@neetru/cli 1.0.1 → 2.0.0

package/dist/lib/api-client.d.ts

@@ -0,0 +1,21 @@
+export interface ApiError {
+    code: string;
+    message: string;
+}
+export declare class CliApiError extends Error {
+    readonly status: number;
+    readonly code: string;
+    constructor(status: number, code: string, message: string);
+}
+export declare class CliNetworkError extends Error {
+    readonly cause?: unknown;
+    constructor(message: string, cause?: unknown);
+}
+interface RequestOptions {
+    method?: 'GET' | 'POST';
+    body?: unknown;
+    token?: string;
+    signal?: AbortSignal;
+}
+export declare function apiRequest<T>(path: string, opts?: RequestOptions): Promise<T>;
+export {};

package/dist/lib/api-client.js

@@ -0,0 +1,65 @@
+import { config } from './config.js';
+export class CliApiError extends Error {
+    status;
+    code;
+    constructor(status, code, message) {
+        super(message);
+        this.name = 'CliApiError';
+        this.status = status;
+        this.code = code;
+    }
+}
+export class CliNetworkError extends Error {
+    cause;
+    constructor(message, cause) {
+        super(message);
+        this.name = 'CliNetworkError';
+        this.cause = cause;
+    }
+}
+function buildBaseUrl() {
+    const raw = config.get('neetruApiUrl') ?? 'https://api.neetru.com';
+    return raw.replace(/\/+$/, '');
+}
+export async function apiRequest(path, opts = {}) {
+    const baseUrl = buildBaseUrl();
+    const url = `${baseUrl}${path.startsWith('/') ? path : `/${path}`}`;
+    const token = opts.token ?? config.get('neetruApiKey');
+    const headers = {
+        'content-type': 'application/json',
+        accept: 'application/json',
+    };
+    if (token)
+        headers['authorization'] = `Bearer ${token}`;
+    let response;
+    try {
+        response = await fetch(url, {
+            method: opts.method ?? 'GET',
+            headers,
+            body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined,
+            signal: opts.signal,
+        });
+    }
+    catch (error) {
+        throw new CliNetworkError(`Falha ao contactar ${url}: ${error.message}`, error);
+    }
+    const text = await response.text();
+    let parsed = undefined;
+    if (text) {
+        try {
+            parsed = JSON.parse(text);
+        }
+        catch {
+            // server returned non-JSON (e.g. 502 from infra) — surface as error
+        }
+    }
+    if (!response.ok) {
+        const errBody = parsed;
+        const code = errBody?.error?.code ?? `http_${response.status}`;
+        const message = errBody?.error?.message ??
+            (typeof parsed === 'string' ? parsed : `Erro HTTP ${response.status}`);
+        throw new CliApiError(response.status, code, message);
+    }
+    return parsed;
+}
+//# sourceMappingURL=api-client.js.map

package/dist/lib/api-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../../src/lib/api-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAOrC,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,MAAM,CAAS;IACf,IAAI,CAAS;IACtB,YAAY,MAAc,EAAE,IAAY,EAAE,OAAe;QACvD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAC/B,KAAK,CAAW;IACzB,YAAY,OAAe,EAAE,KAAe;QAC1C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AASD,SAAS,YAAY;IACnB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,wBAAwB,CAAC;IACnE,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAI,IAAY,EAAE,OAAuB,EAAE;IACzE,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,GAAG,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAEvD,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,MAAM,EAAE,kBAAkB;KAC3B,CAAC;IACF,IAAI,KAAK;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;IAExD,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC1B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;YAC5B,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YACrE,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,eAAe,CACvB,sBAAsB,GAAG,KAAM,KAAe,CAAC,OAAO,EAAE,EACxD,KAAK,CACN,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,MAAM,GAAY,SAAS,CAAC;IAChC,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;IACH,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,MAA0C,CAAC;QAC3D,MAAM,IAAI,GAAG,OAAO,EAAE,KAAK,EAAE,IAAI,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC/D,MAAM,OAAO,GACX,OAAO,EAAE,KAAK,EAAE,OAAO;YACvB,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,MAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,MAAW,CAAC;AACrB,CAAC"}

