@neetru/cli 2.4.0 → 2.6.0

package/dist/commands/ops.js

@@ -0,0 +1,359 @@
+/**
+ * `neetru ops` — comandos de operação interna do Neetru Core.
+ *
+ * Substitui os scripts ad-hoc em scripts/ com interface consistente, autenticação
+ * via Bearer token e flags --dry-run onde há mutação.
+ *
+ * Namespace ops:
+ *   neetru ops heartbeat                  — checar heartbeat do agente em um server
+ *   neetru ops smoke notification          — dispara notification de smoke end-to-end
+ *   neetru ops smoke observability         — smoke test do pipeline de observability
+ *   neetru ops reg-token <serverId>        — gerar registration token para um server
+ *   neetru ops resolve-errors              — resolver erros abertos em lote
+ *   neetru ops openapi-diff                — detectar breaking changes na spec OpenAPI
+ *
+ * TODO (próximo sprint): bootstrap-admin, backfill incidents-source, backfill workspaces,
+ *   seed api-catalog, rehash-sdk-secrets, migrate cli-keys.
+ */
+import chalk from 'chalk';
+import ora from 'ora';
+import { apiRequest } from '../lib/api-client.js';
+import { requireToken, handleApiError } from '../lib/cli-read.js';
+import { log } from '../utils/logger.js';
+// ─── Helpers ──────────────────────────────────────────────────────────────────
+function deprecationBanner(scriptName, command) {
+    console.warn(chalk.yellow(`[aviso] scripts/${scriptName} está deprecado. Use: neetru ${command}`));
+}
+export async function runOpsHeartbeat(opts) {
+    const token = await requireToken(opts.json);
+    const serverId = opts.serverId ?? 'srv-test-01';
+    const spinner = opts.json ? null : ora({ text: `Verificando heartbeat de ${serverId}…`, color: 'blue' }).start();
+    let res;
+    try {
+        res = await apiRequest(`/api/cli/v1/ops/heartbeat?serverId=${encodeURIComponent(serverId)}`, { token });
+        spinner?.stop();
+    }
+    catch (error) {
+        spinner?.fail('Falha ao verificar heartbeat.');
+        handleApiError(error, opts.json);
+    }
+    if (opts.json) {
+        console.log(JSON.stringify(res));
+        return;
+    }
+    const data = res;
+    const exists = data.exists;
+    if (!exists) {
+        console.log(chalk.red(`  server/${serverId} NÃO ENCONTRADO`));
+        return;
+    }
+    const fields = data.fields;
+    console.log(chalk.bold(`=== servers/${serverId} ===`));
+    if (fields) {
+        for (const [k, v] of Object.entries(fields).sort()) {
+            console.log(`  ${chalk.cyan(k)}: ${JSON.stringify(v)}`);
+        }
+    }
+}
+export async function runOpsSmokeNotification(opts) {
+    const token = await requireToken(opts.json);
+    const body = {
+        recipientRole: opts.recipientRole ?? 'admin',
+        recipientUid: opts.recipientUid,
+        kind: opts.kind ?? 'smoke_test',
+        title: opts.title,
+        link: opts.link ?? '/dashboard',
+    };
+    const spinner = opts.json ? null : ora({ text: 'Disparando smoke notification…', color: 'blue' }).start();
+    let res;
+    try {
+        res = await apiRequest('/api/cli/v1/ops/smoke/notification', {
+            method: 'POST',
+            body,
+            token,
+        });
+        spinner?.stop();
+    }
+    catch (error) {
+        spinner?.fail('Falha ao disparar smoke notification.');
+        handleApiError(error, opts.json);
+    }
+    if (opts.json) {
+        console.log(JSON.stringify(res));
+        return;
+    }
+    const data = res;
+    const action = data.action;
+    if (action === 'dedup') {
+        log.warn(`DEDUP: notification existente ${String(data.docId ?? '')} — occurrences incrementado.`);
+    }
+    else {
+        log.success(`Notification criada: ${String(data.docId ?? '')}`);
+    }
+    console.log('  Valide em core.neetru.com: sino no header deve mostrar badge unread.');
+}
+export async function runOpsSmokeObservability(opts) {
+    const token = await requireToken(opts.json);
+    const body = {
+        baseUrl: opts.baseUrl ?? 'https://core.neetru.com',
+        bearer: opts.bearer,
+        waitSec: opts.waitSec ?? 30,
