@neetru/cli 2.13.0 → 2.14.0

package/dist/lib/code-agent-files.js

@@ -0,0 +1,213 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { spawnSync } from 'node:child_process';
+const DEFAULT_IGNORES = new Set([
+    '.git',
+    '.hg',
+    '.svn',
+    'node_modules',
+    '.next',
+    'dist',
+    'build',
+    'coverage',
+    '.turbo',
+]);
+const MAX_FILE_BYTES = 250_000;
+const MAX_FILE_CHARS = 40_000;
+const MAX_LIST_FILES = 300;
+const MAX_SEARCH_MATCHES = 80;
+function normalizeForCompare(value) {
+    return process.platform === 'win32' ? value.toLowerCase() : value;
+}
+function isInside(root, target) {
+    const rootCmp = normalizeForCompare(root);
+    const targetCmp = normalizeForCompare(target);
+    return targetCmp === rootCmp || targetCmp.startsWith(`${rootCmp}${path.sep}`);
+}
+export function resolveInside(rootDir, inputPath) {
+    const root = path.resolve(rootDir);
+    const resolved = path.resolve(root, inputPath);
+    if (!isInside(root, resolved)) {
+        throw new Error(`Path fora do cwd: ${inputPath}`);
+    }
+    // Contenção lexical nao basta: um symlink/junction DENTRO do cwd pode
+    // apontar pra fora (ex: `leak -> ~/.config/neetru-cli/auth.json`) e vazar
+    // pro contexto do gateway. Resolve o path real e reconfirma a contencao —
+    // só roda se o arquivo existir (achado do Codex review 2026-07-09).
+    if (fs.existsSync(resolved)) {
+        const realRoot = fs.realpathSync(root);
+        const realResolved = fs.realpathSync(resolved);
+        if (!isInside(realRoot, realResolved)) {
+            throw new Error(`Path fora do cwd (symlink aponta pra fora): ${inputPath}`);
+        }
+    }
+    return resolved;
+}
+function toRelative(rootDir, fullPath) {
+    return path.relative(path.resolve(rootDir), fullPath).replace(/\\/g, '/');
+}
+// Arquivos que tipicamente carregam segredo bruto — bloqueados mesmo dentro
+// do cwd. Path injection pelo modelo (README/issue com NEETRU_TOOL embutido)
+// nao consegue fazer a IA ler .env/chave/credencial e mandar de volta pro
+// gateway (achado do Codex review 2026-07-09).
+const SECRET_PATH_PATTERN = /(^|[\\/])(\.env(\..+)?|[^\\/]+\.(pem|key|pfx|p12)|id_rsa\w*|id_ed25519\w*|credentials\.json|service[-_]?account.*\.json)$/i;
+function isSecretPath(relativePath) {
+    return SECRET_PATH_PATTERN.test(relativePath);
+}
+// Redação defense-in-depth: mesmo em arquivos "normais", uma linha com cara
+// de segredo hardcoded nao vai pro contexto do gateway em texto claro.
+const SECRET_LINE_PATTERN = /((?:api[_-]?key|secret|token|password|passwd)\s*[:=]\s*['"]?)([A-Za-z0-9_\-.\/+]{12,})/gi;
+function redactSecrets(content) {
+    return content.replace(SECRET_LINE_PATTERN, '$1[REDACTED]');
+}
+export function readFileContext(rootDir, inputPath) {
+    const fullPath = resolveInside(rootDir, inputPath);
+    const relative = toRelative(rootDir, fullPath);
+    if (isSecretPath(relative)) {
+        throw new Error(`Leitura bloqueada: "${relative}" parece conter segredo (.env/chave/credencial). ` +
+            'Cole o trecho necessario manualmente se precisar que a IA veja.');
+    }
+    const stat = fs.statSync(fullPath);
+    if (!stat.isFile())
+        throw new Error(`Nao e arquivo: ${inputPath}`);
+    if (stat.size > MAX_FILE_BYTES) {
+        throw new Error(`Arquivo muito grande para contexto: ${inputPath} (${stat.size} bytes)`);
+    }
+    const content = redactSecrets(fs.readFileSync(fullPath, 'utf8'));
+    const clipped = content.length > MAX_FILE_CHARS
+        ? `${content.slice(0, MAX_FILE_CHARS)}\n\n[TRUNCADO: arquivo maior que ${MAX_FILE_CHARS} chars]`
+        : content;
+    return `--- ${relative} ---\n${clipped}`;
+}
+function walkFiles(rootDir) {
+    const out = [];
+    function walk(dir) {
+        if (out.length >= MAX_LIST_FILES)
+            return;
+        for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+            if (DEFAULT_IGNORES.has(entry.name))
+                continue;
+            const full = path.join(dir, entry.name);
+            if (entry.isDirectory()) {
+                walk(full);
+            }
+            else if (entry.isFile()) {
+                out.push(toRelative(rootDir, full));
+            }
+            if (out.length >= MAX_LIST_FILES)