package/dist/lib/auth.d.ts

@@ -0,0 +1,15 @@
+export interface NeetruAuth {
+    token: string;
+    email: string;
+    savedAt: string;
+}
+export declare function getAuthFilePath(): string;
+export declare class AuthFileMissingError extends Error {
+    constructor();
+}
+export declare class AuthFileInvalidError extends Error {
+    constructor(message: string);
+}
+export declare function loadToken(): Promise<NeetruAuth>;
+export declare function saveToken(token: string, email: string): Promise<string>;
+export declare function clearToken(): Promise<boolean>;

package/dist/lib/auth.js

@@ -0,0 +1,98 @@
+/**
+ * Token storage for `neetru` CLI — `~/.config/neetru-cli/auth.json`.
+ *
+ * Sprint 1 — Device Code OAuth (RFC 8628). Replaces the legacy `Conf`-based
+ * `neetruApiKey` storage with a dedicated file we can chmod 0600 explicitly.
+ *
+ * File shape:
+ * ```json
+ * {
+ *   "token": "nrt_<keyId>_<secret>",
+ *   "email": "owner@neetru.com",
+ *   "savedAt": "2026-05-05T12:00:00.000Z"
+ * }
+ * ```
+ */
+import { promises as fs, existsSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { homedir } from 'node:os';
+export function getAuthFilePath() {
+    // XDG-ish location; works on Linux, macOS, and Windows (homedir resolves
+    // %USERPROFILE%). We deliberately don't honor $XDG_CONFIG_HOME — keeps the
+    // path stable for `neetru logout` and docs.
+    return join(homedir(), '.config', 'neetru-cli', 'auth.json');
+}
+export class AuthFileMissingError extends Error {
+    constructor() {
+        super('Não autenticado. Execute: neetru login');
+        this.name = 'AuthFileMissingError';
+    }
+}
+export class AuthFileInvalidError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'AuthFileInvalidError';
+    }
+}
+export async function loadToken() {
+    const path = getAuthFilePath();
+    if (!existsSync(path)) {
+        throw new AuthFileMissingError();
+    }
+    let raw;
+    try {
+        raw = await fs.readFile(path, 'utf8');
+    }
+    catch (err) {
+        throw new AuthFileInvalidError(`Falha ao ler ${path}: ${err.message}`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        throw new AuthFileInvalidError(`Arquivo ${path} corrompido. Execute: neetru logout && neetru login`);
+    }
+    const data = parsed;
+    if (!data ||
+        typeof data.token !== 'string' ||
+        typeof data.email !== 'string' ||
+        typeof data.savedAt !== 'string') {
+        throw new AuthFileInvalidError(`Arquivo ${path} incompleto. Execute: neetru logout && neetru login`);
+    }
+    return { token: data.token, email: data.email, savedAt: data.savedAt };
+}
+export async function saveToken(token, email) {
+    const path = getAuthFilePath();
+    const dir = dirname(path);
+    // Garante diretório (mode 0700 é redundante em Windows mas é o intent).
+    await fs.mkdir(dir, { recursive: true, mode: 0o700 });
+    const payload = {
+        token,
+        email,
+        savedAt: new Date().toISOString(),
+    };
+    // Escreve com mode restritivo. Em Windows, fs.chmod no-ops em parte mas o
+    // arquivo continua visível só pra owner via NTFS herdado de %USERPROFILE%.
+    await fs.writeFile(path, JSON.stringify(payload, null, 2), {
+        encoding: 'utf8',
+        mode: 0o600,
+    });
+    // Defensive chmod — writeFile mode acima é só a cria; se já existia, força.
+    try {
+        await fs.chmod(path, 0o600);
+    }
+    catch {
+        // Em Windows alguns runtimes tratam mode 0600 como read-only flag;
+        // ignoramos erro silenciosamente.
+    }
+    return path;
+}
+export async function clearToken() {
+    const path = getAuthFilePath();
+    if (!existsSync(path))
+        return false;
+    await fs.unlink(path);
+    return true;
+}
+//# sourceMappingURL=auth.js.map