+    };
+    const spinner = opts.json
+        ? null
+        : ora({ text: 'Executando smoke observability (aguarda settle)…', color: 'blue' }).start();
+    let res;
+    try {
+        // timeout longo pois o endpoint aguarda settle do Firestore
+        res = await apiRequest('/api/cli/v1/ops/smoke/observability', {
+            method: 'POST',
+            body,
+            token,
+        });
+        spinner?.stop();
+    }
+    catch (error) {
+        spinner?.fail('Falha ao executar smoke observability.');
+        handleApiError(error, opts.json);
+    }
+    if (opts.json) {
+        console.log(JSON.stringify(res));
+        return;
+    }
+    const data = res;
+    const probes = data.probes;
+    console.log(chalk.bold('\nResultado do smoke observability:'));
+    if (probes && probes.length > 0) {
+        const header = `  ${'FONTE'.padEnd(22)}  ${'STATUS HTTP'.padEnd(12)}  ${'ÚLTIMA (s)'.padEnd(12)}  MATCH`;
+        const sep = `  ${'─'.repeat(22)}  ${'─'.repeat(12)}  ${'─'.repeat(12)}  ─────`;
+        console.log(chalk.dim(header));
+        console.log(chalk.dim(sep));
+        for (const p of probes) {
+            const matched = p.matched ? chalk.green('SIM') : chalk.red('NÃO');
+            console.log(`  ${String(p.source ?? '').padEnd(22)}  ${String(p.endpointStatus ?? '—').padEnd(12)}  ${String(p.lastAgeSec ?? '—').padEnd(12)}  ${matched}`);
+        }
+    }
+    const tag = data.runTag;
+    if (tag)
+        console.log(chalk.dim(`\n  run tag: ${tag}`));
+}
+export async function runOpsRegToken(serverId, opts) {
+    const token = await requireToken(opts.json);
+    const spinner = opts.json ? null : ora({ text: `Gerando registration token para ${serverId}…`, color: 'blue' }).start();
+    let res;
+    try {
+        res = await apiRequest('/api/cli/v1/ops/reg-token', {
+            method: 'POST',
+            body: { serverId, expiresMin: opts.expiresMin ?? 30 },
+            token,
+        });
+        spinner?.stop();
+    }
+    catch (error) {
+        spinner?.fail('Falha ao gerar registration token.');
+        handleApiError(error, opts.json);
+    }
+    if (opts.json) {
+        console.log(JSON.stringify(res));
+        return;
+    }
+    const data = res;
+    console.log(chalk.bold('Registration token gerado:'));
+    console.log(`  ${chalk.green(String(data.token ?? ''))}`);
+    console.log(`  server:     ${String(data.serverId ?? serverId)}`);
+    console.log(`  expira em:  ${String(data.expiresAt ?? '—')}`);
+    console.log(chalk.dim('  (use este token no agente durante o registro — uso único)'));
+}
+export async function runOpsResolveErrors(opts) {
+    const token = await requireToken(opts.json);
+    if (!opts.dryRun && !opts.json) {
+        const { default: readline } = await import('node:readline');
+        const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+        const answer = await new Promise((resolve) => {
+            rl.question(chalk.yellow('Isso irá marcar TODOS os erros abertos como resolvidos. Confirmar? (sim/não): '), (a) => {
+                rl.close();
+                resolve(a.trim().toLowerCase());
+            });
+        });
+        if (answer !== 'sim' && answer !== 's') {
+            log.warn('Operação cancelada.');
+            process.exit(0);
+        }
+    }
+    const spinner = opts.json ? null : ora({ text: `Resolvendo erros abertos${opts.dryRun ? ' (dry-run)' : ''}…`, color: 'blue' }).start();
+    let res;
+    try {
+        res = await apiRequest('/api/cli/v1/ops/resolve-errors', {
+            method: 'POST',
+            body: {
+                dryRun: opts.dryRun ?? false,
+                resolvedBy: opts.resolvedBy ?? `cli-ops-${new Date().toISOString().slice(0, 10)}`,
+            },
+            token,
+        });
+        spinner?.stop();
+    }
+    catch (error) {
+        spinner?.fail('Falha ao resolver erros.');
+        handleApiError(error, opts.json);
+    }
+    if (opts.json) {
+        console.log(JSON.stringify(res));
+        return;
+    }