+                return;
+        }
+    }
+    walk(path.resolve(rootDir));
+    return out;
+}
+export function listFiles(rootDir, pattern = '') {
+    const git = spawnSync('git', ['ls-files'], { cwd: rootDir, encoding: 'utf8' });
+    let files = git.status === 0
+        ? git.stdout.split(/\r?\n/).filter(Boolean)
+        : walkFiles(rootDir);
+    const needle = pattern.trim().toLowerCase();
+    if (needle)
+        files = files.filter((file) => file.toLowerCase().includes(needle));
+    return files.slice(0, MAX_LIST_FILES);
+}
+export function searchFiles(rootDir, query) {
+    const needle = query;
+    if (!needle)
+        return [];
+    const matches = [];
+    for (const file of listFiles(rootDir)) {
+        if (matches.length >= MAX_SEARCH_MATCHES)
+            break;
+        if (isSecretPath(file))
+            continue;
+        try {
+            const full = resolveInside(rootDir, file);
+            const stat = fs.statSync(full);
+            if (!stat.isFile() || stat.size > MAX_FILE_BYTES)
+                continue;
+            const lines = redactSecrets(fs.readFileSync(full, 'utf8')).split(/\r?\n/);
+            for (let i = 0; i < lines.length; i++) {
+                if (lines[i].includes(needle)) {
+                    matches.push(`${file}:${i + 1}: ${lines[i].slice(0, 240)}`);
+                    if (matches.length >= MAX_SEARCH_MATCHES)
+                        break;
+                }
+            }
+        }
+        catch {
+            continue;
+        }
+    }
+    return matches;
+}
+export function runCodeTool(rootDir, request) {
+    try {
+        if (request.tool === 'read_file') {
+            if (typeof request.path !== 'string' || !request.path.trim()) {
+                return 'ERRO: read_file exige path string.';
+            }
+            return readFileContext(rootDir, request.path);
+        }
+        if (request.tool === 'list_files') {
+            const pattern = typeof request.pattern === 'string' ? request.pattern : '';
+            return listFiles(rootDir, pattern).join('\n') || '(nenhum arquivo encontrado)';
+        }
+        if (request.tool === 'search') {
+            if (typeof request.query !== 'string' || !request.query) {
+                return 'ERRO: search exige query string.';
+            }
+            return searchFiles(rootDir, request.query).join('\n') || '(nenhuma ocorrencia encontrada)';
+        }
+        if (request.tool === 'invalid')
+            return `ERRO: ${request.error ?? 'tool invalida'}`;
+        return `ERRO: tool desconhecida: ${request.tool}`;
+    }
+    catch (error) {
+        return `ERRO: ${error instanceof Error ? error.message : String(error)}`;
+    }
+}
+const ANSI_GREEN = '\x1B[32m';
+const ANSI_RED = '\x1B[31m';
+const ANSI_CYAN = '\x1B[36m';
+const ANSI_DIM = '\x1B[2m';
+const ANSI_RESET = '\x1B[0m';
+function colorDiffLine(line) {
+    if (line.startsWith('+++') || line.startsWith('---'))
+        return `${ANSI_DIM}${line}${ANSI_RESET}`;
+    if (line.startsWith('+'))
+        return `${ANSI_GREEN}${line}${ANSI_RESET}`;
+    if (line.startsWith('-'))
+        return `${ANSI_RED}${line}${ANSI_RESET}`;
+    if (line.startsWith('@@'))
+        return `${ANSI_CYAN}${line}${ANSI_RESET}`;
+    if (line.startsWith('diff --git') || line.startsWith('index '))
+        return `${ANSI_DIM}${line}${ANSI_RESET}`;
+    return line;
+}
+/** Colore um unified diff linha a linha: `+` verde, `-` vermelho, `@@`/headers dim/cyan. */
+export function renderColoredDiff(patch) {
+    return patch
+        .split('\n')
+        .map(colorDiffLine)
+        .join('\n');
+}
+export function applyUnifiedPatch(rootDir, patch) {
+    const check = spawnSync('git', ['apply', '--check', '-'], {
+        cwd: rootDir,
+        input: patch,
+        encoding: 'utf8',
+    });
+    if (check.status !== 0) {
+        throw new Error((check.stderr || check.stdout || 'git apply --check falhou').trim());
+    }
+    const apply = spawnSync('git', ['apply', '-'], {
+        cwd: rootDir,
+        input: patch,
+        encoding: 'utf8',
+    });
+    if (apply.status !== 0) {
+        throw new Error((apply.stderr || apply.stdout || 'git apply falhou').trim());
+    }
+}
+//# sourceMappingURL=code-agent-files.js.map