package/dist/lib/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAQlC,MAAM,UAAU,eAAe;IAC7B,yEAAyE;IACzE,2EAA2E;IAC3E,4CAA4C;IAC5C,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C;QACE,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,oBAAoB,EAAE,CAAC;IACnC,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,oBAAoB,CAC5B,gBAAgB,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CAClD,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,oBAAoB,CAC5B,WAAW,IAAI,qDAAqD,CACrE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAA6B,CAAC;IAC3C,IACE,CAAC,IAAI;QACL,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;QAC9B,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;QAC9B,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAChC,CAAC;QACD,MAAM,IAAI,oBAAoB,CAC5B,WAAW,IAAI,qDAAqD,CACrE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAa,EAAE,KAAa;IAC1D,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1B,wEAAwE;IACxE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAEtD,MAAM,OAAO,GAAe;QAC1B,KAAK;QACL,KAAK;QACL,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAClC,CAAC;IAEF,0EAA0E;IAC1E,2EAA2E;IAC3E,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QACzD,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IAEH,4EAA4E;IAC5E,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,kCAAkC;IACpC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/lib/config-schema.d.ts

@@ -0,0 +1,165 @@
+import { z } from 'zod';
+export declare const PUBLIC_PRODUCT_ICON_KEYS: readonly ["activity", "factory", "chart", "shield", "spark", "target", "trending"];
+export declare const PUBLIC_PRODUCT_STATUSES: readonly ["live", "soon", "beta"];
+export declare const RUNTIMES: readonly ["nextjs", "node-api"];
+export declare const slugSchema: z.ZodString;
+export declare const publishBlockSchema: z.ZodObject<{
+    tagline: z.ZodString;
+    description: z.ZodString;
+    iconKey: z.ZodEnum<["activity", "factory", "chart", "shield", "spark", "target", "trending"]>;
+    status: z.ZodEnum<["live", "soon", "beta"]>;
+    order: z.ZodOptional<z.ZodNumber>;
+    ctaHref: z.ZodOptional<z.ZodString>;
+    ctaLabel: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    description: string;
+    status: "soon" | "live" | "beta";
+    tagline: string;
+    iconKey: "spark" | "target" | "activity" | "factory" | "chart" | "shield" | "trending";
+    order?: number | undefined;
+    ctaHref?: string | undefined;
+    ctaLabel?: string | undefined;
+}, {
+    description: string;
+    status: "soon" | "live" | "beta";
+    tagline: string;
+    iconKey: "spark" | "target" | "activity" | "factory" | "chart" | "shield" | "trending";
+    order?: number | undefined;
+    ctaHref?: string | undefined;
+    ctaLabel?: string | undefined;
+}>;
+export declare const deployBlockSchema: z.ZodObject<{
+    region: z.ZodOptional<z.ZodString>;
+    serviceName: z.ZodOptional<z.ZodString>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    region: z.ZodOptional<z.ZodString>;
+    serviceName: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    region: z.ZodOptional<z.ZodString>;
+    serviceName: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">>;
+export declare const neetruConfigSchema: z.ZodObject<{
+    $schema: z.ZodOptional<z.ZodString>;
+    slug: z.ZodString;
+    name: z.ZodString;
+    runtime: z.ZodEnum<["nextjs", "node-api"]>;
+    tenantId: z.ZodOptional<z.ZodString>;
+    publish: z.ZodOptional<z.ZodObject<{
+        tagline: z.ZodString;
+        description: z.ZodString;
+        iconKey: z.ZodEnum<["activity", "factory", "chart", "shield", "spark", "target", "trending"]>;
+        status: z.ZodEnum<["live", "soon", "beta"]>;
+        order: z.ZodOptional<z.ZodNumber>;
+        ctaHref: z.ZodOptional<z.ZodString>;
+        ctaLabel: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        description: string;