+    const data = res;
+    const results = data.results;
+    console.log(chalk.bold(`\nResultado (modo: ${opts.dryRun ? 'DRY-RUN' : 'WRITE'}):`));
+    if (results) {
+        for (const r of results) {
+            const skipped = r.skipped ? ` (+${r.skipped} dry-run skipped)` : '';
+            console.log(`  ${r.collection}: ${chalk.green(String(r.resolved))} resolvidos${skipped}`);
+        }
+    }
+}
+export async function runOpsOpenapiDiff(opts) {
+    const token = await requireToken(opts.json);
+    const spinner = opts.json ? null : ora({ text: 'Verificando diff da spec OpenAPI…', color: 'blue' }).start();
+    let res;
+    try {
+        res = await apiRequest('/api/cli/v1/ops/openapi-diff', {
+            method: 'POST',
+            body: { update: opts.update ?? false },
+            token,
+        });
+        spinner?.stop();
+    }
+    catch (error) {
+        spinner?.fail('Falha ao checar OpenAPI diff.');
+        handleApiError(error, opts.json);
+    }
+    if (opts.json) {
+        console.log(JSON.stringify(res));
+        return;
+    }
+    const data = res;
+    const breakingChanges = data.breakingChanges;
+    const snapshotUpdated = data.snapshotUpdated;
+    const status = data.status;
+    if (status === 'no_snapshot') {
+        log.success('Snapshot inicial criado. Adicione docs/openapi-snapshot.json ao commit.');
+        return;
+    }
+    if (status === 'updated') {
+        log.success('Snapshot atualizado com --update.');
+        return;
+    }
+    if (breakingChanges && breakingChanges.length > 0) {
+        console.log(chalk.red('\nBREAKING CHANGES DETECTADOS:'));
+        for (const b of breakingChanges) {
+            console.log(`  ${chalk.red('–')} ${b}`);
+        }
+        console.log(chalk.yellow('\n  Recomendação: bump de versão major na spec (info.version).'));
+        console.log(chalk.dim('  Para atualizar: neetru ops openapi-diff --update'));
+    }
+    else if (snapshotUpdated) {
+        log.success('Spec mudou sem breaking changes — snapshot atualizado.');
+    }
+    else {
+        log.success('Sem mudanças na spec. Snapshot inalterado.');
+    }
+}
+// ─── Registro do comando `ops` em program ─────────────────────────────────────
+export function registerOpsCommand(program) {
+    const opsCmd = program
+        .command('ops')
+        .description('Operações internas do Core (migrado de scripts/)');
+    // ── ops heartbeat ──────────────────────────────────────────────────────────
+    opsCmd
+        .command('heartbeat')
+        .description('Verificar heartbeat e estado de um server')
+        .option('--server-id <id>', 'ID do server (default: srv-test-01)', 'srv-test-01')
+        .option('--json', 'saída em JSON')
+        .action(async (cmdOpts) => {
+        await runOpsHeartbeat({ serverId: cmdOpts.serverId, json: !!cmdOpts.json });
+    });
+    // ── ops smoke ──────────────────────────────────────────────────────────────
+    const smokeCmd = opsCmd
+        .command('smoke')
+        .description('Smoke tests end-to-end do Core');
+    smokeCmd
+        .command('notification')
+        .description('Disparar notification de smoke e validar fluxo de alertas')
+        .option('--recipient-role <role>', 'role destinatário (admin|operator|billing|viewer)', 'admin')
+        .option('--recipient-uid <uid>', 'uid específico (prevalece sobre --recipient-role)')
+        .option('--kind <kind>', 'kind da notification (default: smoke_test)', 'smoke_test')
+        .option('--title <title>', 'título da notification')
+        .option('--link <link>', 'link de destino (default: /dashboard)', '/dashboard')
+        .option('--json', 'saída em JSON')
+        .action(async (cmdOpts) => {
+        await runOpsSmokeNotification({
+            recipientRole: cmdOpts.recipientRole,
+            recipientUid: cmdOpts.recipientUid,
+            kind: cmdOpts.kind,
+            title: cmdOpts.title,
+            link: cmdOpts.link,
+            json: !!cmdOpts.json,
+        });
+    });
+    smokeCmd
+        .command('observability')
