@zenifra/cli 0.2.2 → 0.2.4

package/bin/zenifra.mjs

@@ -21,7 +21,53 @@ const SESSION_FILE = join(SESSION_DIR, 'session.json');
 const PROFILES_FILE = join(SESSION_DIR, 'profiles.json');
 const PROFILE_STORE_VERSION = 1;
 const DEFAULT_PROFILE_NAME = 'default';
-const FINAL_BUILD_STATUSES = new Set(['success', 'failed']);
+const DEFAULT_HTTP_TIMEOUT_MS = 30_000;
+const KNOWN_FLAG_NAMES = new Set([
+  'apiBase',
+  'branch',
+  'build',
+  'challengeToken',
+  'code',
+  'commitSha',
+  'config',
+  'count',
+  'cpu',
+  'cursor',
+  'description',
+  'direction',
+  'email',
+  'exposure',
+  'follow',
+  'from',
+  'help',
+  'image',
+  'instance',
+  'interval',
+  'json',
+  'key',
+  'limit',
+  'max',
+  'memory',
+  'min',
+  'mode',
+  'name',
+  'org',
+  'page',
+  'password',
+  'paymentMode',
+  'plan',
+  'profile',
+  'project',
+  'revoke',
+  'showValues',
+  'status',
+  'timeout',
+  'to',
+  'totp',
+  'type',
+  'value',
+  'view',
+]);
 const ALLOWED_PLAN_VALUES = new Set([
   'free',
   'static',
@@ -40,6 +86,7 @@ const ALLOWED_PLAN_VALUES = new Set([
 const ALLOWED_PAYMENT_MODE_VALUES = new Set(['hourly', 'monthly', 'yearly']);
 const ALLOWED_TYPE_PROJECT_VALUES = new Set(['http', 'postgresql', 'mariadb']);
 const ALLOWED_RUNTIME_VALUES = new Set(['nodejs', 'python']);
+const ALLOWED_EXPOSURE_VALUES = new Set(['public', 'private']);
 const GITHUB_RUNTIME_VERSIONS = {
   nodejs: ['24', '22', '20'],
   python: ['3.13', '3.12', '3.11'],
@@ -69,6 +116,7 @@ const WIZARD_DATABASE_PLAN_OPTIONS = [
 ];
 const WIZARD_PAYMENT_MODE_OPTIONS = ['hourly', 'monthly', 'yearly'];
 const WIZARD_TYPE_PROJECT_OPTIONS = ['http', 'postgresql', 'mariadb'];
+const WIZARD_HTTP_EXPOSURE_OPTIONS = ['public', 'private'];
 let promptInterface;
 let pipedInputPromise;
 let pipedInputIndex = 0;
@@ -96,7 +144,7 @@ Usage:
   zenifra help <command>
   zenifra auth login [--profile <name>] [--api-base <url>] [--code <code>]
   zenifra auth api-key --key <znf_key> [--profile <name>] [--api-base <url>]
-  zenifra auth logout [--profile <name>]
+  zenifra auth logout [--profile <name>] [--revoke]
   zenifra profile list [--json]
   zenifra profile show [<name>] [--json]
   zenifra profile add [--name <name>] [--description <text>] [--api-base <url>] [--mode <api-key|login>] [--key <znf_key>] [--json]
@@ -115,13 +163,20 @@ Usage:
   zenifra project metrics --project <id> [--instance <id>] [--json]
   zenifra project network --project <id> [--view <summary|status-codes|routes|user-agents|request-events|source-ips>] [--json]
   zenifra project image set --project <id> --image <image> [--json]
+  zenifra project exposure set --project <id> --exposure <public|private> [--json]
   zenifra project envs --project <id> [--json] [--show-values]
   zenifra project env add --project <id> --name <name> --value <value> [--json]
   zenifra project env update --project <id> --name <name> --value <value> [--json]
   zenifra project env remove --project <id> --name <name> [--json]
+  zenifra project autoscaling --project <id> [--json]
+  zenifra project autoscaling set --project <id> --min <n> --max <n> [--cpu <percent>] [--memory <percent>] [--json]
+  zenifra project autoscaling disable --project <id> [--json]
+  zenifra project autoscaling events --project <id> [--direction <scale_up|scale_down>] [--from <iso>] [--to <iso>] [--page <n>] [--limit <n>] [--json]
+  zenifra project billing usage --project <id> [--from <iso>] [--to <iso>] [--page <n>] [--limit <n>] [--json]
   zenifra project instances --project <id> [--json]
   zenifra project instances set --project <id> --count <n> [--json]
   zenifra builds --project <id> [--page <n>] [--limit <n>] [--branch <name>] [--status <status>] [--json]
+  zenifra builds logs --project <id> --build <id> [--cursor <n>] [--limit <n>] [--follow] [--interval <seconds>] [--timeout <seconds>] [--json]
   zenifra deployments --project <id> [--page <n>] [--limit <n>] [--branch <name>] [--status <status>] [--json]
   zenifra deploy --project <id> [--branch <name>] [--commit-sha <sha>] [--json]
   zenifra deploy watch --project <id> --build <id> [--interval <seconds>] [--timeout <seconds>] [--json]
@@ -138,7 +193,7 @@ Run "zenifra help <command>" or "zenifra <command> --help" for command-specific
 const HELP_SPECS = [
   {
     command: 'auth',
-    usage: 'zenifra auth\n  zenifra auth login [--profile <name>] [--api-base <url>] [--code <code>]\n  zenifra auth api-key --key <znf_key> [--profile <name>] [--api-base <url>]\n  zenifra auth logout [--profile <name>]',
+    usage: 'zenifra auth\n  zenifra auth login [--profile <name>] [--api-base <url>] [--code <code>]\n  zenifra auth api-key --key <znf_key> [--profile <name>] [--api-base <url>]\n  zenifra auth logout [--profile <name>] [--revoke]',
     description: 'Gerencia a autenticacao dos perfis locais da CLI.',
     examples: ['zenifra auth', 'zenifra auth login --profile staging', 'zenifra auth api-key --profile prod --key znf_0123456789abcdef01234567_abcd...'],
     output: 'Zenifra CLI - auth',
@@ -168,11 +223,12 @@ const HELP_SPECS = [
   },
   {
     command: 'auth logout',
-    usage: 'zenifra auth logout [--profile <name>]',
+    usage: 'zenifra auth logout [--profile <name>] [--revoke]',
     description: 'Remove a autenticacao do perfil ativo ou do perfil informado.',
-    flags: ['--profile <name>  Limpa outro perfil sem trocar o perfil ativo.'],
-    examples: ['zenifra auth logout', 'zenifra auth logout --profile staging'],
+    flags: ['--profile <name>  Limpa outro perfil sem trocar o perfil ativo.', '--revoke          Revoga as sessoes de usuario no servidor antes de limpar o perfil.'],
+    examples: ['zenifra auth logout', 'zenifra auth logout --profile staging', 'zenifra auth logout --revoke'],
     output: 'Autenticacao removida do perfil active.',
+    notes: ['Sem --revoke, remove somente a credencial local. A revogacao invalida as sessoes de login do usuario e nao se aplica a API keys.'],
   },
   {
     command: 'profile',
@@ -291,11 +347,11 @@ const HELP_SPECS = [
   },
   {
     command: 'project',
-    usage: 'zenifra project\n  zenifra project info --project <id> [--json]\n  zenifra project url --project <id> [--json]\n  zenifra project logs --project <id> [--instance <id>] [--json]\n  zenifra project metrics --project <id> [--instance <id>] [--json]\n  zenifra project network --project <id> [--view <summary|status-codes|routes|user-agents|request-events|source-ips>] [--json]\n  zenifra project image set --project <id> --image <image> [--json]\n  zenifra project envs --project <id> [--json] [--show-values]\n  zenifra project env add --project <id> --name <name> --value <value> [--json]\n  zenifra project env update --project <id> --name <name> --value <value> [--json]\n  zenifra project env remove --project <id> --name <name> [--json]\n  zenifra project instances --project <id> [--json]\n  zenifra project instances set --project <id> --count <n> [--json]',
+    usage: 'zenifra project\n  zenifra project info --project <id> [--json]\n  zenifra project url --project <id> [--json]\n  zenifra project logs --project <id> [--instance <id>] [--json]\n  zenifra project metrics --project <id> [--instance <id>] [--json]\n  zenifra project network --project <id> [--view <summary|status-codes|routes|user-agents|request-events|source-ips>] [--json]\n  zenifra project image set --project <id> --image <image> [--json]\n  zenifra project exposure set --project <id> --exposure <public|private> [--json]\n  zenifra project envs --project <id> [--json] [--show-values]\n  zenifra project env add --project <id> --name <name> --value <value> [--json]\n  zenifra project env update --project <id> --name <name> --value <value> [--json]\n  zenifra project env remove --project <id> --name <name> [--json]\n  zenifra project autoscaling --project <id> [--json]\n  zenifra project autoscaling set --project <id> --min <n> --max <n> [--cpu <percent>] [--memory <percent>] [--json]\n  zenifra project autoscaling disable --project <id> [--json]\n  zenifra project autoscaling events --project <id> [--direction <scale_up|scale_down>] [--from <iso>] [--to <iso>] [--page <n>] [--limit <n>] [--json]\n  zenifra project billing usage --project <id> [--from <iso>] [--to <iso>] [--page <n>] [--limit <n>] [--json]\n  zenifra project instances --project <id> [--json]\n  zenifra project instances set --project <id> --count <n> [--json]',
     description: 'Agrupa comandos operacionais e de introspecao sobre um projeto especifico.',
     examples: ['zenifra project', 'zenifra project info --project proj_1', 'zenifra project env add --project proj_1 --name NODE_ENV --value production'],
     output: 'Zenifra CLI - project',
-    notes: ['Use "zenifra help project <subcomando>" para detalhes de info, url, logs, metrics, network, image, envs e instances.'],
+    notes: ['Use "zenifra help project <subcomando>" para detalhes de info, url, logs, metrics, network, image, exposure, autoscaling, billing, envs e instances.'],
   },
   {
     command: 'project info',
@@ -352,6 +408,16 @@ const HELP_SPECS = [
     output: 'Imagem atualizada com sucesso.',
     jsonOutput: '{"status":"success","message":"updated with success"}',
   },
+  {
+    command: 'project exposure set',
+    usage: 'zenifra project exposure set --project <id> --exposure <public|private> [--json]',
+    description: 'Altera se um projeto HTTP expoe rota publica e dominio.',
+    flags: ['--project <id>    ID do projeto.', '--exposure <mode> Use public para criar rota publica ou private para remover exposicao.', '--json            Imprime a resposta em JSON.'],
+    examples: ['zenifra project exposure set --project 507f1f77bcf86cd799439012 --exposure private', 'zenifra project exposure set --project 507f1f77bcf86cd799439012 --exposure public --json'],
+    output: 'Campo      Valor\n---------  ----------------------------------\nExposicao  private\nDominio    -',
+    jsonOutput: '{"status":"success","message":"project exposure updated with success","exposure":"private","custom_domains":[]}',