+        status: "soon" | "live" | "beta";
+        tagline: string;
+        iconKey: "spark" | "target" | "activity" | "factory" | "chart" | "shield" | "trending";
+        order?: number | undefined;
+        ctaHref?: string | undefined;
+        ctaLabel?: string | undefined;
+    }, {
+        description: string;
+        status: "soon" | "live" | "beta";
+        tagline: string;
+        iconKey: "spark" | "target" | "activity" | "factory" | "chart" | "shield" | "trending";
+        order?: number | undefined;
+        ctaHref?: string | undefined;
+        ctaLabel?: string | undefined;
+    }>>;
+    deploy: z.ZodOptional<z.ZodObject<{
+        region: z.ZodOptional<z.ZodString>;
+        serviceName: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        region: z.ZodOptional<z.ZodString>;
+        serviceName: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        region: z.ZodOptional<z.ZodString>;
+        serviceName: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    slug: string;
+    runtime: "nextjs" | "node-api";
+    $schema?: string | undefined;
+    tenantId?: string | undefined;
+    publish?: {
+        description: string;
+        status: "soon" | "live" | "beta";
+        tagline: string;
+        iconKey: "spark" | "target" | "activity" | "factory" | "chart" | "shield" | "trending";
+        order?: number | undefined;
+        ctaHref?: string | undefined;
+        ctaLabel?: string | undefined;
+    } | undefined;
+    deploy?: z.objectOutputType<{
+        region: z.ZodOptional<z.ZodString>;
+        serviceName: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
+}, {
+    name: string;
+    slug: string;
+    runtime: "nextjs" | "node-api";
+    $schema?: string | undefined;
+    tenantId?: string | undefined;
+    publish?: {
+        description: string;
+        status: "soon" | "live" | "beta";
+        tagline: string;
+        iconKey: "spark" | "target" | "activity" | "factory" | "chart" | "shield" | "trending";
+        order?: number | undefined;
+        ctaHref?: string | undefined;
+        ctaLabel?: string | undefined;
+    } | undefined;
+    deploy?: z.objectInputType<{
+        region: z.ZodOptional<z.ZodString>;
+        serviceName: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
+}>;
+export type NeetruConfig = z.infer<typeof neetruConfigSchema>;
+export type PublishBlock = z.infer<typeof publishBlockSchema>;
+export declare const catalogUpsertPayloadSchema: z.ZodObject<{
+    slug: z.ZodString;
+    name: z.ZodString;
+    tagline: z.ZodString;
+    description: z.ZodString;
+    iconKey: z.ZodEnum<["activity", "factory", "chart", "shield", "spark", "target", "trending"]>;
+    status: z.ZodEnum<["live", "soon", "beta"]>;
+    order: z.ZodNumber;
+    published: z.ZodBoolean;
+    ctaHref: z.ZodOptional<z.ZodString>;
+    ctaLabel: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    description: string;
+    name: string;
+    status: "soon" | "live" | "beta";
+    slug: string;
+    tagline: string;
+    iconKey: "spark" | "target" | "activity" | "factory" | "chart" | "shield" | "trending";
+    order: number;
+    published: boolean;
+    ctaHref?: string | undefined;
+    ctaLabel?: string | undefined;
+}, {
+    description: string;
+    name: string;
+    status: "soon" | "live" | "beta";
+    slug: string;
+    tagline: string;
+    iconKey: "spark" | "target" | "activity" | "factory" | "chart" | "shield" | "trending";
+    order: number;
+    published: boolean;
+    ctaHref?: string | undefined;
+    ctaLabel?: string | undefined;
+}>;
+export type CatalogUpsertPayload = z.infer<typeof catalogUpsertPayloadSchema>;
+export declare const catalogUnpublishPayloadSchema: z.ZodObject<{
+    slug: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    slug: string;
+}, {
+    slug: string;
+}>;
+export type CatalogUnpublishPayload = z.infer<typeof catalogUnpublishPayloadSchema>;