+        .description('Smoke test fim-a-fim do pipeline de observability')
+        .option('--base-url <url>', 'base URL do Core', 'https://core.neetru.com')
+        .option('--bearer <token>', 'Bearer token da CLI key (opcional — exercita telemetry log)')
+        .option('--wait-sec <n>', 'segundos de espera para Firestore propagar (default: 30)', '30')
+        .option('--json', 'saída em JSON')
+        .action(async (cmdOpts) => {
+        await runOpsSmokeObservability({
+            baseUrl: cmdOpts.baseUrl,
+            bearer: cmdOpts.bearer,
+            waitSec: cmdOpts.waitSec ? Number.parseInt(cmdOpts.waitSec, 10) : 30,
+            json: !!cmdOpts.json,
+        });
+    });
+    // ── ops reg-token ──────────────────────────────────────────────────────────
+    opsCmd
+        .command('reg-token <serverId>')
+        .description('Gerar registration token para um server (uso único, expira em 30min)')
+        .option('--expires-min <n>', 'minutos até expiração (default: 30)', '30')
+        .option('--json', 'saída em JSON')
+        .action(async (serverId, cmdOpts) => {
+        await runOpsRegToken(serverId, {
+            expiresMin: cmdOpts.expiresMin ? Number.parseInt(cmdOpts.expiresMin, 10) : 30,
+            json: !!cmdOpts.json,
+        });
+    });
+    // ── ops resolve-errors ─────────────────────────────────────────────────────
+    opsCmd
+        .command('resolve-errors')
+        .description('Marcar todos os erros abertos (client_errors + server_errors) como resolvidos')
+        .option('--dry-run', 'lista o que seria resolvido sem aplicar')
+        .option('--resolved-by <id>', 'identificador do ator (default: cli-ops-<data>')
+        .option('--yes', 'pula confirmação interativa')
+        .option('--json', 'saída em JSON')
+        .action(async (cmdOpts) => {
+        await runOpsResolveErrors({
+            dryRun: !!cmdOpts.dryRun,
+            resolvedBy: cmdOpts.resolvedBy,
+            json: !!cmdOpts.json,
+        });
+    });
+    // ── ops openapi-diff ───────────────────────────────────────────────────────
+    opsCmd
+        .command('openapi-diff')
+        .description('Detectar breaking changes na spec OpenAPI comparando com o snapshot')
+        .option('--update', 'atualizar o snapshot sem checar breaking changes')
+        .option('--json', 'saída em JSON')
+        .action(async (cmdOpts) => {
+        await runOpsOpenapiDiff({ update: !!cmdOpts.update, json: !!cmdOpts.json });
+    });
+    // ── TODO (próximo sprint) ──────────────────────────────────────────────────
+    // - neetru ops bootstrap-admin     (→ scripts/bootstrap-admin.ts)
+    // - neetru ops backfill incidents-source (→ scripts/backfill-incidents-source.ts)
+    // - neetru ops backfill workspaces (→ scripts/backfill-workspaces.ts)
+    // - neetru ops seed api-catalog    (→ scripts/seed-api-catalog.mjs)
+    // - neetru ops rehash-sdk-secrets  (→ scripts/rehash-sdk-client-secrets.mjs)
+    // - neetru ops migrate cli-keys    (→ scripts/migrate-cli-api-keys.mjs)
+}
+// ─── Re-export deprecation helper para uso em scripts/ ───────────────────────
+export { deprecationBanner };
+//# sourceMappingURL=ops.js.map

package/dist/commands/ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ops.js","sourceRoot":"","sources":["../../src/commands/ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AAEtB,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AASzC,iFAAiF;AAEjF,SAAS,iBAAiB,CAAC,UAAkB,EAAE,OAAe;IAC5D,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,MAAM,CACV,mBAAmB,UAAU,gCAAgC,OAAO,EAAE,CACvE,CACF,CAAC;AACJ,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAyB;IAC7D,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC;IAEhD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,4BAA4B,QAAQ,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAEjH,IAAI,GAAkB,CAAC;IACvB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,UAAU,CAAgB,sCAAsC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACvH,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC/C,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,GAA8B,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAA6B,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,QAAQ,iBAAiB,CAAC,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAA6C,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,QAAQ,MAAM,CAAC,CAAC,CAAC;IACvD,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;AACH,CAAC;AAaD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAiC;IAC7E,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE5C,MAAM,IAAI,GAAG;QACX,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,OAAO;QAC5C,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,YAAY;QAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,YAAY;KAChC,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAE1G,IAAI,GAAkB,CAAC;IACvB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,UAAU,CAAgB,oCAAoC,EAAE;YAC1E,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,KAAK;SACN,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACvD,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,GAA8B,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAA4B,CAAC;IACjD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,iCAAiC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,8BAA8B,CAAC,CAAC;IACpG,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,OAAO,CAAC,wBAAwB,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;AACxF,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAAkC;IAC/E,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE5C,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,yBAAyB;QAClD,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;KAC5B,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI;QACvB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,kDAAkD,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAE7F,IAAI,GAAkB,CAAC;IACvB,IAAI,CAAC;QACH,4DAA4D;QAC5D,GAAG,GAAG,MAAM,UAAU,CAAgB,qCAAqC,EAAE;YAC3E,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,KAAK;SACN,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,CAAC,wCAAwC,CAAC,CAAC;QACxD,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,GAA8B,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAoD,CAAC;IAEzE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC,CAAC;IAC/D,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,KAAK,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC;QACzG,MAAM,GAAG,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,OAAO,EAAE,CAC/I,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,MAA4B,CAAC;IAC9C,IAAI,GAAG;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC,CAAC;AACzD,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,IAAwB;IAC7E,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,mCAAmC,QAAQ,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAExH,IAAI,GAAkB,CAAC;IACvB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,UAAU,CAAgB,2BAA2B,EAAE;YACjE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE;YACrD,KAAK;SACN,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACpD,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,GAA8B,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC,CAAC;AACxF,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAA6B;IACrE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE5C,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;YACnD,EAAE,CAAC,QAAQ,CACT,KAAK,CAAC,MAAM,CAAC,gFAAgF,CAAC,EAC9F,CAAC,CAAC,EAAE,EAAE;gBACJ,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YAClC,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACvC,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,2BAA2B,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAEvI,IAAI,GAAkB,CAAC;IACvB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,UAAU,CAAgB,gCAAgC,EAAE;YACtE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACJ,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;gBAC5B,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;aAClF;YACD,KAAK;SACN,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC1C,