@zenifra/cli 0.4.0 → 0.6.0

package/bin/zenifra.mjs

@@ -27,6 +27,9 @@ const PROFILES_FILE = join(SESSION_DIR, 'profiles.json');
 const PROFILE_STORE_VERSION = 1;
 const DEFAULT_PROFILE_NAME = 'default';
 const DEFAULT_HTTP_TIMEOUT_MS = 300_000;
+const OCI_IMAGE_REFERENCE_PATTERN = /^[a-z0-9._-]+\/(?:[a-z0-9._-]+\/)*[a-z0-9._-]+(?::[a-z0-9._-]+|@sha256:[a-f0-9]{64})$/;
+const OCI_IMAGE_REFERENCE_MIN_LENGTH = 8;
+const OCI_IMAGE_REFERENCE_MAX_LENGTH = 256;
 const KNOWN_FLAG_NAMES = new Set([
   'apiBase',
   'oauth',
@@ -37,6 +40,7 @@ const KNOWN_FLAG_NAMES = new Set([
   'challengeToken',
   'code',
   'connectionFile',
+  'connection',
   'commitSha',
   'config',
   'count',
@@ -71,7 +75,10 @@ const KNOWN_FLAG_NAMES = new Set([
   'plan',
   'profile',
   'project',
+  'repository',
   'revoke',
+  'run',
+  'runId',
   'showValues',
   'status',
   'tagPattern',
@@ -113,8 +120,8 @@ const ALLOWED_PLAN_VALUES = new Set([
   'queue-premium',
   'queue-enterprise',
 ]);
-const ALLOWED_PAYMENT_MODE_VALUES = new Set(['hourly', 'monthly', 'yearly']);
-const ALLOWED_TYPE_PROJECT_VALUES = new Set(['http', 'postgresql', 'mariadb', 'valkey', 'clickhouse']);
+const ALLOWED_PAYMENT_MODE_VALUES = new Set(['hourly', 'monthly', 'yearly', 'per_minute']);
+const ALLOWED_TYPE_PROJECT_VALUES = new Set(['http', 'postgresql', 'mariadb', 'valkey', 'clickhouse', 'job']);
 const ALLOWED_RUNTIME_VALUES = new Set(['nodejs', 'python']);
 const ALLOWED_GITHUB_VERSION_DEPLOY_EVENTS = new Set(['tag', 'release']);
 const ALLOWED_GITHUB_VERSION_DEPLOY_FIELDS = new Set(['enabled', 'event', 'tag_pattern', 'include_prereleases']);
@@ -131,6 +138,15 @@ const GITHUB_PUBLIC_CONFIG_FIELDS = [
   'build_command',
 ];
 const GITHUB_PUBLIC_VERSION_DEPLOY_FIELDS = ['enabled', 'event', 'tag_pattern', 'include_prereleases'];
+const GIT_BUILD_SETTINGS_FIELDS = [
+  'runtime',
+  'version',
+  'start_command',
+  'pre_build_command',
+  'build_command',
+  'dockerfile_path',
+  'context_path',
+];
 const ALLOWED_EXPOSURE_VALUES = new Set(['public', 'private']);
 const GITHUB_RUNTIME_VERSIONS = {
   nodejs: ['24', '22', '20'],
@@ -160,6 +176,7 @@ const WIZARD_DATABASE_PLAN_OPTIONS = [
   'db-free',
 ];
 const WIZARD_PAYMENT_MODE_OPTIONS = ['hourly', 'monthly', 'yearly'];
+const WIZARD_JOB_PLAN_OPTIONS = WIZARD_HTTP_PLAN_OPTIONS.map((plan) => `job-${plan}`);
 const WIZARD_TYPE_PROJECT_OPTIONS = ['http', 'postgresql', 'mariadb', 'valkey'];
 const WIZARD_VALKEY_PROFILE_OPTIONS = ['key_value', 'cache', 'queue'];
 const WIZARD_HTTP_EXPOSURE_OPTIONS = ['public', 'private'];
@@ -177,9 +194,10 @@ const ANSI = {
 };
 
 class CliError extends Error {
-  constructor(message, exitCode = 1) {
+  constructor(message, exitCode = 1, httpStatus) {
     super(message);
     this.exitCode = exitCode;
+    if (httpStatus !== undefined) this.httpStatus = httpStatus;
   }
 }
 
@@ -200,10 +218,15 @@ Usage:
   zenifra whoami [--json]
   zenifra orgs [--json]
   zenifra org set [--org <id>]
-  zenifra plans [--type <all|http|database|storage|valkey>] [--json]
+  zenifra plans [--type <all|http|database|storage|valkey|job>] [--json]
+  zenifra git providers [--json]
+  zenifra git runtimes [--json]
+  zenifra git connections [--json]
+  zenifra git repositories resolve --connection <id> --path <owner/repo> [--json]
+  zenifra git branches --connection <id> --repository <opaque-id> [--json]
   zenifra create project
-  zenifra create project --name <name> --plan <plan> --payment-mode <mode> --config <json|@file> [--description <text>] [--org <id>] [--json]
-  zenifra projects [--json] [--org <id>] [--type <http|postgresql|mariadb|valkey>] [--page <n>] [--limit <n>]
+  zenifra create project --name <name> --plan <plan> [--payment-mode <mode>] --config <json|@file> [--description <text>] [--org <id>] [--json]
+  zenifra projects [--json] [--org <id>] [--type <http|postgresql|mariadb|valkey|job>] [--page <n>] [--limit <n>]
   zenifra valkey status --project <id> [--json]
   zenifra valkey connection --project <id> [--json]
   zenifra valkey credentials rotate --project <id> [--idempotency-key <key>] [--wait] [--interval <seconds>] [--timeout <seconds>] [--json]