+    notes: ['Ao mudar para private, a API remove a rota publica e dominios personalizados do projeto.'],
+  },
   {
     command: 'project envs',
     usage: 'zenifra project envs --project <id> [--json] [--show-values]',
@@ -392,10 +458,55 @@ const HELP_SPECS = [
     jsonOutput: '{"status":"success","message":"updated with success","envs":[]}',
     notes: ['Falha se a variavel nao existir.'],
   },
+  {
+    command: 'project autoscaling',
+    usage: 'zenifra project autoscaling --project <id> [--json]',
+    description: 'Mostra a configuracao de auto-scaling HTTP do projeto.',
+    flags: ['--project <id>  ID do projeto.', '--json          Imprime a resposta em JSON.'],
+    examples: ['zenifra project autoscaling --project 507f1f77bcf86cd799439012'],
+    output: 'Campo       Valor\n----------  -----\nStatus      ativo\nMinimo      2\nMaximo      8\nCPU alvo    70%\nMemoria     80%',
+    jsonOutput: '{"enabled":true,"min_instances":2,"max_instances":8,"target_cpu_utilization_percent":70,"target_memory_utilization_percent":80}',
+  },
+  {
+    command: 'project autoscaling set',
+    usage: 'zenifra project autoscaling set --project <id> --min <n> --max <n> [--cpu <percent>] [--memory <percent>] [--json]',
+    description: 'Ativa ou atualiza o auto-scaling HTTP do projeto.',
+    flags: ['--project <id>    ID do projeto.', '--min <n>        Minimo de instancias reservadas.', '--max <n>        Maximo de instancias permitidas.', '--cpu <percent>  CPU alvo. Padrao da API: 70.', '--memory <percent> Memoria alvo. Padrao da API: 80.', '--json           Imprime a resposta em JSON.'],
+    examples: ['zenifra project autoscaling set --project 507f1f77bcf86cd799439012 --min 2 --max 8 --cpu 70 --memory 80'],
+    output: 'Auto-scaling atualizado: 2-8 instancias.',
+    jsonOutput: '{"status":"success","message":"project autoscaling updated with success","data":{"autoscaling":{"enabled":true,"min_instances":2,"max_instances":8}}}',
+  },
+  {
+    command: 'project autoscaling disable',
+    usage: 'zenifra project autoscaling disable --project <id> [--json]',
+    description: 'Desativa o auto-scaling HTTP e volta para instancias fixas no minimo configurado.',
+    flags: ['--project <id>  ID do projeto.', '--json          Imprime a resposta em JSON.'],
+    examples: ['zenifra project autoscaling disable --project 507f1f77bcf86cd799439012'],
+    output: 'Auto-scaling desativado.',
+    jsonOutput: '{"status":"success","message":"project autoscaling updated with success","data":{"autoscaling":{"enabled":false}}}',
+  },
+  {
+    command: 'project autoscaling events',
+    usage: 'zenifra project autoscaling events --project <id> [--direction <scale_up|scale_down>] [--from <iso>] [--to <iso>] [--page <n>] [--limit <n>] [--json]',
+    description: 'Lista o historico de scale up e scale down do auto-scaling HTTP.',
+    flags: ['--project <id>       ID do projeto.', '--direction <valor> Filtra por scale_up ou scale_down.', '--from <iso>         Inicio do periodo.', '--to <iso>           Fim do periodo.', '--page <n>           Pagina. Padrao da API: 1.', '--limit <n>          Itens por pagina. Maximo da API: 100.', '--json               Imprime a resposta em JSON.'],
+    examples: ['zenifra project autoscaling events --project 507f1f77bcf86cd799439012 --direction scale_up'],
+    output: 'Quando                    Direcao   Instancias  Limites          Motivo\n05/06/2026, 18:40        aumento   2 -> 5     CPU 91%/70%    capacidade aumentada',
+    jsonOutput: '{"events":[{"direction":"scale_up","previous_instances":2,"new_instances":5,"occurred_at":"2026-06-05T21:40:00.000Z"}],"pagination":{"page":1,"limit":10,"total":1,"total_pages":1}}',
+  },
+  {
+    command: 'project billing usage',
+    usage: 'zenifra project billing usage --project <id> [--from <iso>] [--to <iso>] [--page <n>] [--limit <n>] [--json]',
+    description: 'Lista o consumo horario consolidado de um projeto.',
+    flags: ['--project <id>  ID do projeto.', '--from <iso>    Inicio do periodo.', '--to <iso>      Fim do periodo.', '--page <n>      Pagina. Padrao da API: 1.', '--limit <n>     Itens por pagina. Maximo: 50.', '--json          Imprime a resposta em JSON.'],
+    examples: ['zenifra project billing usage --project 507f1f77bcf86cd799439012 --from 2026-06-01T00:00:00Z --limit 20'],
+    output: 'Inicio                    Fim                       Instancia-horas  Armazenamento  Total\n2026-06-01T10:00:00.000Z  2026-06-01T11:00:00.000Z  2                1.5 GB-h         R$ 0,30',
+    jsonOutput: '{"hours":[],"summary":{"currency":"brl","compute_amount":0,"storage_amount":0,"total_amount":0},"pagination":{"page":1,"limit":10,"total":0,"total_pages":0}}',
+  },
   {
     command: 'project instances',
     usage: 'zenifra project instances --project <id> [--json]',
-    description: 'Lista instancias/pods do projeto.',
+    description: 'Lista instancias do projeto.',
     flags: ['--project <id>  ID do projeto.', '--json          Imprime a resposta em JSON.'],
     examples: ['zenifra project instances --project 507f1f77bcf86cd799439012'],
     output: 'Instancia\nweb-1',
@@ -419,6 +530,24 @@ const HELP_SPECS = [
     output: 'Build                     Status   Branch  Commit\nbuild_123                 success  main    abc123',
     jsonOutput: '[{"id":"build_123","status":"success","branch":"main","commit_sha":"abc123"}]',
   },
+  {
+    command: 'builds logs',
+    usage: 'zenifra builds logs --project <id> --build <id> [--cursor <n>] [--limit <n>] [--follow] [--interval <seconds>] [--timeout <seconds>] [--json]',
+    description: 'Lê os logs de um build GitHub existente e opcionalmente acompanha novos chunks em tempo real.',
+    flags: [
+      '--project <id>        ID do projeto.',
+      '--build <id>          ID do build.',
+      '--cursor <n>          Cursor inicial inteiro, maior ou igual a 0. Padrao: 0.',
+      '--limit <n>           Quantidade de logs por request, entre 1 e 500. Padrao: 200.',
+      '--follow              Continua em polling ate o build finalizar.',
+      '--interval <seconds>  Intervalo de polling com --follow, minimo 0.1. Padrao: 5.',
+      '--timeout <seconds>   Timeout total com --follow, minimo 1. Padrao: 900.',
+      '--json                Imprime a resposta em JSON.',
+    ],
+    examples: ['zenifra builds logs --project 507f1f77bcf86cd799439012 --build build_123', 'zenifra builds logs --project 507f1f77bcf86cd799439012 --build build_123 --follow'],
+    output: '[2026-05-27T12:00:00.000Z] install: npm ci\n[2026-05-27T12:00:05.000Z] build: npm run build',
+    jsonOutput: '{"logs":[{"sequence":1,"timestamp":"2026-05-27T12:00:00.000Z","level":"info","step":"install","message":"npm ci","final":false}],"next_cursor":1,"status":"running","finished":false,"truncated":false}',
+  },
   {
     command: 'deployments',
     usage: 'zenifra deployments --project <id> [--page <n>] [--limit <n>] [--branch <name>] [--status <status>] [--json]',
@@ -431,20 +560,35 @@ const HELP_SPECS = [
   {
     command: 'deploy',
     usage: 'zenifra deploy --project <id> [--branch <name>] [--commit-sha <sha>] [--json]',
-    description: 'Dispara um deploy GitHub para o projeto.',
+    description: 'Dispara um build/deploy GitHub para o projeto e retorna o build_id para acompanhamento posterior.',
     flags: ['--project <id>    ID do projeto.', '--branch <name>  Branch a publicar.', '--commit-sha <sha> Commit especifico.', '--json           Imprime a resposta em JSON.'],
-    examples: ['zenifra deploy --project 507f1f77bcf86cd799439012 --branch main'],
+    examples: [
+      'zenifra deploy --project 507f1f77bcf86cd799439012 --branch main',
+      'zenifra deploy watch --project 507f1f77bcf86cd799439012 --build build_123',
+    ],
     output: 'Deploy iniciado: build_123',
     jsonOutput: '{"status":"success","data":{"build_id":"build_123"}}',
+    notes: [
+      'Use o build_id retornado para acompanhar a execucao com "zenifra deploy watch --project <id> --build <build_id>".',
+      'O subcomando "deploy watch" acompanha status e logs incrementais do build ate o estado terminal.',
+    ],
   },
   {
     command: 'deploy watch',
     usage: 'zenifra deploy watch --project <id> --build <id> [--interval <seconds>] [--timeout <seconds>] [--json]',
-    description: 'Acompanha um build ate status terminal.',
-    flags: ['--project <id>        ID do projeto.', '--build <id>          ID do build.', '--interval <seconds>  Intervalo de polling. Padrao: 5.', '--timeout <seconds>   Timeout total. Padrao: 900.', '--json                Imprime cada resposta em JSON.'],
-    examples: ['zenifra deploy watch --project 507f1f77bcf86cd799439012 --build build_123'],
-    output: '[2026-05-27T12:00:00.000Z] build build_123: building\n[2026-05-27T12:00:05.000Z] build build_123: success',
-    jsonOutput: '{"id":"build_123","status":"success"}',
+    description: 'Acompanha um build em tempo real, fazendo polling do status e imprimindo os logs incrementais do build ate o estado terminal.',
+    flags: ['--project <id>        ID do projeto.', '--build <id>          ID do build.', '--interval <seconds>  Intervalo de polling, minimo 0.1. Padrao: 5.', '--timeout <seconds>   Timeout total, minimo 1. Padrao: 900.', '--json                Imprime cada resposta em JSON.'],
+    examples: [
+      'zenifra deploy watch --project 507f1f77bcf86cd799439012 --build build_123',
+      'zenifra deploy watch --project 507f1f77bcf86cd799439012 --build build_123 --interval 2',
+      'zenifra deploy watch --project 507f1f77bcf86cd799439012 --build build_123 --json',
+    ],
+    output: '[2026-05-27T12:00:00.000Z] install: npm ci\n[2026-05-27T12:00:05.000Z] build: npm run build\n[2026-05-27T12:00:09.000Z] publish: Build concluida e publicada',
+    jsonOutput: '{"sequence":1,"timestamp":"2026-05-27T12:00:00.000Z","level":"info","step":"install","message":"npm ci","final":false}',
+    notes: [
+      'Use este subcomando logo apos "zenifra deploy" para acompanhar o build pelo build_id retornado.',
+      'No modo --json, o comando imprime eventos de log em streaming, um JSON por linha.',
+    ],
   },
 ];
 