package/dist/lib/config-schema.js

@@ -0,0 +1,57 @@
+import { z } from 'zod';
+export const PUBLIC_PRODUCT_ICON_KEYS = [
+    'activity',
+    'factory',
+    'chart',
+    'shield',
+    'spark',
+    'target',
+    'trending',
+];
+export const PUBLIC_PRODUCT_STATUSES = ['live', 'soon', 'beta'];
+export const RUNTIMES = ['nextjs', 'node-api'];
+export const slugSchema = z
+    .string()
+    .min(2, 'slug deve ter pelo menos 2 caracteres')
+    .max(64, 'slug deve ter no máximo 64 caracteres')
+    .regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/, 'slug deve estar em kebab-case (lowercase, dígitos, hífens)');
+export const publishBlockSchema = z.object({
+    tagline: z.string().min(2).max(120),
+    description: z.string().min(10).max(2000),
+    iconKey: z.enum(PUBLIC_PRODUCT_ICON_KEYS),
+    status: z.enum(PUBLIC_PRODUCT_STATUSES),
+    order: z.number().int().nonnegative().optional(),
+    ctaHref: z.string().url().optional(),
+    ctaLabel: z.string().min(1).max(60).optional(),
+});
+export const deployBlockSchema = z
+    .object({
+    region: z.string().optional(),
+    serviceName: z.string().optional(),
+})
+    .passthrough();
+export const neetruConfigSchema = z.object({
+    $schema: z.string().optional(),
+    slug: slugSchema,
+    name: z.string().min(2).max(80),
+    runtime: z.enum(RUNTIMES),
+    tenantId: z.string().optional(),
+    publish: publishBlockSchema.optional(),
+    deploy: deployBlockSchema.optional(),
+});
+export const catalogUpsertPayloadSchema = z.object({
+    slug: slugSchema,
+    name: z.string().min(2).max(80),
+    tagline: z.string().min(2).max(120),
+    description: z.string().min(10).max(2000),
+    iconKey: z.enum(PUBLIC_PRODUCT_ICON_KEYS),
+    status: z.enum(PUBLIC_PRODUCT_STATUSES),
+    order: z.number().int().nonnegative(),
+    published: z.boolean(),
+    ctaHref: z.string().url().optional(),
+    ctaLabel: z.string().min(1).max(60).optional(),
+});
+export const catalogUnpublishPayloadSchema = z.object({
+    slug: slugSchema,
+});
+//# sourceMappingURL=config-schema.js.map

package/dist/lib/config-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-schema.js","sourceRoot":"","sources":["../../src/lib/config-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,UAAU;IACV,SAAS;IACT,OAAO;IACP,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,UAAU;CACF,CAAC;AAEX,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAEzE,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAU,CAAC;AAExD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,EAAE,uCAAuC,CAAC;KAC/C,GAAG,CAAC,EAAE,EAAE,uCAAuC,CAAC;KAChD,KAAK,CACJ,4BAA4B,EAC5B,4DAA4D,CAC7D,CAAC;AAEJ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC;IACzC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACtC,MAAM,EAAE,iBAAiB,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAKH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC;IACzC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,EAAE,UAAU;CACjB,CAAC,CAAC"}

package/dist/lib/config.d.ts

@@ -0,0 +1,15 @@
+import Conf from 'conf';
+interface NeetruConfig {
+    anthropicApiKey?: string;
+    openaiApiKey?: string;
+    geminiApiKey?: string;
+    neetruApiKey?: string;
+    neetruApiUrl: string;
+    defaultModel: 'claude' | 'openai' | 'gemini' | 'auto';
+    projectName?: string;
+    'telemetry.enabled'?: boolean;
+}
+export declare const config: Conf<NeetruConfig>;
+export declare function getKey(name: keyof NeetruConfig): string | boolean | undefined;
+export declare function requireKey(name: 'anthropicApiKey' | 'openaiApiKey' | 'geminiApiKey' | 'neetruApiKey'): string;
+export {};