@@ -214,6 +237,9 @@ Usage:
   zenifra project delete --project <id> --yes [--json]
   zenifra project url --project <id> [--json]
   zenifra project logs --project <id> [--instance <id>] [--json]
+  zenifra project runs --project <id> [--page <n>] [--limit <n>] [--json]
+  zenifra project runs cancel --project <id> --run <id> [--json]
+  zenifra project runs logs --project <id> --run <id> [--json]
   zenifra project metrics --project <id> [--instance <id>] [--json]
   zenifra project metrics capabilities --project <id> [--json]
   zenifra project healthcheck get --project <id> [--json]
@@ -224,6 +250,9 @@ Usage:
   zenifra project image set --project <id> --image <image> [--json]
   zenifra project github --project <id> [--json]
   zenifra project github deploy-settings set --project <id> --mode <manual|branch|tag|release> [--tag-pattern <pattern>] [--include-prereleases <true|false>] [--json]
+  zenifra project source --project <id> [--json]
+  zenifra project source branches --project <id> [--json]
+  zenifra project source deploy-settings set --project <id> --mode <manual|branch|tag|release> [--tag-pattern <pattern>] [--include-prereleases <true|false>] [--json]
   zenifra project exposure set --project <id> --exposure <public|private> [--json]
   zenifra project envs --project <id> [--json] [--show-values]
   zenifra project env add --project <id> --name <name> --value <value> [--json]
@@ -393,13 +422,75 @@ const HELP_SPECS = [
   },
   {
     command: 'plans',
-    usage: 'zenifra plans [--type <all|http|database|storage|valkey>] [--json]',
-    description: 'Lista os catalogos publicos de preco de planos HTTP, banco, armazenamento e Valkey.',
-    flags: ['--type <type>  Filtra o catalogo: all, http, database, storage, valkey, key-value, cache ou queue.', '--json         Imprime a resposta em JSON.'],
-    examples: ['zenifra plans', 'zenifra plans --type http', 'zenifra plans --type valkey --json'],
+    usage: 'zenifra plans [--type <all|http|database|storage|valkey|job>] [--json]',
+    description: 'Lista os catalogos publicos de preco de planos HTTP, banco, armazenamento, Valkey e Jobs agendados.',
+    flags: ['--type <type>  Filtra o catalogo: all, http, database, storage, valkey, job, key-value, cache ou queue.', '--json         Imprime a resposta em JSON.'],
+    examples: ['zenifra plans', 'zenifra plans --type http', 'zenifra plans --type valkey --json', 'zenifra plans --type job --json'],
     output: 'HTTP\nPlano  Hora     Mes      Ano      Recursos\nfree   R$ 0,00  R$ 0,00  R$ 0,00  1 GB Armazenamento Efemero',
     jsonOutput: '{"http":[{"plan":"free","prices":{"hourly":0,"monthly":0,"yearly":0},"features":["1 GB Armazenamento Efemero"]}],"database":[],"storage":[]}',
   },
+  {
+    command: 'git',
+    usage: 'zenifra git\n  zenifra git providers [--json]\n  zenifra git runtimes [--json]\n  zenifra git connections [--json]\n  zenifra git repositories resolve --connection <id> --path <owner/repo> [--json]\n  zenifra git branches --connection <id> --repository <opaque-id> [--json]',
+    description: 'Consulta provedores, runtimes, conexoes e repositorios Git disponiveis na organizacao.',
+    examples: ['zenifra git providers', 'zenifra git connections', 'zenifra git repositories resolve --connection conn-1 --path equipe/aplicacao'],
+    output: 'Zenifra CLI - git',
+    notes: ['A conexao Forgejo e criada no Console por uma pessoa proprietaria da organizacao. A CLI lista e usa conexoes existentes.'],
+  },
+  {
+    command: 'git providers',
+    usage: 'zenifra git providers [--json]',
+    description: 'Lista provedores Git e as capacidades disponiveis para a organizacao selecionada.',
+    flags: ['--json  Imprime a resposta publica da API em JSON.'],
+    examples: ['zenifra git providers', 'zenifra git providers --json'],
+    output: 'Provedor  Disponivel  Descoberta  Deploy por branch  Deploy por versao\nforgejo   sim         nao          sim                sim',