@@ -495,6 +639,12 @@ function commandHelp(positionals) {
   return formatHelp(spec);
 }
 
+function printCommandHelpAndFail(commandKey) {
+  const positionals = Array.isArray(commandKey) ? commandKey : String(commandKey).split(' ')
+  process.stdout.write(commandHelp(positionals))
+  process.exitCode = 1
+}
+
 function isRemovedProjectsCreate(positionals) {
   return positionals[0] === 'projects' && positionals[1] === 'create';
 }
@@ -539,6 +689,17 @@ function parseArgs(argv) {
   return { positional, flags };
 }
 
+function flagNameForDisplay(value) {
+  return `--${String(value).replace(/[A-Z]/g, (character) => `-${character.toLowerCase()}`)}`;
+}
+
+function validateKnownFlags(flags) {
+  const unknown = Object.keys(flags).filter((name) => !KNOWN_FLAG_NAMES.has(name));
+  if (unknown.length > 0) {
+    throw new CliError(`Flag desconhecida: ${unknown.map(flagNameForDisplay).join(', ')}.`);
+  }
+}
+
 function emptyProfileStore() {
   return {
     version: PROFILE_STORE_VERSION,
@@ -628,7 +789,9 @@ async function migrateLegacySession() {
   });
   store.profiles[DEFAULT_PROFILE_NAME] = migratedProfile;
   store.activeProfile = DEFAULT_PROFILE_NAME;
-  return writeProfileStore(store);
+  const normalized = await writeProfileStore(store);
+  await rm(SESSION_FILE, { force: true });
+  return normalized;
 }
 
 async function readProfileStore() {
@@ -822,9 +985,16 @@ function estimateWizardTotal(state = {}) {
       if (state.httpStoragePersistent) total += 1;
     }
 
+    if (state.planAllowsAutoscaling) {
+      total += 1;
+      if (state.httpAutoscalingEnabled) total += 3;
+    }
+
     total += 1;
     if (state.envs?.enabled) total += state.envs.count * 3;
 
+    total += 1;
+
     if (state.httpSource === 'github') {
       total += 9;
     } else if (state.httpSource === 'oci') {
@@ -838,13 +1008,13 @@ function estimateWizardTotal(state = {}) {
       total += 1;
     }
 
-    if (state.planAllowsBlockIp) {
+    if (state.httpExposure !== 'private' && state.planAllowsBlockIp) {
       total += 2;
       if (state.whitelist?.enabled) total += state.whitelist.count * 3;
       if (state.blacklist?.enabled) total += state.blacklist.count * 3;
     }
 
-    if (state.planAllowsSubdomain) total += 1;
+    if (state.httpExposure !== 'private' && state.planAllowsSubdomain) total += 1;
     return total;
   }
 
@@ -1160,8 +1330,24 @@ async function promptHidden(question) {
   });
 }
 
-async function request(session, flags, method, path, { body, orgId, tokenRequired = true } = {}) {
-  const credential = resolveCredential(session);
+function httpTimeoutMs() {
+  const configured = process.env.ZENIFRA_HTTP_TIMEOUT_MS;
+  if (configured === undefined) return DEFAULT_HTTP_TIMEOUT_MS;
+
+  const value = Number(configured);
+  if (!Number.isInteger(value) || value <= 0) {
+    throw new CliError('ZENIFRA_HTTP_TIMEOUT_MS deve ser um inteiro positivo em milissegundos.');
+  }
+  return value;
+}
+
+async function request(session, flags, method, path, {
+  body,
+  orgId,
+  tokenRequired = true,
+  credential: credentialOverride,
+} = {}) {
+  const credential = credentialOverride || resolveCredential(session);
   if (tokenRequired && !credential) {
     throw new CliError('Voce precisa autenticar primeiro: zenifra auth login, zenifra auth api-key --key <znf_key> ou ZENIFRA_API_KEY.');
   }
@@ -1177,11 +1363,21 @@ async function request(session, flags, method, path, { body, orgId, tokenRequire
     headers['x-organization-id'] = orgId;
   }
 