package/dist/lib/code-agent-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-agent-files.js","sourceRoot":"","sources":["../../src/lib/code-agent-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAG/C,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,MAAM;IACN,KAAK;IACL,MAAM;IACN,cAAc;IACd,OAAO;IACP,MAAM;IACN,OAAO;IACP,UAAU;IACV,QAAQ;CACT,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,OAAO,CAAC;AAC/B,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AACpE,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc;IAC5C,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC9C,OAAO,SAAS,KAAK,OAAO,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,SAAiB;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC/C,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,qBAAqB,SAAS,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,sEAAsE;IACtE,0EAA0E;IAC1E,0EAA0E;IAC1E,oEAAoE;IACpE,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,+CAA+C,SAAS,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,QAAgB;IACnD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC5E,CAAC;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,0EAA0E;AAC1E,+CAA+C;AAC/C,MAAM,mBAAmB,GACvB,4HAA4H,CAAC;AAE/H,SAAS,YAAY,CAAC,YAAoB;IACxC,OAAO,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AAChD,CAAC;AAED,4EAA4E;AAC5E,uEAAuE;AACvE,MAAM,mBAAmB,GACvB,0FAA0F,CAAC;AAE7F,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,SAAiB;IAChE,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/C,IAAI,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,uBAAuB,QAAQ,mDAAmD;YAChF,iEAAiE,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,SAAS,EAAE,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,uCAAuC,SAAS,KAAK,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,MAAM,OAAO,GACX,OAAO,CAAC,MAAM,GAAG,cAAc;QAC7B,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,oCAAoC,cAAc,SAAS;QAChG,CAAC,CAAC,OAAO,CAAC;IAEd,OAAO,OAAO,QAAQ,SAAS,OAAO,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,GAAG,GAAa,EAAE,CAAC;IAEzB,SAAS,IAAI,CAAC,GAAW;QACvB,IAAI,GAAG,CAAC,MAAM,IAAI,cAAc;YAAE,OAAO;QACzC,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACjE,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YACtC,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,IAAI,cAAc;gBAAE,OAAO;QAC3C,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,OAAO,GAAG,EAAE;IACrD,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/E,IAAI,KAAK,GACP,GAAG,CAAC,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QAC3C,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAEzB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,MAAM;QAAE,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAChF,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,KAAa;IACxD,MAAM,MAAM,GAAG,KAAK,CAAC;IACrB,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,IAAI,OAAO,CAAC,MAAM,IAAI,kBAAkB;YAAE,MAAM;QAChD,IAAI,YAAY,CAAC,IAAI,CAAC;YAAE,SAAS;QACjC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1C,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,cAAc;gBAAE,SAAS;YAC3D,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC9B,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC5D,IAAI,OAAO,CAAC,MAAM,IAAI,kBAAkB;wBAAE,MAAM;gBAClD,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,OAAwB;IACnE,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC7D,OAAO,oCAAoC,CAAC;YAC9C,CAAC;YACD,OAAO,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,OAAO,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,6BAA6B,CAAC;QACjF,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACxD,OAAO,kCAAkC,CAAC;YAC5C,CAAC;YACD,OAAO,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,iCAAiC,CAAC;QAC7F,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,OAAO,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC;QACnF,OAAO,4BAA4B,OAAO,CAAC,IAAI,EAAE,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,SAAS,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAAG,UAAU,CAAC;AAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC;AAC5B,MAAM,SAAS,GAAG,UAAU,CAAC;AAC7B,MAAM,QAAQ,GAAG,SAAS,CAAC;AAC3B,MAAM,UAAU,GAAG,SAAS,CAAC;AAE7B,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,QAAQ,GAAG,IAAI,GAAG,UAAU,EAAE,CAAC;IAC/F,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,UAAU,GAAG,IAAI,GAAG,UAAU,EAAE,CAAC;IACrE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,QAAQ,GAAG,IAAI,GAAG,UAAU,EAAE,CAAC;IACnE,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,SAAS,GAAG,IAAI,GAAG,UAAU,EAAE,CAAC;IACrE,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,GAAG,QAAQ,GAAG,IAAI,GAAG,UAAU,EAAE,CAAC;IACzG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,KAAK;SACT,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,aAAa,CAAC;SAClB,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,KAAa;IAC9D,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE;QACxD,GAAG,EAAE,OAAO;QACZ,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,0BAA0B,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE;QAC7C,GAAG,EAAE,OAAO;QACZ,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,kBAAkB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC"}

