdOptions): Promise<Charge> {\n  const garu = await getClient(opts);\n  const charge = await garu.charges.get(opts.id);\n  printResult(charge, { ...opts, prettyPrint: prettyCharge });\n  return charge;\n}\n\nexport async function chargesRefundCommand(opts: ChargesRefundOptions): Promise<Charge> {\n  const garu = await getClient(opts);\n  const params: RefundChargeParams = {};\n  if (opts.amount !== undefined) params.amount = opts.amount;\n  if (opts.reason !== undefined) params.reason = opts.reason;\n  if (opts.idempotencyKey !== undefined) params.idempotencyKey = opts.idempotencyKey;\n  const charge = await garu.charges.refund(opts.id, params);\n  printResult(charge, { ...opts, prettyPrint: prettyCharge });\n  return charge;\n}\n\nfunction validateCreate(opts: ChargesCreateOptions): void {\n  if (opts.type === 'credit_card') {\n    const missing: string[] = [];\n    if (!opts.cardNumber) missing.push('--card-number');\n    if (!opts.cardCvv) missing.push('--card-cvv');\n    if (!opts.cardExpiration) missing.push('--card-expiration');\n    if (!opts.cardHolder) missing.push('--card-holder');\n    if (missing.length) {\n      throw new CliError('invalid_input', `Credit-card charges require: ${missing.join(', ')}`);\n    }\n  }\n}\n\nfunction prettyCharge(charge: Charge): string {\n  const lines = [\n    `Charge ${charge.id}`,\n    `  status:  ${charge.status}`,\n    `  amount:  ${charge.amount}`,\n    `  method:  ${charge.paymentMethodId}`,\n    `  date:    ${charge.date}`\n  ];\n  if (charge.deadline) lines.push(`  deadline: ${charge.deadline}`);\n  return lines.join('\\n');\n}\n","import { existsSync } from 'node:fs';\nimport { homedir, platform } from 'node:os';\nimport { join } from 'node:path';\n\nimport { Garu } from '@garuhq/node';\n\nimport { resolveAuthOptional } from '../lib/auth.js';\nimport { credentialsFileMode, credentialsPath } from '../lib/credentials.js';\nimport { printResult, type OutputOptions } from '../lib/output.js';\nimport { CLI_VERSION } from '../version.js';\n\nexport interface DoctorReport {\n  cli: { version: string };\n  api: { reachable: boolean; url: string; version?: string; error?: string };\n  credentials: {\n    path: string;\n    source: 'flag' | 'env' | 'file' | 'none';\n    profile?: string;\n    fileMode?: string;\n    warning?: string;\n  };\n  agents: {\n    claudeCode: boolean;\n    cursor: boolean;\n    codex: boolean;\n    windsurf: boolean;\n    claudeDesktop: boolean;\n    vscodeMcpInCwd: boolean;\n  };\n}\n\nexport interface DoctorOptions extends OutputOptions {\n  apiKey?: string;\n  profile?: string;\n  baseUrl?: string;\n  /** Injectable for tests — bypass the real HTTP call. */\n  garu?: Garu;\n  /** Injectable HOME, for tests. */\n  home?: string;\n  /** Injectable cwd, for tests. */\n  cwd?: string;\n  /** Injectable platform, for tests. */\n  platform?: NodeJS.Platform;\n}\n\n/**\n * Run a full environment diagnostic.\n *\n * Never throws on expected failures — bad auth, unreachable API, missing\n * credentials all become structured report fields. Only genuinely unexpected\n * errors (programming bugs) bubble up.\n */\nexport async function doctorCommand(opts: DoctorOptions = {}): Promise<DoctorReport> {\n  const home = opts.home ?? homedir();\n  const cwd = opts.cwd ?? process.cwd();\n  const plat = opts.platform ?? platform();\n\n  const credentials = await reportCredentials(opts);\n  const api = await reportApi(opts);\n  const agents = detectAgents(home, cwd, plat);\n\n  const report: DoctorReport = {\n    cli: { version: CLI_VERSION },\n    api,\n    credentials,\n    agents\n  };\n\n  printResult(report, { ...opts, prettyPrint: prettyDoctor });\n  return report;\n}\n\nasync function reportCredentials(opts: DoctorOptions): Promise<DoctorReport['credentials']> {\n  const path = credentialsPath();\n  const resolved = await resolveAuthOptional({\n    ...(opts.apiKey !== undefined ? { apiKey: opts.apiKey } : {}),\n    ...