-  const response = await fetch(`${apiBaseUrl(session, flags)}${path}`, {
-    method,
-    headers,
-    body: body === undefined ? undefined : JSON.stringify(body),
-  });
+  const timeoutMs = httpTimeoutMs();
+  let response;
+  try {
+    response = await fetch(`${apiBaseUrl(session, flags)}${path}`, {
+      method,
+      headers,
+      body: body === undefined ? undefined : JSON.stringify(body),
+      signal: AbortSignal.timeout(timeoutMs),
+    });
+  } catch (error) {
+    if (error?.name === 'TimeoutError' || error?.name === 'AbortError') {
+      throw new CliError(`A API da Zenifra nao respondeu em ate ${timeoutMs} ms.`);
+    }
+    throw new CliError(`Nao foi possivel conectar a API da Zenifra: ${error?.message || 'erro de rede'}.`);
+  }
 
   const text = await response.text();
   let payload = {};
@@ -1195,12 +1391,18 @@ async function request(session, flags, method, path, { body, orgId, tokenRequire
 
   if (!response.ok) {
     const message = payload?.message || payload?.error || `Zenifra API retornou HTTP ${response.status}`;
-    if (response.status === 401 || response.status === 403) {
+    if (response.status === 401) {
       if (credential?.type === 'api_key') {
-        throw new CliError(`${message}. Verifique se a API key esta ativa, possui permissao RBAC e se o IP atual esta permitido.`);
+        throw new CliError(`${message}. Verifique se a API key esta ativa e se o IP atual esta permitido.`);
       }
       throw new CliError(`${message}. Rode "zenifra auth login" para renovar sua sessao.`);
     }
+    if (response.status === 403) {
+      throw new CliError(message);
+    }
+    if (response.status === 429 && Number.isFinite(Number(payload?.retry_after_seconds))) {
+      throw new CliError(`${message} Tente novamente em ${Number(payload.retry_after_seconds)} segundo(s).`);
+    }
     if (String(message).includes('missing x-organization-id')) {
       throw new CliError('Organizacao nao selecionada. Rode "zenifra org set" ou use --org <id>.');
     }
@@ -1262,8 +1464,18 @@ function buildIdOf(build) {
   return build?.id || build?._id || build?.build_id || '';
 }
 
-function requireProjectId(flags) {
-  if (!flags.project) throw new CliError('Informe --project <id>.');
+function buildLogLineOf(log) {
+  const timestamp = log?.timestamp ? new Date(log.timestamp).toISOString() : new Date().toISOString()
+  const step = log?.step || 'build'
+  const message = log?.message || ''
+  return `[${timestamp}] ${step}: ${message}`
+}
+
+function requireProjectId(flags, commandKey) {
+  if (!flags.project) {
+    printCommandHelpAndFail(commandKey)
+    return null
+  }
   return String(flags.project);
 }
 
@@ -1302,6 +1514,7 @@ function printProject(project) {
     { label: 'Nome', value: project.name || '-' },
     { label: 'Status', value: project.status || '-' },
     { label: 'Tipo', value: project.type_project || '-' },
+    { label: 'Exposicao', value: project.exposure || '-' },
     { label: 'Plano', value: project.plan || '-' },
     { label: 'URL', value: url || '-' },
     { label: 'Imagem', value: project.image || '-' },
@@ -1458,6 +1671,18 @@ async function handleLogout(session, flags) {
     throw new CliError('Nenhum perfil ativo configurado. Crie um perfil com "zenifra profile add" ou autentique com "zenifra auth login".');
   }
   const target = requireExistingProfile(session, targetName);
+  if (flags.revoke) {
+    if (!target.accessToken) {
+      throw new CliError('A revogacao exige um perfil autenticado por login de usuario; API keys devem ser revogadas na organizacao.');
+    }
+    await request(target, flags, 'DELETE', '/authentication', {
+      credential: {
+        token: target.accessToken,
+        type: 'user',
+        source: 'profile',
+      },
+    });
+  }
   target.accessToken = undefined;
   target.apiKey = undefined;
   target.selectedOrganizationId = undefined;
@@ -1467,7 +1692,7 @@ async function handleLogout(session, flags) {
   if (target.__profileName === getProfileName(session)) {
     Object.assign(session, buildSession(target.__store));
   }
-  process.stdout.write(`Autenticacao removida do perfil ${target.__profileName}.\n`);
+  process.stdout.write(`Autenticacao removida do perfil ${target.__profileName}${flags.revoke ? ' e sessoes de usuario revogadas' : ''}.\n`);
 }
 
 function maskApiKey(value) {
@@ -1528,7 +1753,10 @@ async function handleProfileShow(session, flags, positional = []) {
 
 async function handleProfileUse(session, flags, positional = []) {
   const targetName = positional[2] || flags.name;
-  if (!targetName) throw new CliError('Informe o nome do perfil: zenifra profile use <name>.');
+  if (!targetName) {
+    printCommandHelpAndFail('profile use')
+    return
+  }
   activateProfileSession(session, targetName);
   await writeProfileStore(getStore(session));
   if (flags.json) return printJson({ active_profile: getProfileName(session) });
@@ -1578,7 +1806,10 @@ async function handleProfileAdd(session, flags) {
 
 async function handleProfileEdit(session, flags, positional = []) {
   const targetName = positional[2] || flags.name;
-  if (!targetName) throw new CliError('Informe o nome do perfil: zenifra profile edit <name>.');
+  if (!targetName) {
+    printCommandHelpAndFail('profile edit')
+    return
+  }
   const target = requireExistingProfile(session, targetName);
   target.description = String(flags.description ?? await prompt('Descricao do perfil', target.description || ''));
   target.apiBaseUrl = normalizeApiBaseUrl(flags.apiBase || await prompt('API base', target.apiBaseUrl || DEFAULT_API_BASE_URL));
@@ -1594,7 +1825,10 @@ async function handleProfileEdit(session, flags, positional = []) {
 
 async function handleProfileRemove(session, flags, positional = []) {
   const targetName = positional[2] || flags.name;
-  if (!targetName) throw new CliError('Informe o nome do perfil: zenifra profile remove <name>.');
+  if (!targetName) {
+    printCommandHelpAndFail('profile remove')
+    return
+  }
   const normalizedName = normalizeProfileName(targetName);
   const store = getStore(session);
   if (!store.profiles[normalizedName]) {
@@ -1743,6 +1977,22 @@ function normalizeTypeProject(value) {
   return aliases.get(raw) || raw;
 }
 
+function normalizeExposure(value) {
+  const raw = normalizeFreeText(value);
+  const aliases = new Map([
+    ['public', 'public'],
+    ['publico', 'public'],
+    ['público', 'public'],
+    ['exposto', 'public'],
+    ['sim', 'public'],
+    ['private', 'private'],
+    ['privado', 'private'],
+    ['nao', 'private'],
+    ['não', 'private'],
+  ]);
+  return aliases.get(raw) || raw;
+}
+
 function normalizeRuntime(value) {
   const raw = normalizeFreeText(value);
   const aliases = new Map([
@@ -1784,6 +2034,13 @@ function isIpAccessEnabled(planCatalog, planId) {
   return planHasFeature(planCatalog, planId, 'Bloqueio de IPs');
 }
 
+function isAutoscalingEnabledForPlan(planCatalog, planId) {
+  const plan = Array.isArray(planCatalog)
+    ? planCatalog.find((item) => item?.plan === planId)
+    : undefined;
+  return plan?.permissions?.allow_autoscaling === 'true';
+}
+
 function getMaxReplicasFromFeatures(features) {
   const replicaFeature = features.find((feature) => /réplicas?/i.test(String(feature)));
   if (!replicaFeature) return 5;
@@ -1958,6 +2215,52 @@ function formatAllowedValues(values) {
   return [...values].join(', ');
 }
 
+function validateCreateAutoscaling(config, plan, typeProject) {
+  if (config?.autoscaling === undefined) return config;
+  if (typeProject !== 'http') {
+    throw new CliError('config.autoscaling deve ser informado apenas para projetos HTTP.');
+  }
+  if (plan === 'free') {
+    throw new CliError('Auto-scaling nao esta disponivel para projetos HTTP no plano free.');
+  }
+
+  const autoscaling = config.autoscaling;
+  if (!autoscaling || typeof autoscaling !== 'object' || Array.isArray(autoscaling)) {
+    throw new CliError('config.autoscaling deve ser um objeto.');
+  }
+  if (autoscaling.enabled !== true) {
+    throw new CliError('config.autoscaling.enabled deve ser true na criacao do projeto.');
+  }
+  if (autoscaling.min_instances !== undefined) {
+    throw new CliError('Use config.instances como minimo inicial; config.autoscaling.min_instances nao e aceito na criacao.');
+  }
+
+  const instances = Number(config.instances);
+  if (!Number.isInteger(instances) || instances <= 0) {
+    throw new CliError('config.instances deve ser um inteiro positivo ao criar um projeto com auto-scaling.');
+  }
+
+  const maxInstances = Number(autoscaling.max_instances);
+  if (!Number.isInteger(maxInstances) || maxInstances < instances) {
+    throw new CliError('config.autoscaling.max_instances deve ser um inteiro maior ou igual a config.instances.');
+  }
+
+  const nextAutoscaling = {
+    enabled: true,
+    max_instances: maxInstances,
+  };
+  for (const key of ['target_cpu_utilization_percent', 'target_memory_utilization_percent']) {
+    if (autoscaling[key] === undefined) continue;
+    const value = Number(autoscaling[key]);
+    if (!Number.isInteger(value) || value < 1 || value > 100) {
+      throw new CliError(`config.autoscaling.${key} deve ser um inteiro entre 1 e 100.`);
+    }
+    nextAutoscaling[key] = value;
+  }
+
+  return { ...config, autoscaling: nextAutoscaling };
+}
+
 function validateCreateInput({ plan, paymentMode, config }) {
   const nextPlan = normalizePlan(plan);
   if (!nextPlan || !ALLOWED_PLAN_VALUES.has(nextPlan)) {
@@ -1983,10 +2286,22 @@ function validateCreateInput({ plan, paymentMode, config }) {
     nextConfig.github = { ...nextConfig.github, runtime: nextRuntime };
   }
 