package/dist/lib/code-agent-protocol.d.ts

@@ -0,0 +1,16 @@
+export interface CodeToolRequest {
+    tool: string;
+    path?: unknown;
+    pattern?: unknown;
+    query?: unknown;
+    error?: string;
+}
+export declare function parseToolRequest(text: string): CodeToolRequest | null;
+/**
+ * So aceita o bloco explicito `NEETRU_PATCH ... NEETRU_END` do protocolo —
+ * SEM fallback pra diff em bloco fenced ou texto solto. Um diff meramente
+ * citado (ex: injetado via README/issue) nao pode ser confundido com uma
+ * instrucao real de patch, especialmente com `--yes` (achado do Codex
+ * review 2026-07-09).
+ */
+export declare function extractPatch(text: string): string | null;

package/dist/lib/code-agent-protocol.js

@@ -0,0 +1,34 @@
+export function parseToolRequest(text) {
+    for (const line of String(text || '').split(/\r?\n/)) {
+        const idx = line.indexOf('NEETRU_TOOL');
+        if (idx === -1)
+            continue;
+        const raw = line.slice(idx + 'NEETRU_TOOL'.length).trim();
+        if (!raw)
+            continue;
+        try {
+            const parsed = JSON.parse(raw);
+            if (parsed && typeof parsed === 'object' && typeof parsed.tool === 'string') {
+                return parsed;
+            }
+            return { tool: 'invalid', error: `NEETRU_TOOL precisa conter {"tool":"..."}` };
+        }
+        catch {
+            return { tool: 'invalid', error: `JSON invalido em NEETRU_TOOL: ${raw}` };
+        }
+    }
+    return null;
+}
+/**
+ * So aceita o bloco explicito `NEETRU_PATCH ... NEETRU_END` do protocolo —
+ * SEM fallback pra diff em bloco fenced ou texto solto. Um diff meramente
+ * citado (ex: injetado via README/issue) nao pode ser confundido com uma
+ * instrucao real de patch, especialmente com `--yes` (achado do Codex
+ * review 2026-07-09).
+ */
+export function extractPatch(text) {
+    const source = String(text || '');
+    const marker = source.match(/NEETRU_PATCH\s*([\s\S]*?)\s*NEETRU_END/);
+    return marker?.[1] ? `${marker[1].trim()}\n` : null;
+}
+//# sourceMappingURL=code-agent-protocol.js.map