(opts.profile !== undefined ? { profile: opts.profile } : {})\n  });\n\n  if (!resolved) {\n    return { path, source: 'none' };\n  }\n\n  const out: DoctorReport['credentials'] = { path, source: resolved.source };\n  if (resolved.profile) out.profile = resolved.profile;\n\n  if (resolved.source === 'file') {\n    const mode = await credentialsFileMode();\n    if (mode !== null) {\n      out.fileMode = `0${mode.toString(8)}`;\n      if (mode !== 0o600) {\n        out.warning = `credentials file mode is 0${mode.toString(8)}; expected 0600`;\n      }\n    }\n  }\n\n  return out;\n}\n\nasync function reportApi(opts: DoctorOptions): Promise<DoctorReport['api']> {\n  const url = opts.baseUrl ?? 'https://garu.com.br';\n  const garu =\n    opts.garu ??\n    new Garu({\n      ...(opts.baseUrl !== undefined ? { baseUrl: opts.baseUrl } : {})\n    });\n\n  try {\n    const meta = await garu.meta.get();\n    return { reachable: true, url, version: meta.version };\n  } catch (err) {\n    return {\n      reachable: false,\n      url,\n      error: err instanceof Error ? err.message : String(err)\n    };\n  }\n}\n\nfunction detectAgents(home: string, cwd: string, plat: NodeJS.Platform): DoctorReport['agents'] {\n  return {\n    claudeCode: existsSync(join(home, '.claude')),\n    cursor: existsSync(join(home, '.cursor')),\n    codex: existsSync(join(home, '.codex')),\n    windsurf: existsSync(join(home, '.windsurf')),\n    claudeDesktop: existsSync(claudeDesktopConfigPath(home, plat)),\n    vscodeMcpInCwd: existsSync(join(cwd, '.vscode', 'mcp.json'))\n  };\n}\n\nfunction claudeDesktopConfigPath(home: string, plat: NodeJS.Platform): string {\n  if (plat === 'darwin') {\n    return join(home, 'Library', 'Application Support', 'Claude', 'claude_desktop_config.json');\n  }\n  if (plat === 'win32') {\n    return join(home, 'AppData', 'Roaming', 'Claude', 'claude_desktop_config.json');\n  }\n  return join(home, '.config', 'Claude', 'claude_desktop_config.json');\n}\n\nfunction prettyDoctor(r: DoctorReport): string {\n  const check = (ok: boolean) => (ok ? 'yes' : 'no ');\n  const lines = [\n    `CLI:          garu ${r.cli.version}`,\n    `API:          ${r.api.reachable ? `reachable (${r.api.url}, backend ${r.api.version ?? '?'})` : `unreachable (${r.api.url})`}`,\n    r.api.error ? `              ${r.api.error}` : undefined,\n    `Credentials:  source=${r.credentials.source}${r.credentials.profile ? ` profile=${r.credentials.profile}` : ''}${r.credentials.fileMode ? ` mode=${r.credentials.fileMode}` : ''}`,\n    r.credentials.warning ? `              ⚠ ${r.credentials.warning}` : undefined,\n    '',\n    'Detected agents:',\n    `  Claude Code:    ${check(r.agents.claudeCode)}`,\n    `  Cursor:         ${check(r.agents.cursor)}`,\n    `  Codex:          ${check(r.agents.codex)}`,\n    `  Windsurf:       ${check(r.agents.windsurf)}`,\n    `  Claude Desktop: ${check(r.agents.claudeDesktop)}`,\n    `  VS Code MCP:    ${check(r.agents.vscodeMcpInCwd)} (.vscode/mcp.json in cwd)`\n  ].filter((l): l is string => l !== undefined);\n  return lines.join('\\n');\n}\n","import { password as promptPassword } from '@inquirer/prompts';\n\nimport { Garu } from '@garuhq/node';\n\nimport { loadCredentials, saveCredentials, upsertProfile } from '../lib/credentials.js';\nimport { CliError } from '../lib/errors.js';\nimport { printStatus, printSuccess, type OutputOptions } from '../lib/output.js';\n\nexport interface LoginOptions extends OutputOptions {\n  /** Profile name to create/update. Default: `default`. */\n  profile?: string;\n  /** Pre-supplied API key (for scripting). When set, no interactive prompt. */\n  apiKey?: string;\n  /** Override base URL (tests). */\n  baseUrl?: string;\n}\n\nexport async function loginCommand(opts: LoginOptions = {}): Promise<{ profile: string }> {\n  const profile = opts.profile ?? 'default';\n\n  const apiKey =\n    opts.apiKey ??