+  if (nextTypeProject === 'http') {
+    const nextExposure = normalizeExposure(nextConfig.exposure);
+    if (!nextExposure || !ALLOWED_EXPOSURE_VALUES.has(nextExposure)) {
+      throw new CliError(`exposure invalido: "${nextConfig.exposure || ''}". Valores aceitos: ${formatAllowedValues(ALLOWED_EXPOSURE_VALUES)}. Docs: ${DOCS_CREATE_HTTP_URL}`);
+    }
+    nextConfig.exposure = nextExposure;
+  } else if (nextConfig.exposure !== undefined) {
+    throw new CliError('exposure deve ser informado apenas para projetos HTTP.');
+  }
+
+  const validatedConfig = validateCreateAutoscaling(nextConfig, nextPlan, nextTypeProject);
+
   return {
     plan: nextPlan,
     paymentMode: nextPaymentMode,
-    config: nextConfig,
+    config: validatedConfig,
   };
 }
 
@@ -2014,7 +2329,10 @@ function printWizardSummary(payload) {
   if (masked.description) lines.push(`  descricao: ${masked.description}`);
 
   if (masked.config.type_project === 'http') {
-    lines.push(`  http: porta ${masked.config.port} | instancias ${masked.config.instances} | storage ${masked.config.storage.capacity}Gi (${masked.config.storage.persistent ? 'persistente' : 'efemero'})`);
+    lines.push(`  http: exposicao ${masked.config.exposure} | porta ${masked.config.port} | instancias ${masked.config.instances} | storage ${masked.config.storage.capacity}Gi (${masked.config.storage.persistent ? 'persistente' : 'efemero'})`);
+    if (masked.config.autoscaling?.enabled) {
+      lines.push(`  auto-scaling: ${masked.config.instances}-${masked.config.autoscaling.max_instances} instancias | CPU ${masked.config.autoscaling.target_cpu_utilization_percent}% | memoria ${masked.config.autoscaling.target_memory_utilization_percent}%`);
+    }
     if (masked.config.github) {
       lines.push(`  github: ${masked.config.github.repository_owner}/${masked.config.github.repository_name}@${masked.config.github.branch} | runtime ${masked.config.github.runtime}@${masked.config.github.version}`);
     } else if (masked.config.image) {
@@ -2219,6 +2537,42 @@ async function buildHttpConfig({ plan, httpPlans, availableInstances }) {
     max: Math.max(1, Number(availableInstances?.[plan] || 1)),
   });
 
+  let autoscaling;
+  if (isAutoscalingEnabledForPlan(httpPlans, plan)) {
+    const enabled = await promptWizardBoolean({
+      label: 'Ativar auto-scaling',
+      docs: DOCS_CONFIGURATION_URL,
+      examples: ['sim', 'nao'],
+    });
+    promptWizardBoolean.ui.state.httpAutoscalingEnabled = enabled;
+    if (enabled) {
+      autoscaling = {
+        enabled: true,
+        max_instances: await promptWizardNumber({
+          label: 'Maximo de instancias do auto-scaling',
+          docs: DOCS_CONFIGURATION_URL,
+          examples: [String(Math.max(instances, 2))],
+          min: instances,
+          max: Math.max(instances, Number(availableInstances?.[plan] || instances)),
+        }),
+        target_cpu_utilization_percent: await promptWizardNumber({
+          label: 'CPU alvo do auto-scaling (%)',
+          docs: DOCS_CONFIGURATION_URL,
+          examples: ['70'],
+          min: 1,
+          max: 100,
+        }),
+        target_memory_utilization_percent: await promptWizardNumber({
+          label: 'Memoria alvo do auto-scaling (%)',
+          docs: DOCS_CONFIGURATION_URL,
+          examples: ['80'],
+          min: 1,
+          max: 100,
+        }),
+      };
+    }
+  }
+
   let storage;
   if (plan === 'free') {
     storage = { persistent: false, capacity: 1 };
@@ -2262,8 +2616,17 @@ async function buildHttpConfig({ plan, httpPlans, availableInstances }) {
     ],
   });
 
+  const exposure = await promptWizardSelect({
+    label: 'Exposicao HTTP',
+    docs: DOCS_CREATE_HTTP_URL,
+    examples: WIZARD_HTTP_EXPOSURE_OPTIONS,
+    options: WIZARD_HTTP_EXPOSURE_OPTIONS.map((value) => ({ value })),
+  });
+  promptWizardSelect.ui.state.httpExposure = exposure;
+
+  const isPublicExposure = exposure === 'public';
   const allowBlockIp = isIpAccessEnabled(httpPlans, plan);
-  const customWhitelist = allowBlockIp
+  const customWhitelist = isPublicExposure && allowBlockIp
     ? await promptWizardPairs({
       introLabel: 'Deseja configurar whitelist personalizada de entrada?',
       docs: DOCS_CONFIGURATION_URL,
@@ -2276,7 +2639,7 @@ async function buildHttpConfig({ plan, httpPlans, availableInstances }) {
     })
     : [];
 
-  const ingress_black_list = allowBlockIp
+  const ingress_black_list = isPublicExposure && allowBlockIp
     ? await promptWizardPairs({
       introLabel: 'Deseja adicionar blacklist de entrada?',
       docs: DOCS_CONFIGURATION_URL,
@@ -2289,7 +2652,7 @@ async function buildHttpConfig({ plan, httpPlans, availableInstances }) {
     })
     : [];
 
-  const subdomain = isSubdomainCustomizable(httpPlans, plan)
+  const subdomain = isPublicExposure && isSubdomainCustomizable(httpPlans, plan)
     ? await promptWizardText({
       label: 'Subdomain personalizado',
       examples: ['minha-api'],
@@ -2299,9 +2662,11 @@ async function buildHttpConfig({ plan, httpPlans, availableInstances }) {
 
   return {
     type_project: 'http',
+    exposure,
     ...(source === 'github' ? { github: await buildHttpGithubConfig() } : { image: await buildHttpImageConfig() }),
     port,
     instances,
+    ...(autoscaling ? { autoscaling } : {}),
     storage,
     envs,
     ...(subdomain ? { subdomain } : {}),
@@ -2417,6 +2782,7 @@ async function runProjectCreateWizard(session, flags) {
   if (typeProject === 'http') {
     ui.state.planAllowsBlockIp = isIpAccessEnabled(catalogs.httpPlans, plan);
     ui.state.planAllowsSubdomain = isSubdomainCustomizable(catalogs.httpPlans, plan);
+    ui.state.planAllowsAutoscaling = isAutoscalingEnabledForPlan(catalogs.httpPlans, plan);
   }
   const paymentMode = await promptWizardSelect({
     label: 'Modo de pagamento',
@@ -2505,7 +2871,8 @@ async function getProject(session, flags, projectId, orgId) {
 }
 
 async function handleProjectInfo(session, flags) {
-  const projectId = requireProjectId(flags);
+  const projectId = requireProjectId(flags, 'project info');
+  if (!projectId) return
   const orgId = await resolveOrgId(session, flags);
   const project = await getProject(session, flags, projectId, orgId);
 