package/dist/lib/code-agent-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-agent-protocol.js","sourceRoot":"","sources":["../../src/lib/code-agent-protocol.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACxC,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,SAAS;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,IAAI,CAAC,GAAG;YAAE,SAAS;QAEnB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;YAC1C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAQ,MAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpG,OAAO,MAAyB,CAAC;YACnC,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC;QACjF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,iCAAiC,GAAG,EAAE,EAAE,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACtE,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC"}

package/dist/lib/code-agent-settings.d.ts

@@ -0,0 +1,20 @@
+export declare const DEFAULT_CODE_MODEL = "llama-3.3-70b-versatile";
+export declare const DEFAULT_CODE_MAX_TURNS = 8;
+export declare const DEFAULT_CODE_MAX_TOKENS = 4096;
+export declare const DEFAULT_CODE_TEMPERATURE = 0.2;
+export interface ResolveCodeModelInput {
+    cliModel?: string;
+    envModel?: string;
+    configuredGatewayModel?: string;
+}
+export interface ResolvedCodeModel {
+    model: string;
+    warning?: string;
+}
+export declare function isAnthropicModel(model: string | undefined): boolean;
+export declare function resolveCodeModel(input: ResolveCodeModelInput): ResolvedCodeModel;
+export declare function parseBoundedNumber(value: unknown, fallback: number, limits: {
+    min: number;
+    max: number;
+    integer?: boolean;
+}): number;

package/dist/lib/code-agent-settings.js

@@ -0,0 +1,38 @@
+export const DEFAULT_CODE_MODEL = 'llama-3.3-70b-versatile';
+export const DEFAULT_CODE_MAX_TURNS = 8;
+export const DEFAULT_CODE_MAX_TOKENS = 4096;
+export const DEFAULT_CODE_TEMPERATURE = 0.2;
+export function isAnthropicModel(model) {
+    if (!model)
+        return false;
+    return /(^|\/)(claude-|anthropic)/i.test(model) || /claude/i.test(model);
+}
+function firstNonEmpty(...values) {
+    return values.find((value) => typeof value === 'string' && value.trim().length > 0)?.trim();
+}
+export function resolveCodeModel(input) {
+    const explicit = firstNonEmpty(input.cliModel, input.envModel);
+    if (explicit)
+        return { model: explicit };
+    const configured = firstNonEmpty(input.configuredGatewayModel);
+    if (configured && !isAnthropicModel(configured))
+        return { model: configured };
+    if (configured && isAnthropicModel(configured)) {
+        return {
+            model: DEFAULT_CODE_MODEL,
+            warning: `gatewayModel local esta apontando para "${configured}"; ` +
+                `neetru code usara ${DEFAULT_CODE_MODEL} por padrao para ficar no caminho Groq/NVIDIA.`,
+        };
+    }
+    return { model: DEFAULT_CODE_MODEL };
+}
+export function parseBoundedNumber(value, fallback, limits) {
+    if (value === undefined || value === null || value === '')
+        return fallback;
+    const n = Number(value);
+    if (!Number.isFinite(n))
+        return fallback;
+    const bounded = Math.min(limits.max, Math.max(limits.min, n));
+    return limits.integer ? Math.floor(bounded) : bounded;
+}
+//# sourceMappingURL=code-agent-settings.js.map

package/dist/lib/code-agent-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-agent-settings.js","sourceRoot":"","sources":["../../src/lib/code-agent-settings.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;AAC5D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACxC,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAC5C,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAa5C,MAAM,UAAU,gBAAgB,CAAC,KAAyB;IACxD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,aAAa,CAAC,GAAG,MAAiC;IACzD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAA4B;IAC3D,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAEzC,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC/D,IAAI,UAAU,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAE9E,IAAI,UAAU,IAAI,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/C,OAAO;YACL,KAAK,EAAE,kBAAkB;YACzB,OAAO,EACL,2CAA2C,UAAU,KAAK;gBAC1D,qBAAqB,kBAAkB,gDAAgD;SAC1F,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAc,EACd,QAAgB,EAChB,MAAuD;IAEvD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC3E,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACxD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@neetru/cli",
-  "version": "2.13.0",
+  "version": "2.14.0",
   "type": "module",
   "description": "Neetru Developer Kit — scaffold, AI assistant, publish, build e deploy de produtos SaaS Neetru via Core (VM-based agents)",
   "keywords": [