\n    (await promptPassword({\n      message: 'Paste your Garu API key (sk_live_... or sk_test_...)',\n      mask: '*'\n    }).catch(() => {\n      throw new CliError('user_cancelled', 'Login cancelled.');\n    }));\n\n  if (!apiKey || !/^sk_(live|test)_[A-Za-z0-9_]+$/.test(apiKey)) {\n    throw new CliError('invalid_input', 'API key must look like `sk_live_...` or `sk_test_...`.');\n  }\n\n  printStatus('Validating key with Garu...', opts);\n  const garu = new Garu({\n    apiKey,\n    ...(opts.baseUrl !== undefined ? { baseUrl: opts.baseUrl } : {})\n  });\n\n  // Hit an unauthenticated endpoint first to confirm connectivity, then use\n  // the authenticated path to prove the key works. `meta.get` tests reachability;\n  // we don't yet have a light authed endpoint to verify the key, so the key is\n  // stored after basic format + reachability checks. A real auth probe will\n  // land once the backend exposes `GET /api/v1/me`.\n  await garu.meta.get();\n\n  const file = await loadCredentials();\n  const updated = upsertProfile(file, profile, { apiKey });\n  await saveCredentials(updated);\n\n  printSuccess(`Saved profile '${profile}' to ~/.config/garu/credentials.json`, opts);\n  return { profile };\n}\n","import { deleteCredentials, loadCredentials, saveCredentials } from '../lib/credentials.js';\nimport { CliError } from '../lib/errors.js';\nimport { printSuccess, type OutputOptions } from '../lib/output.js';\n\nexport interface LogoutOptions extends OutputOptions {\n  /**\n   * Profile to remove. If omitted, the entire credentials file is deleted.\n   */\n  profile?: string;\n}\n\nexport async function logoutCommand(opts: LogoutOptions = {}): Promise<{ cleared: string }> {\n  if (!opts.profile) {\n    await deleteCredentials();\n    printSuccess('All saved credentials deleted.', opts);\n    return { cleared: 'all' };\n  }\n\n  const file = await loadCredentials();\n  if (!file.profiles[opts.profile]) {\n    throw new CliError('not_found', `Profile '${opts.profile}' not found.`);\n  }\n\n  const { [opts.profile]: _removed, ...rest } = file.profiles;\n  void _removed;\n\n  const nextActive =\n    file.activeProfile === opts.profile ? (Object.keys(rest)[0] ?? 'default') : file.activeProfile;\n\n  await saveCredentials({ ...file, activeProfile: nextActive, profiles: rest });\n  printSuccess(`Profile '${opts.profile}' removed.`, opts);\n  return { cleared: opts.profile };\n}\n"]}

package/dist/index.d.cts

@@ -0,0 +1,8 @@
+import { Command } from 'commander';
+
+/** Build the top-level command tree. Exposed so tests can exercise the router. */
+declare function buildCli(): Command;
+/** Main entry invoked by `bin/garu.js` and `src/index.ts` when run directly. */
+declare function main(argv?: string[]): Promise<void>;
+
+export { buildCli, main };

package/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "@garuhq/cli",
+  "version": "0.1.0",
+  "description": "Official command-line interface for the Garu payment gateway.",
+  "license": "MIT",
+  "homepage": "https://garu.com.br",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Garu-Pagamentos/garu-cli.git"
+  },
+  "bugs": {
+    "url": "https://github.com/Garu-Pagamentos/garu-cli/issues"
+  },
+  "keywords": [
+    "garu",
+    "cli",
+    "payments",
+    "pix",
+    "brazil",
+    "fintech"
+  ],
+  "type": "module",
+  "bin": {
+    "garu": "./bin/garu.cjs"
+  },
+  "main": "./dist/index.cjs",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "bin",
+    "dist",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsx src/index.ts",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "prepublishOnly": "npm run typecheck && npm test && npm run build"
+  },
+  "dependencies": {
+    "@garuhq/node": "0.1.0",
+    "@inquirer/prompts": "5.0.2",
+    "commander": "12.0.0",
+    "picocolors": "1.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "20.12.7",
+    "tsup": "8.0.2",
+    "tsx": "4.7.2",
+    "typescript": "5.4.5",
+    "vitest": "1.5.0"
+  }
+}