@@ -2514,7 +2881,8 @@ async function handleProjectInfo(session, flags) {
 }
 
 async function handleProjectUrl(session, flags) {
-  const projectId = requireProjectId(flags);
+  const projectId = requireProjectId(flags, 'project url');
+  if (!projectId) return
   const orgId = await resolveOrgId(session, flags);
   const project = await getProject(session, flags, projectId, orgId);
   const url = projectUrlOf(project);
@@ -2531,7 +2899,8 @@ async function handleProjectUrl(session, flags) {
 }
 
 async function handleProjectLogs(session, flags) {
-  const projectId = requireProjectId(flags);
+  const projectId = requireProjectId(flags, 'project logs');
+  if (!projectId) return
   const orgId = await resolveOrgId(session, flags);
   const query = buildQuery(flags, ['instance']);
   const logs = unwrapData(await request(session, flags, 'GET', `/project/${projectId}/logs${query}`, { orgId }));
@@ -2540,7 +2909,8 @@ async function handleProjectLogs(session, flags) {
 }
 
 async function handleProjectMetrics(session, flags) {
-  const projectId = requireProjectId(flags);
+  const projectId = requireProjectId(flags, 'project metrics');
+  if (!projectId) return
   const orgId = await resolveOrgId(session, flags);
   const query = buildQuery(flags, ['instance']);
   const metrics = unwrapData(await request(session, flags, 'GET', `/project/${projectId}/metrics${query}`, { orgId }));
@@ -2558,7 +2928,8 @@ async function handleProjectMetrics(session, flags) {
 }
 
 async function handleProjectNetwork(session, flags) {
-  const projectId = requireProjectId(flags);
+  const projectId = requireProjectId(flags, 'project network');
+  if (!projectId) return
   const orgId = await resolveOrgId(session, flags);
   const view = String(flags.view || 'summary');
   const allowedViews = new Set(['summary', 'status-codes', 'routes', 'user-agents', 'request-events', 'source-ips']);
@@ -2573,9 +2944,13 @@ async function handleProjectNetwork(session, flags) {
 }
 
 async function handleProjectImageSet(session, flags) {
-  const projectId = requireProjectId(flags);
+  const projectId = requireProjectId(flags, 'project image set');
+  if (!projectId) return
   const image = flags.image || await prompt('Imagem');
-  if (!image) throw new CliError('Informe --image <image>.');
+  if (!image) {
+    printCommandHelpAndFail('project image set')
+    return
+  }
 
   const orgId = await resolveOrgId(session, flags);
   const payload = await request(session, flags, 'PATCH', `/project/${projectId}/image`, {
@@ -2587,6 +2962,33 @@ async function handleProjectImageSet(session, flags) {
   process.stdout.write('Imagem atualizada com sucesso.\n');
 }
 
+async function handleProjectExposureSet(session, flags) {
+  const projectId = requireProjectId(flags, 'project exposure set');
+  if (!projectId) return
+  const exposure = normalizeExposure(flags.exposure);
+
+  if (!ALLOWED_EXPOSURE_VALUES.has(exposure)) {
+    throw new CliError('exposure invalido. Use public ou private.');
+  }
+
+  const orgId = await resolveOrgId(session, flags);
+  const payload = await request(session, flags, 'PATCH', `/project/${projectId}/exposure`, {
+    orgId,
+    body: { exposure },
+  });
+
+  if (flags.json) return printJson(payload);
+
+  printTable([
+    { field: 'Exposicao', value: payload.exposure || exposure },
+    { field: 'Dominio', value: payload.domain ? formatPublicUrl(payload.domain) : '-' },
+    { field: 'Dominios customizados', value: asArray(payload.custom_domains).join(', ') || '-' },
+  ], [
+    { label: 'Campo', value: (row) => row.field },
+    { label: 'Valor', value: (row) => row.value },
+  ]);
+}
+
 async function getProjectEnvs(session, flags, projectId, orgId) {
   return asArray(unwrapData(await request(session, flags, 'GET', `/project/${projectId}/envs`, { orgId })));
 }
@@ -2599,7 +3001,8 @@ async function patchProjectEnvs(session, flags, projectId, orgId, envs) {
 }
 
 async function handleProjectEnvs(session, flags) {
-  const projectId = requireProjectId(flags);
+  const projectId = requireProjectId(flags, 'project envs');
+  if (!projectId) return
   const orgId = await resolveOrgId(session, flags);
   const envs = await getProjectEnvs(session, flags, projectId, orgId);
 
@@ -2607,13 +3010,26 @@ async function handleProjectEnvs(session, flags) {
 }
 
 async function handleProjectEnvMutation(session, flags, action) {
-  const projectId = requireProjectId(flags);
+  const helpKeyByAction = {
+    add: 'project env add',
+    update: 'project env update',
+    remove: 'project env remove',
+  }
+  const helpKey = helpKeyByAction[action]
+  const projectId = requireProjectId(flags, helpKey);
+  if (!projectId) return
   const name = String(flags.name || '').trim();
-  if (!name) throw new CliError('Informe --name <name>.');
+  if (!name) {
+    printCommandHelpAndFail(helpKey)
+    return
+  }
 
   const needsValue = action === 'add' || action === 'update';
   const value = needsValue ? String(flags.value ?? await promptHidden('Valor')) : undefined;
-  if (needsValue && !value) throw new CliError('Informe --value <value>.');
+  if (needsValue && !value) {
+    printCommandHelpAndFail(helpKey)
+    return
+  }
 
   const orgId = await resolveOrgId(session, flags);
   const envs = await getProjectEnvs(session, flags, projectId, orgId);
@@ -2646,7 +3062,8 @@ async function handleProjectEnvMutation(session, flags, action) {
 }
 
 async function handleProjectInstances(session, flags) {
-  const projectId = requireProjectId(flags);
+  const projectId = requireProjectId(flags, 'project instances');
+  if (!projectId) return
   const orgId = await resolveOrgId(session, flags);
   const instances = unwrapData(await request(session, flags, 'GET', `/project/${projectId}/instances`, { orgId }));
 
@@ -2657,7 +3074,12 @@ async function handleProjectInstances(session, flags) {
 }
 
 async function handleProjectInstancesSet(session, flags) {
-  const projectId = requireProjectId(flags);
+  const projectId = requireProjectId(flags, 'project instances set');
+  if (!projectId) return
+  if (flags.count === undefined) {
+    printCommandHelpAndFail('project instances set')
+    return
+  }
   const instances = Number(flags.count);
   if (!Number.isInteger(instances) || instances <= 0) {
     throw new CliError('Informe --count <n> com um inteiro positivo.');
@@ -2673,6 +3095,241 @@ async function handleProjectInstancesSet(session, flags) {
   process.stdout.write(`Quantidade de instancias atualizada para ${instances}.\n`);
 }
 