+    jsonOutput: '{"status":"success","data":{"api_version":1,"providers":[{"id":"forgejo","available":true,"capabilities":{"repositoryDiscovery":false,"pushDeploy":true,"nativePreviews":false,"versionDeploy":true}}]}}',
+  },
+  {
+    command: 'git runtimes',
+    usage: 'zenifra git runtimes [--json]',
+    description: 'Lista runtimes e versoes disponiveis para builds de repositorios Git.',
+    flags: ['--json  Imprime a resposta publica da API em JSON.'],
+    examples: ['zenifra git runtimes', 'zenifra git runtimes --json'],
+    output: 'Runtime  Versao padrao  Versoes\nnodejs   24             24, 22, 20',
+    jsonOutput: '{"status":"success","data":[{"id":"nodejs","label":"Node.js","default_version":"24","default_port":3000,"default_start_command":"npm start","default_build_command":"npm run build","versions":[{"id":"24","label":"24"}]}]}',
+  },
+  {
+    command: 'git connections',
+    usage: 'zenifra git connections [--json]',
+    description: 'Lista as conexoes Git disponiveis para a organizacao selecionada.',
+    flags: ['--json  Imprime as conexoes publicas em JSON.'],
+    examples: ['zenifra git connections', 'zenifra git connections --json'],
+    output: 'ID           Provedor  Nome          Status\nconnection-1 forgejo   Forgejo team  active',
+    jsonOutput: '{"status":"success","data":[{"id":"connection-1","provider_id":"forgejo","display_name":"Forgejo team","status":"active","capabilities":{"repositoryDiscovery":false,"pushDeploy":true,"nativePreviews":false,"versionDeploy":true}}]}',
+    notes: ['A conexao precisa ter sido criada por uma pessoa proprietaria no Console. As credenciais nao aparecem na resposta.'],
+  },
+  {
+    command: 'git repositories',
+    usage: 'zenifra git repositories resolve --connection <id> --path <owner/repo> [--json]',
+    description: 'Agrupa comandos para resolver repositorios por caminho explicito.',
+    examples: ['zenifra git repositories resolve --connection conn-1 --path equipe/aplicacao'],
+    output: 'Zenifra CLI - git repositories',
+  },
+  {
+    command: 'git repositories resolve',
+    usage: 'zenifra git repositories resolve --connection <id> --path <owner/repo> [--json]',
+    description: 'Valida e resolve o caminho explicito de um repositorio na conexao selecionada.',
+    flags: ['--connection <id>    ID da conexao Git da organizacao.', '--path <owner/repo>  Caminho explicito do repositorio.', '--json               Imprime o resultado em JSON.'],
+    examples: ['zenifra git repositories resolve --connection conn-1 --path equipe/aplicacao --json'],
+    output: 'ID             Caminho           Branch padrao  Privado\nrepo_opaque_1  equipe/aplicacao   main           sim',
+    jsonOutput: '{"status":"success","data":{"id":"repository-id","path":"equipe/aplicacao","default_branch":"main","private":true}}',
+    notes: ['Use o ID opaco retornado somente com a mesma conexao.'],
+  },
+  {
+    command: 'git branches',
+    usage: 'zenifra git branches --connection <id> --repository <opaque-id> [--json]',
+    description: 'Lista branches de um repositorio resolvido pela conexao informada.',
+    flags: ['--connection <id>   ID da conexao Git da organizacao.', '--repository <id>  ID opaco retornado por git repositories resolve.', '--json              Imprime a resposta em JSON.'],
+    examples: ['zenifra git branches --connection conn-1 --repository repository-id'],
+    output: 'Branch  Commit\nmain    abc123',
+    jsonOutput: '{"status":"success","data":[{"name":"main","commit_sha":"<commit-sha>"}]}',
+  },
   {
     command: 'valkey',
     usage: 'zenifra valkey\n  zenifra valkey status --project <id> [--json]\n  zenifra valkey connection --project <id> [--json]\n  zenifra valkey credentials rotate --project <id> [--idempotency-key <key>] [--wait] [--interval <seconds>] [--timeout <seconds>] [--json]\n  zenifra valkey credentials status --project <id> --operation <id> [--json]',
@@ -451,7 +542,7 @@ const HELP_SPECS = [
   },
   {
     command: 'projects',
-    usage: 'zenifra projects [--json] [--org <id>] [--type <http|postgresql|mariadb|valkey>] [--page <n>] [--limit <n>]',
+    usage: 'zenifra projects [--json] [--org <id>] [--type <http|postgresql|mariadb|valkey|job>] [--page <n>] [--limit <n>]',