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,GAA8B,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAuF,CAAC;IAE7G,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;IACrF,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,UAAU,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;AACH,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAA2B;IACjE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,mCAAmC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAE7G,IAAI,GAAkB,CAAC;IACvB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,UAAU,CAAgB,8BAA8B,EAAE;YACpE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK,EAAE;YACtC,KAAK;SACN,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC/C,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,GAA8B,CAAC;IAC5C,MAAM,eAAe,GAAG,IAAI,CAAC,eAAuC,CAAC;IACrE,MAAM,eAAe,GAAG,IAAI,CAAC,eAAsC,CAAC;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,MAA4B,CAAC;IAEjD,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QAC7B,GAAG,CAAC,OAAO,CAAC,yEAAyE,CAAC,CAAC;QACvF,OAAO;IACT,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,GAAG,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IACD,IAAI,eAAe,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC,CAAC;QACzD,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,gEAAgE,CAAC,CAAC,CAAC;QAC5F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC,CAAC;IAC/E,CAAC;SAAM,IAAI,eAAe,EAAE,CAAC;QAC3B,GAAG,CAAC,OAAO,CAAC,wDAAwD,CAAC,CAAC;IACxE,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IACjD,MAAM,MAAM,GAAG,OAAO;SACnB,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,kDAAkD,CAAC,CAAC;IAEnE,8EAA8E;IAC9E,MAAM;SACH,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,2CAA2C,CAAC;SACxD,MAAM,CAAC,kBAAkB,EAAE,qCAAqC,EAAE,aAAa,CAAC;SAChF,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC;SACjC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,eAAe,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEL,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,MAAM;SACpB,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,gCAAgC,CAAC,CAAC;IAEjD,QAAQ;SACL,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,2DAA2D,CAAC;SACxE,MAAM,CAAC,yBAAyB,EAAE,mDAAmD,EAAE,OAAO,CAAC;SAC/F,MAAM,CAAC,uBAAuB,EAAE,mDAAmD,CAAC;SACpF,MAAM,CAAC,eAAe,EAAE,4CAA4C,EAAE,YAAY,CAAC;SACnF,MAAM,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;SACnD,MAAM,CAAC,eAAe,EAAE,uCAAuC,EAAE,YAAY,CAAC;SAC9E,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC;SACjC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,uBAAuB,CAAC;YAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI;SACrB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,QAAQ;SACL,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,mDAAmD,CAAC;SAChE,MAAM,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,yBAAyB,CAAC;SACzE,MAAM,CAAC,kBAAkB,EAAE,6DAA6D,CAAC;SACzF,MAAM,CAAC,gBAAgB,EAAE,0DAA0D,EAAE,IAAI,CAAC;SAC1F,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC;SACjC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,wBAAwB,CAAC;YAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;YACpE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI;SACrB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,8EAA8E;IAC9E,MAAM;SACH,OAAO,CAAC,sBAAsB,CAAC;SAC/B,WAAW,CAAC,sEAAsE,CAAC;SACnF,MAAM,CAAC,mBAAmB,EAAE,qCAAqC,EAAE,IAAI,CAAC;SACxE,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC;SACjC,MAAM,CAAC,KAAK,EAAE,QAAgB,EAAE,OAAO,EAAE,EAAE;QAC1C,MAAM,cAAc,CAAC,QAAQ,EAAE;YAC7B,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;YAC7E,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI;SACrB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,8EAA8E;IAC9E,MAAM;SACH,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,+EAA+E,CAAC;SAC5F,MAAM,CAAC,WAAW,EAAE,yCAAyC,CAAC;SAC9D,MAAM,CAAC,oBAAoB,EAAE,gDAAgD,CAAC;SAC9E,MAAM,CAAC,OAAO,EAAE,6BAA6B,CAAC;SAC9C,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC;SACjC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,mBAAmB,CAAC;YACxB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM;YACxB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI;SACrB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,8EAA8E;IAC9E,MAAM;SACH,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,qEAAqE,CAAC;SAClF,MAAM,CAAC,UAAU,EAAE,kDAAkD,CAAC;SACtE,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC;SACjC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEL,8EAA8E;IAC9E,kEAAkE;IAClE,kFAAkF;IAClF,sEAAsE;IACtE,oEAAoE;IACpE,6EAA6E;IAC7E,wEAAwE;AAC1E,CAAC;AAED,gFAAgF;AAChF,OAAO,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/index.js