+function parseAutoscalingPositiveInteger(value, flagName) {
+  const parsed = Number(value);
+  if (!Number.isInteger(parsed) || parsed <= 0) {
+    throw new CliError(`Informe ${flagName} <n> com um inteiro positivo.`);
+  }
+  return parsed;
+}
+
+function parseAutoscalingTargetPercent(value, flagName) {
+  const parsed = parseAutoscalingPositiveInteger(value, flagName);
+  if (parsed > 100) {
+    throw new CliError(`Informe ${flagName} entre 1 e 100.`);
+  }
+  return parsed;
+}
+
+function autoscalingFromProject(project) {
+  return project?.additional_info?.autoscaling || project?.autoscaling || { enabled: false };
+}
+
+function printAutoscaling(autoscaling) {
+  printTable([
+    {
+      status: autoscaling.enabled ? 'ativo' : 'inativo',
+      min: autoscaling.min_instances || '-',
+      max: autoscaling.max_instances || '-',
+      cpu: autoscaling.target_cpu_utilization_percent ? `${autoscaling.target_cpu_utilization_percent}%` : '-',
+      memory: autoscaling.target_memory_utilization_percent ? `${autoscaling.target_memory_utilization_percent}%` : '-',
+    },
+  ], [
+    { label: 'Status', value: (item) => item.status },
+    { label: 'Minimo', value: (item) => item.min },
+    { label: 'Maximo', value: (item) => item.max },
+    { label: 'CPU alvo', value: (item) => item.cpu },
+    { label: 'Memoria alvo', value: (item) => item.memory },
+  ]);
+}
+
+async function handleProjectAutoscaling(session, flags) {
+  const projectId = requireProjectId(flags, 'project autoscaling');
+  if (!projectId) return
+  const orgId = await resolveOrgId(session, flags);
+  const project = await getProject(session, flags, projectId, orgId);
+  const autoscaling = autoscalingFromProject(project);
+
+  if (flags.json) return printJson(autoscaling);
+  printAutoscaling(autoscaling);
+}
+
+async function handleProjectAutoscalingSet(session, flags) {
+  const projectId = requireProjectId(flags, 'project autoscaling set');
+  if (!projectId) return
+  if (flags.min === undefined || flags.max === undefined) {
+    printCommandHelpAndFail('project autoscaling set')
+    return
+  }
+
+  const minInstances = parseAutoscalingPositiveInteger(flags.min, '--min');
+  const maxInstances = parseAutoscalingPositiveInteger(flags.max, '--max');
+  if (maxInstances < minInstances) {
+    throw new CliError('Informe --max maior ou igual a --min.');
+  }
+
+  const body = {
+    enabled: true,
+    min_instances: minInstances,
+    max_instances: maxInstances,
+  };
+
+  if (flags.cpu !== undefined) {
+    body.target_cpu_utilization_percent = parseAutoscalingTargetPercent(flags.cpu, '--cpu');
+  }
+  if (flags.memory !== undefined) {
+    body.target_memory_utilization_percent = parseAutoscalingTargetPercent(flags.memory, '--memory');
+  }
+
+  const orgId = await resolveOrgId(session, flags);
+  const payload = await request(session, flags, 'PATCH', `/project/${projectId}/autoscaling`, {
+    orgId,
+    body,
+  });
+
+  if (flags.json) return printJson(payload);
+  process.stdout.write(`Auto-scaling atualizado: ${minInstances}-${maxInstances} instancias.\n`);
+}
+
+async function handleProjectAutoscalingDisable(session, flags) {
+  const projectId = requireProjectId(flags, 'project autoscaling disable');
+  if (!projectId) return
+
+  const orgId = await resolveOrgId(session, flags);
+  const payload = await request(session, flags, 'PATCH', `/project/${projectId}/autoscaling`, {
+    orgId,
+    body: { enabled: false },
+  });
+
+  if (flags.json) return printJson(payload);
+  process.stdout.write('Auto-scaling desativado.\n');
+}
+
+function printAutoscalingEvents(data) {
+  const directions = { scale_up: 'aumento', scale_down: 'reducao' };
+  const reasons = { increased_capacity: 'capacidade aumentada', reduced_capacity: 'capacidade reduzida' };
+  const events = asArray(data?.events);
+  printTable(events, [
+    { label: 'Quando', value: (event) => event.occurred_at || '-' },
+    { label: 'Direcao', value: (event) => directions[event.direction] || event.direction || '-' },
+    {
+      label: 'Instancias',
+      value: (event) => `${event.previous_instances ?? '-'} -> ${event.new_instances ?? '-'}`,
+    },
+    {
+      label: 'Limites',
+      value: (event) => {
+        const cpu = typeof event.current_cpu_utilization_percent === 'number' || typeof event.target_cpu_utilization_percent === 'number'
+          ? `CPU ${event.current_cpu_utilization_percent ?? '-'}%/${event.target_cpu_utilization_percent ?? '-'}%`
+          : null;
+        const memory = typeof event.current_memory_utilization_percent === 'number' || typeof event.target_memory_utilization_percent === 'number'
+          ? `MEM ${event.current_memory_utilization_percent ?? '-'}%/${event.target_memory_utilization_percent ?? '-'}%`
+          : null;
+        return [cpu, memory].filter(Boolean).join(' ');
+      },
+    },
+    { label: 'Motivo', value: (event) => reasons[event.reason] || event.reason || event.trigger_metric || '-' },
+  ]);
+
+  printPagination(data?.pagination, 'evento');
+}
+
+function isIsoDate(value) {
+  const text = String(value);
+  const match = text.match(/^(\d{4})-(\d{2})-(\d{2})(?:T(\d{2}):(\d{2})(?::(\d{2})(?:\.\d{1,9})?)?(?:Z|[+-]\d{2}:?\d{2})?)?$/);
+  if (!match || Number.isNaN(Date.parse(text))) return false;
+
+  const [, year, month, day, hour = '00', minute = '00', second = '00'] = match;
+  const calendarDate = new Date(Date.UTC(Number(year), Number(month) - 1, Number(day)));
+  return calendarDate.getUTCFullYear() === Number(year)
+    && calendarDate.getUTCMonth() === Number(month) - 1
+    && calendarDate.getUTCDate() === Number(day)
+    && Number(hour) <= 23
+    && Number(minute) <= 59
+    && Number(second) <= 59;
+}
+
+function validateProjectListFlags(flags, { maxLimit }) {
+  for (const key of ['from', 'to']) {
+    if (flags[key] !== undefined && !isIsoDate(flags[key])) {
+      throw new CliError(`Informe --${key} <iso> com uma data ISO valida.`);
+    }
+  }
+  if (flags.from !== undefined && flags.to !== undefined && Date.parse(String(flags.from)) > Date.parse(String(flags.to))) {
+    throw new CliError('Informe --from anterior ou igual a --to.');
+  }
+  for (const key of ['page', 'limit']) {
+    if (flags[key] === undefined) continue;
+    const value = Number(flags[key]);
+    if (!Number.isInteger(value) || value <= 0) {
+      throw new CliError(`Informe --${key} <n> com um inteiro positivo.`);
+    }
+    if (key === 'limit' && value > maxLimit) {
+      throw new CliError(`Informe --limit entre 1 e ${maxLimit}.`);
+    }
+  }
+}
+
+function printPagination(pagination, singular = 'item') {
+  if (!pagination) return;
+  const { page, total_pages: totalPages, total } = pagination;
+  process.stdout.write(`Pagina ${page} de ${totalPages || 1} - ${total} ${singular}(s)\n`);
+}
+
+function formatMoney(value, currency = 'brl') {
+  const amount = Number(value);
+  if (!Number.isFinite(amount)) return '-';
+  try {
+    return new Intl.NumberFormat('pt-BR', {
+      style: 'currency',
+      currency: String(currency || 'brl').toUpperCase(),
+    }).format(amount);
+  } catch {
+    return `${String(currency || 'brl').toUpperCase()} ${amount.toFixed(2)}`;
+  }
+}
+
+function printBillingUsage(data) {
+  const hours = asArray(data?.hours);
+  printTable(hours, [
+    { label: 'Inicio', value: (item) => item.hour_start || '-' },
+    { label: 'Fim', value: (item) => item.hour_end || '-' },
+    { label: 'Instancia-horas', value: (item) => item.compute_instance_hours ?? '-' },
+    { label: 'Armazenamento', value: (item) => item.storage_gb_hours === undefined ? '-' : `${item.storage_gb_hours} GB-h` },
+    { label: 'Computacao', value: (item) => formatMoney(item.compute_amount, item.currency) },
+    { label: 'Storage', value: (item) => formatMoney(item.storage_amount, item.currency) },
+    { label: 'Total', value: (item) => formatMoney(item.total_amount, item.currency) },
+    { label: 'Status', value: (item) => item.status || '-' },
+  ]);
+
+  if (data?.summary) {
+    const summary = data.summary;
+    process.stdout.write(`Resumo: computacao ${formatMoney(summary.compute_amount, summary.currency)}, armazenamento ${formatMoney(summary.storage_amount, summary.currency)}, total ${formatMoney(summary.total_amount, summary.currency)}\n`);
+  }
+  printPagination(data?.pagination, 'hora');
+}
+
+
+async function handleProjectAutoscalingEvents(session, flags) {
+  const projectId = requireProjectId(flags, 'project autoscaling events');
+  if (!projectId) return
+
+  if (flags.direction !== undefined && !['scale_up', 'scale_down'].includes(String(flags.direction))) {
+    throw new CliError('direction invalido. Use scale_up ou scale_down.');
+  }
+
+  validateProjectListFlags(flags, { maxLimit: 100 });
+
+  const orgId = await resolveOrgId(session, flags);
+  const query = buildQuery(flags, ['direction', 'from', 'to', 'page', 'limit']);
+  const data = unwrapData(await request(session, flags, 'GET', `/project/${projectId}/autoscaling/events${query}`, { orgId }));
+
+  if (flags.json) return printJson(data);
+  printAutoscalingEvents(data);
+}
+
+async function handleProjectBillingUsage(session, flags) {
+  const projectId = requireProjectId(flags, 'project billing usage');
+  if (!projectId) return;
+  validateProjectListFlags(flags, { maxLimit: 50 });
+  const orgId = await resolveOrgId(session, flags);
+  const query = buildQuery(flags, ['from', 'to', 'page', 'limit']);
+  const data = unwrapData(await request(session, flags, 'GET', `/project/${projectId}/billing/hourly-usage${query}`, { orgId }));
+
+  if (flags.json) return printJson(data);
+  printBillingUsage(data);
+}
+
 function buildQuery(flags, allowedKeys) {
   const params = new URLSearchParams();
   for (const key of allowedKeys) {
@@ -2687,7 +3344,10 @@ function buildQuery(flags, allowedKeys) {
 
 async function handleDeployments(session, flags) {
   const projectId = flags.project;
-  if (!projectId) throw new CliError('Informe --project <id>.');
+  if (!projectId) {
+    printCommandHelpAndFail(flags.__commandKey || 'builds')
+    return
+  }
   const orgId = await resolveOrgId(session, flags);
   const query = buildQuery(flags, ['page', 'limit', 'branch', 'status']);
   const data = unwrapData(await request(session, flags, 'GET', `/project/${projectId}/github/builds${query}`, { orgId }));
@@ -2705,7 +3365,11 @@ async function handleDeployments(session, flags) {
 
 async function handleDeploy(session, flags) {
   const projectId = flags.project;
-  if (!projectId) throw new CliError('Informe --project <id>.');
+  if (!projectId) {
+    process.stdout.write(commandHelp(['deploy']));
+    process.exitCode = 1;
+    return;
+  }
   const orgId = await resolveOrgId(session, flags);
   const body = {};
   if (flags.branch) body.branch = String(flags.branch);
@@ -2721,48 +3385,134 @@ async function handleDeploy(session, flags) {
   process.stdout.write(`Deploy iniciado${buildId ? `: ${buildId}` : '.'}\n`);
 }
 