package/dist/lib/config.js

@@ -0,0 +1,33 @@
+import Conf from 'conf';
+const defaults = {
+    neetruApiUrl: 'https://api.neetru.com',
+    defaultModel: 'auto',
+};
+export const config = new Conf({
+    projectName: 'neetru-cli',
+    defaults,
+    schema: {
+        anthropicApiKey: { type: 'string' },
+        openaiApiKey: { type: 'string' },
+        geminiApiKey: { type: 'string' },
+        neetruApiKey: { type: 'string' },
+        neetruApiUrl: { type: 'string', default: 'https://api.neetru.com' },
+        defaultModel: {
+            type: 'string',
+            enum: ['claude', 'openai', 'gemini', 'auto'],
+            default: 'auto',
+        },
+        'telemetry.enabled': { type: 'boolean' },
+    },
+});
+export function getKey(name) {
+    return config.get(name);
+}
+export function requireKey(name) {
+    const val = config.get(name);
+    if (!val) {
+        throw new Error(`Chave "${name}" não configurada. Execute: neetru config set ${name} <valor>`);
+    }
+    return val;
+}
+//# sourceMappingURL=config.js.map

package/dist/lib/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAiBxB,MAAM,QAAQ,GAAiB;IAC7B,YAAY,EAAE,wBAAwB;IACtC,YAAY,EAAE,MAAM;CACrB,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAe;IAC3C,WAAW,EAAE,YAAY;IACzB,QAAQ;IACR,MAAM,EAAE;QACN,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACnC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,wBAAwB,EAAE;QACnE,YAAY,EAAE;YACZ,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;YAC5C,OAAO,EAAE,MAAM;SAChB;QACD,mBAAmB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;KACzC;CACF,CAAC,CAAC;AAEH,MAAM,UAAU,MAAM,CAAC,IAAwB;IAC7C,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAA0E;IACnG,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,iDAAiD,IAAI,UAAU,CAC9E,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/utils/logger.d.ts

@@ -0,0 +1,13 @@
+export declare const log: {
+    info: (msg: string) => void;
+    success: (msg: string) => void;
+    warn: (msg: string) => void;
+    error: (msg: string) => void;
+    dim: (msg: string) => void;
+    brand: (msg: string) => void;
+    heading: (msg: string) => void;
+    banner(): void;
+    separator(): void;
+    stream: (chunk: string) => boolean;
+    newline: () => boolean;
+};

package/dist/utils/logger.js

@@ -0,0 +1,27 @@
+import chalk from 'chalk';
+// Brand palette
+const brand = chalk.hex('#1E90FF');
+const brandDim = chalk.hex('#1E90FF').dim;
+const ink = chalk.hex('#07090D');
+export const log = {
+    info: (msg) => console.log(`  ${chalk.blue('ℹ')} ${msg}`),
+    success: (msg) => console.log(`  ${chalk.green('✓')} ${msg}`),
+    warn: (msg) => console.log(`  ${chalk.yellow('⚠')} ${msg}`),
+    error: (msg) => console.error(`  ${chalk.red('✖')} ${msg}`),
+    dim: (msg) => console.log(chalk.dim(`  ${msg}`)),
+    brand: (msg) => console.log(brand(msg)),
+    heading: (msg) => console.log(`\n${chalk.bold(msg)}`),
+    banner() {
+        console.log();
+        console.log(brand.bold('  ◆ Neetru CLI'));
+        console.log(chalk.dim('  Developer Kit · neetru.com'));
+        console.log();
+    },
+    separator() {
+        console.log(chalk.dim('  ' + '─'.repeat(56)));
+    },
+    // Para streaming de AI: escreve sem newline
+    stream: (chunk) => process.stdout.write(chunk),
+    newline: () => process.stdout.write('\n'),
+};
+//# sourceMappingURL=logger.js.map