@@ -822,13 +822,14 @@ program
     .command('logs')
     .description('Visualizar logs do workspace (suporta tail contínuo)')
     .option('--client-id <id>', 'oauthClientId do workspace')
-    .option('-f, --follow', 'tail contínuo (poll a cada 5s)')
+    .option('-f, --follow', 'tail contínuo (poll a cada 5s, SSE se disponível)')
     .option('-n, --lines <count>', 'número de linhas a buscar', '50')
     .option('--since <duration>', 'logs desde N atrás (ex: 30m, 2h, 1d)', '15m')
     .option('--level <level>', 'filtrar por nível: info | warn | error | debug')
     .option('--product <product>', 'v1.3 — filtrar por productId')
     .option('--channel <channel>', 'v1.3 — filtrar por channel (stdout | stderr | app)')
     .option('--correlation-id <id>', 'v1.3 — filtrar por correlationId (UUID)')
+    .option('--json', 'saída em JSON (NDJSON linha a linha, útil para pipes)')
     .action(async (opts) => {
     const { runLogs } = await import('./commands/logs.js');
     await runLogs({
@@ -840,6 +841,7 @@ program
         product: opts.product,
         channel: opts.channel,
         correlationId: opts.correlationId,
+        json: !!opts.json,
     });
 });
 // ── neetru validate ───────────────────────────────────────────────────
@@ -913,14 +915,38 @@ mocksCmd
 // ── neetru env ────────────────────────────────────────────────────────
 const envCmd = program
     .command('env')
-    .description('Gerenciar NEETRU_ENV no .env.local');
+    .description('Gerenciar NEETRU_ENV (.env.local) e env vars de serviços Cloud Run');
 envCmd
     .command('switch <target>')
-    .description('Alternar NEETRU_ENV (dev/workspace/production)')
+    .description('Alternar NEETRU_ENV (dev/workspace/production) no .env.local')
     .action(async (target) => {
     const { runEnvSwitch } = await import('./commands/env.js');
     await runEnvSwitch({ target });
 });
+envCmd
+    .command('set')
+    .description('Setar env vars de um serviço Cloud Run (merge, step-up MFA)')
+    .requiredOption('--service <service>', 'nome do serviço Cloud Run alvo')
+    .option('--set <KEY=VALUE>', 'env var literal (repetível)', (v, acc = []) => [...acc, v], [])
+    .option('--secret <KEY=secretName[:version]>', 'env var via Secret Manager (repetível)', (v, acc = []) => [...acc, v], [])
+    .option('--unset <KEY>', 'remover env var (repetível)', (v, acc = []) => [...acc, v], [])
+    .option('--mfa-token <code>', 'código TOTP (step-up MFA, pula prompt)')
+    .option('--dry-run', 'valida e mostra efeito sem aplicar')
+    .option('--yes', 'pula confirmações (modo script)')
+    .option('--json', 'saída em JSON')
+    .action(async (opts) => {
+    const { runEnvSet } = await import('./commands/env.js');
+    await runEnvSet({
+        service: opts.service,
+        set: opts.set,
+        secret: opts.secret,
+        unset: opts.unset,
+        mfaToken: opts.mfaToken,
+        dryRun: !!opts.dryRun,
+        yes: !!opts.yes,
+        json: !!opts.json,
+    });
+});
 // ── neetru db ─────────────────────────────────────────────────────────
 const dbCmd = program
     .command('db')
@@ -994,6 +1020,24 @@ program
     const { runDoctor } = await import('./commands/doctor.js');
     await runDoctor({ json: !!opts.json });
 });
+// ── neetru bootstrap ──────────────────────────────────────────────────
+// Setup zero-to-working da máquina dev: checa Node/gcloud/Docker/Firebase/git,
+// roda `npm ci` no cwd se necessário, faz `gcloud auth ADC login`,
+// e termina rodando `neetru doctor` pra confirmar.