-async function getBuild(session, flags, projectId, buildId, orgId) {
-  return unwrapData(await request(session, flags, 'GET', `/project/${projectId}/github/builds/${buildId}`, { orgId }));
+async function getBuildLogs(session, flags, projectId, buildId, orgId, { cursor = 0, limit = 200 } = {}) {
+  const query = buildQuery({ cursor, limit }, ['cursor', 'limit'])
+  return unwrapData(await request(session, flags, 'GET', `/project/${projectId}/github/builds/${buildId}/logs${query}`, { orgId }))
 }
 
-async function handleDeployWatch(session, flags) {
-  const projectId = flags.project;
-  const buildId = flags.build;
-  if (!projectId) throw new CliError('Informe --project <id>.');
-  if (!buildId) throw new CliError('Informe --build <id>.');
+function parseIntegerOption(value, flagName, { defaultValue, min, max }) {
+  if (value === undefined) return defaultValue;
+  const parsed = Number(value);
+  if (!Number.isInteger(parsed) || parsed < min || (max !== undefined && parsed > max)) {
+    const range = max === undefined ? `maior ou igual a ${min}` : `entre ${min} e ${max}`;
+    throw new CliError(`Informe ${flagName} com um inteiro ${range}.`);
+  }
+  return parsed;
+}
 
-  const orgId = await resolveOrgId(session, flags);
-  const intervalMs = Math.max(Number(flags.interval || 5), 1) * 1000;
-  const timeoutMs = Math.max(Number(flags.timeout || 900), 1) * 1000;
-  const startedAt = Date.now();
+function parseSecondsOption(value, flagName, { defaultValue, min }) {
+  if (value === undefined) return defaultValue;
+  const parsed = Number(value);
+  if (!Number.isFinite(parsed) || parsed < min) {
+    throw new CliError(`Informe ${flagName} com um numero maior ou igual a ${min}.`);
+  }
+  return parsed;
+}
+
+function printBuildLogs(logs) {
+  for (const log of asArray(logs)) {
+    process.stdout.write(`${buildLogLineOf(log)}\n`)
+  }
+}
+
+function printBuildLogEventsJson(logs) {
+  for (const log of asArray(logs)) {
+    process.stdout.write(`${JSON.stringify(log)}\n`)
+  }
+}
+
+async function followBuildLogs(session, flags, projectId, buildId, orgId, {
+  initialCursor = 0,
+  limit = 200,
+  intervalSeconds = 5,
+  timeoutSeconds = 900,
+} = {}) {
+  let cursor = parseIntegerOption(initialCursor, '--cursor', { defaultValue: 0, min: 0 })
+  const pollLimit = parseIntegerOption(limit, '--limit', { defaultValue: 200, min: 1, max: 500 })
+  const intervalMs = parseSecondsOption(intervalSeconds, '--interval', { defaultValue: 5, min: 0.1 }) * 1000
+  const timeoutMs = parseSecondsOption(timeoutSeconds, '--timeout', { defaultValue: 900, min: 1 }) * 1000
+  const startedAt = Date.now()
 
   while (true) {
-    const build = await getBuild(session, flags, projectId, buildId, orgId);
-    const status = build?.status || 'unknown';
+    const result = await getBuildLogs(session, flags, projectId, buildId, orgId, {
+      cursor,
+      limit: pollLimit,
+    })
+    const logs = asArray(result?.logs)
 
     if (flags.json) {
-      printJson(build);
+      printBuildLogEventsJson(logs)
     } else {
-      process.stdout.write(`[${new Date().toISOString()}] build ${buildId}: ${status}\n`);
+      printBuildLogs(logs)
+    }
+
+    if (typeof result?.next_cursor === 'number') {
+      cursor = result.next_cursor
+    } else if (logs.length > 0) {
+      cursor = logs[logs.length - 1].sequence || cursor
     }
 
-    if (FINAL_BUILD_STATUSES.has(status)) {
-      if (status === 'failed') {
-        process.exitCode = 1;
+    if (result?.finished) {
+      if (result?.status === 'failed') {
+        process.exitCode = 1
       }
-      return;
+      return result
     }
 
     if (Date.now() - startedAt > timeoutMs) {
-      throw new CliError(`Timeout aguardando build ${buildId}. Ultimo status: ${status}`);
+      throw new CliError(`Timeout aguardando build ${buildId}. Ultimo status: ${result?.status || 'unknown'}`)
     }
 
-    await new Promise((resolve) => setTimeout(resolve, intervalMs));
+    await new Promise((resolve) => setTimeout(resolve, intervalMs))
   }
 }
 
+async function handleBuildLogs(session, flags) {
+  const projectId = flags.project;
+  const buildId = flags.build;
+  if (!projectId || !buildId) {
+    printCommandHelpAndFail('builds logs')
+    return
+  }
+
+  const orgId = await resolveOrgId(session, flags);
+  const cursor = parseIntegerOption(flags.cursor, '--cursor', { defaultValue: 0, min: 0 })
+  const limit = parseIntegerOption(flags.limit, '--limit', { defaultValue: 200, min: 1, max: 500 })
+
+  if (flags.follow) {
+    return followBuildLogs(session, flags, projectId, buildId, orgId, {
+      initialCursor: cursor,
+      limit,
+      intervalSeconds: parseSecondsOption(flags.interval, '--interval', { defaultValue: 5, min: 0.1 }),
+      timeoutSeconds: parseSecondsOption(flags.timeout, '--timeout', { defaultValue: 900, min: 1 }),
+    })
+  }
+
+  const result = await getBuildLogs(session, flags, projectId, buildId, orgId, { cursor, limit })
+  if (flags.json) return printJson(result)
+  printBuildLogs(result?.logs)
+}
+
+async function handleDeployWatch(session, flags) {
+  const projectId = flags.project;
+  const buildId = flags.build;
+  if (!projectId || !buildId) {
+    printCommandHelpAndFail('deploy watch')
+    return;
+  }
+
+  const orgId = await resolveOrgId(session, flags);
+  return followBuildLogs(session, flags, projectId, buildId, orgId, {
+    initialCursor: 0,
+    limit: 200,
+    intervalSeconds: parseSecondsOption(flags.interval, '--interval', { defaultValue: 5, min: 0.1 }),
+    timeoutSeconds: parseSecondsOption(flags.timeout, '--timeout', { defaultValue: 900, min: 1 }),
+  })
+}
+
 async function main() {
   const { positional, flags } = parseArgs(process.argv.slice(2));
+  validateKnownFlags(flags);
   const [command, subcommand] = positional;
   const session = await readSession();
   try {
@@ -2812,14 +3562,21 @@ async function main() {
     if (command === 'project' && subcommand === 'metrics') return handleProjectMetrics(session, flags);
     if (command === 'project' && subcommand === 'network') return handleProjectNetwork(session, flags);
     if (command === 'project' && subcommand === 'image' && positional[2] === 'set') return handleProjectImageSet(session, flags);
+    if (command === 'project' && subcommand === 'exposure' && positional[2] === 'set') return handleProjectExposureSet(session, flags);
     if (command === 'project' && subcommand === 'envs') return handleProjectEnvs(session, flags);
     if (command === 'project' && subcommand === 'env' && positional[2] === 'add') return handleProjectEnvMutation(session, flags, 'add');
     if (command === 'project' && subcommand === 'env' && positional[2] === 'update') return handleProjectEnvMutation(session, flags, 'update');
     if (command === 'project' && subcommand === 'env' && positional[2] === 'remove') return handleProjectEnvMutation(session, flags, 'remove');
+    if (command === 'project' && subcommand === 'autoscaling' && positional[2] === 'set') return handleProjectAutoscalingSet(session, flags);
+    if (command === 'project' && subcommand === 'autoscaling' && positional[2] === 'disable') return handleProjectAutoscalingDisable(session, flags);
+    if (command === 'project' && subcommand === 'autoscaling' && positional[2] === 'events') return handleProjectAutoscalingEvents(session, flags);
+    if (command === 'project' && subcommand === 'autoscaling') return handleProjectAutoscaling(session, flags);
+    if (command === 'project' && subcommand === 'billing' && positional[2] === 'usage') return handleProjectBillingUsage(session, flags);
     if (command === 'project' && subcommand === 'instances' && positional[2] === 'set') return handleProjectInstancesSet(session, flags);
     if (command === 'project' && subcommand === 'instances') return handleProjectInstances(session, flags);
-    if (command === 'builds') return handleDeployments(session, flags);
-    if (command === 'deployments') return handleDeployments(session, flags);
+    if (command === 'builds' && subcommand === 'logs') return handleBuildLogs(session, flags);
+    if (command === 'builds') return handleDeployments(session, { ...flags, __commandKey: 'builds' });
+    if (command === 'deployments') return handleDeployments(session, { ...flags, __commandKey: 'deployments' });
     if (command === 'deploy' && subcommand === 'watch') return handleDeployWatch(session, flags);
     if (command === 'deploy') return handleDeploy(session, flags);