package/dist/utils/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,gBAAgB;AAChB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC;AAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AAEjC,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;IACjE,OAAO,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;IACrE,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;IACnE,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;IACnE,GAAG,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IAExD,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/C,OAAO,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAE7D,MAAM;QACJ,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,SAAS;QACP,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,4CAA4C;IAC5C,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;IACtD,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;CAC1C,CAAC"}

package/package.json

@@ -1,58 +1,60 @@
 {
   "name": "@neetru/cli",
-  "version": "1.0.1",
-  "description": "Neetru CLI — SDK scaffolding e DevOps para integrar seu SaaS com Neetru Core (auth, billing, usage, deploy, logs)",
+  "version": "2.0.0",
+  "type": "module",
+  "description": "Neetru Developer Kit — scaffold, AI assistant, publish, build e deploy de produtos SaaS Neetru via Core (VM-based agents)",
+  "keywords": [
+    "neetru",
+    "saas",
+    "cli",
+    "devkit",
+    "scaffold",
+    "deploy",
+    "agent",
+    "vm"
+  ],
+  "homepage": "https://core.neetru.com",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Neetru/core.git",
+    "directory": "cli"
+  },
+  "author": "Neetru Inc. <neetrucode@gmail.com>",
+  "license": "MIT",
   "bin": {
     "neetru": "./dist/index.js"
   },
   "main": "./dist/index.js",
   "files": [
     "dist",
+    "templates",
     "README.md",
-    "LICENSE"
+    "CHANGELOG.md"
   ],
   "scripts": {
     "build": "tsc",
-    "dev": "ts-node src/index.ts",
+    "dev": "tsx src/index.ts",
     "start": "node dist/index.js",
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "chalk": "^5.3.0",
+    "@anthropic-ai/sdk": "^0.52.0",
+    "chalk": "^5.4.1",
     "commander": "^12.1.0",
-    "inquirer": "^9.2.23",
-    "ora": "^8.1.0",
-    "fs-extra": "^11.2.0"
+    "conf": "^13.0.1",
+    "inquirer": "^10.2.2",
+    "openai": "^4.77.0",
+    "ora": "^8.1.1",
+    "zod": "^3.24.2"
   },
   "devDependencies": {
-    "@types/fs-extra": "^11.0.4",
     "@types/inquirer": "^9.0.7",
-    "@types/node": "^20.0.0",
-    "typescript": "^5.4.0",
-    "ts-node": "^10.9.2"
+    "@types/node": "^22.0.0",
+    "tsx": "^4.19.1",
+    "typescript": "^5.7.0"
   },
   "engines": {
-    "node": ">=18"
-  },
-  "keywords": [
-    "neetru",
-    "saas",
-    "oauth",
-    "billing",
-    "cli",
-    "sdk",
-    "devops",
-    "deploy",
-    "metered-billing"
-  ],
-  "license": "MIT",
-  "homepage": "https://github.com/neetru/cli#readme",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/neetru/cli.git"
-  },
-  "bugs": {
-    "url": "https://github.com/neetru/cli/issues"
+    "node": ">=20"
   },
   "publishConfig": {
     "access": "public"

package/templates/auth/callback.ts

@@ -0,0 +1,22 @@
+/**
+ * Template — `src/lib/neetru/auth/callback.ts` (gerado por `neetru add auth`).
+ *
+ * Handler de callback OIDC (auth code → id_token). Use em `app/oauth/callback/route.ts`.
+ */
+import { NextRequest, NextResponse } from 'next/server';
+
+export const runtime = 'nodejs';
+
+export async function GET(request: NextRequest) {
+  const { searchParams } = new URL(request.url);
+  const code = searchParams.get('code');
+  const state = searchParams.get('state');
+
+  if (!code) {
+    return NextResponse.json({ error: 'missing_code' }, { status: 400 });
+  }
+
+  // Trocar code → id_token contra auth.neetru.com/token
+  // Implementação detalhada em docs/PLATFORM_AUTH.md §4
+  return NextResponse.redirect(state ?? '/');
+}