+program
+    .command('bootstrap')
+    .description('Setup completo da máquina dev (binários + deps NPM + ADC)')
+    .option('-y, --yes', 'aceita todos os auto-installs sem prompt')
+    .option('--check', 'só lista o que falta, sem instalar nada')
+    .option('--json', 'saída em JSON (machine-readable)')
+    .action(async (opts) => {
+    const { runBootstrap } = await import('./commands/bootstrap.js');
+    await runBootstrap({
+        yes: !!opts.yes,
+        check: !!opts.check,
+        json: !!opts.json,
+    });
+});
 // ── neetru upgrade ────────────────────────────────────────────────────
 program
     .command('upgrade')
@@ -1179,6 +1223,49 @@ hostingCmd
     const { runHostingList } = await import('./commands/infra-read.js');
     await runHostingList({ json: !!opts.json });
 });
+hostingCmd
+    .command('create-mapping')
+    .description('Criar domain mapping pra serviço Cloud Run (admin + step-up MFA)')
+    .requiredOption('--service <service>', 'nome do serviço Cloud Run alvo')
+    .requiredOption('--domain <domain>', 'domínio FQDN (ex: api.dev.neetru.com)')
+    .option('--mfa-token <code>', 'código TOTP (step-up MFA, pula prompt)')
+    .option('--dry-run', 'valida e mostra efeito sem aplicar')
+    .option('--yes', 'pula confirmações (modo script)')
+    .option('--json', 'saída em JSON')
+    .action(async (opts) => {
+    const { runHostingCreateMapping } = await import('./commands/hosting-write.js');
+    await runHostingCreateMapping({
+        service: opts.service,
+        domain: opts.domain,
+        mfaToken: opts.mfaToken,
+        dryRun: !!opts.dryRun,
+        yes: !!opts.yes,
+        json: !!opts.json,
+    });
+});
+// ── neetru artifact-registry ─────────────────────────────────────────
+const arCmd = program
+    .command('artifact-registry')
+    .alias('ar')
+    .description('Gerenciar repositórios do Artifact Registry');
+arCmd
+    .command('create <name>')
+    .description('Criar repositório (one-shot por produto) — admin only')
+    .option('--location <location>', 'região (default us-central1)', 'us-central1')
+    .option('--format <format>', 'DOCKER (default) | NPM | MAVEN | PYTHON | APT | YUM | GO | KFP', 'DOCKER')
+    .option('--description <text>', 'descrição opcional')
+    .option('--dry-run', 'valida e mostra efeito sem aplicar')
+    .option('--json', 'saída em JSON')
+    .action(async (name, opts) => {
+    const { runArtifactRegistryCreate } = await import('./commands/artifact-registry.js');
+    await runArtifactRegistryCreate(name, {
+        location: opts.location,
+        format: opts.format,
+        description: opts.description,
+        dryRun: !!opts.dryRun,
+        json: !!opts.json,
+    });
+});
 // ── neetru builds ────────────────────────────────────────────────────
 program
     .command('builds')
@@ -1234,6 +1321,13 @@ drCmd
     const { registerSchemaCommand } = await import('./commands/schema.js');
     registerSchemaCommand(program);
 }
+// ── neetru ops ────────────────────────────────────────────────────────
+// Operações internas migradas de scripts/ (heartbeat, smoke, reg-token,
+// resolve-errors, openapi-diff). Substitui acesso ad-hoc via tsx/node.
+{
+    const { registerOpsCommand } = await import('./commands/ops.js');
+    registerOpsCommand(program);
+}
 // ── parse ─────────────────────────────────────────────────────────────
 if (!process.argv.slice(2).length) {
     if (process.stdin.isTTY && process.stdout.isTTY && process.env.CI !== 'true') {