     description: 'Lista projetos da organizacao ativa ou da API key.',
     flags: ['--json       Imprime a resposta em JSON.', '--org <id>   Usa uma organizacao especifica com sessao de usuario.', '--type <type> Filtra por tipo de projeto.', '--page <n>   Pagina. Padrao: 1.', '--limit <n>  Itens por pagina. Padrao: 15.'],
     examples: ['zenifra projects --type http --page 1 --limit 15', 'zenifra projects --json'],
@@ -460,9 +551,9 @@ const HELP_SPECS = [
   },
   {
     command: 'create project',
-    usage: 'zenifra create project\n  zenifra create project --name <name> --plan <plan> --payment-mode <mode> --config <json|@file> [--description <text>] [--idempotency-key <key>] [--org <id>] [--json]',
+    usage: 'zenifra create project\n  zenifra create project --name <name> --plan <plan> [--payment-mode <mode>] --config <json|@file> [--description <text>] [--idempotency-key <key>] [--org <id>] [--json]',
     description: 'Cria um projeto via wizard interativo ou via payload de configuracao JSON.',
-    flags: ['--name <name>             Nome do projeto.', '--plan <plan>             Plano do projeto.', '--payment-mode <mode>     Modo de pagamento.', '--config <json|@file>     JSON inline ou arquivo.', '--description <text>      Descricao opcional.', '--idempotency-key <key>   Chave para repetir a mesma criacao com seguranca.', '--json                    Imprime a resposta em JSON.'],
+    flags: ['--name <name>             Nome do projeto.', '--plan <plan>             Plano do projeto.', '--payment-mode <mode>     Opcional para Jobs; demais tipos seguem a validacao do catalogo.', '--config <json|@file>     JSON inline ou arquivo.', '--description <text>      Descricao opcional.', '--idempotency-key <key>   Chave para repetir a mesma criacao com seguranca.', '--json                    Imprime a resposta em JSON.'],
     examples: ['zenifra create project', 'zenifra create project --name api-web --plan free --payment-mode hourly --config @examples/http-project.json'],
     output: 'Campo    Valor\n-------  --------------------------------------\nProjeto  507f1f77bcf86cd799439012\nDominio  https://api-web.clients.zenifra.com',
     jsonOutput: '{"status":"success","data":{"id":"507f1f77bcf86cd799439012","name":"api-web"}}',
@@ -470,11 +561,61 @@ const HELP_SPECS = [
   },
   {
     command: 'project',
-    usage: 'zenifra project\n  zenifra project info --project <id> [--json]\n  zenifra project stop --project <id> [--json]\n  zenifra project resume --project <id> [--json]\n  zenifra project delete --project <id> --yes [--json]\n  zenifra project url --project <id> [--json]\n  zenifra project logs --project <id> [--instance <id>] [--json]\n  zenifra project metrics --project <id> [--instance <id>] [--json]\n  zenifra project metrics capabilities --project <id> [--json]\n  zenifra project healthcheck get --project <id> [--json]\n  zenifra project healthcheck set --project <id> --path /health [--json]\n  zenifra project healthcheck disable --project <id> [--json]\n  zenifra project healthcheck failures --project <id> [--page <n>] [--limit <n>] [--json]\n  zenifra project network --project <id> [--view <summary|status-codes|routes|user-agents|request-events|source-ips>] [--json]\n  zenifra project image set --project <id> --image <image> [--json]\n  zenifra project exposure set --project <id> --exposure <public|private> [--json]\n  zenifra project envs --project <id> [--json] [--show-values]\n  zenifra project env add --project <id> --name <name> --value <value> [--json]\n  zenifra project env update --project <id> --name <name> --value <value> [--json]\n  zenifra project env remove --project <id> --name <name> [--json]\n  zenifra project autoscaling --project <id> [--json]\n  zenifra project autoscaling set --project <id> --min <n> --max <n> [--cpu <percent>] [--memory <percent>] [--json]\n  zenifra project autoscaling disable --project <id> [--json]\n  zenifra project autoscaling events --project <id> [--direction <scale_up|scale_down>] [--from <iso>] [--to <iso>] [--page <n>] [--limit <n>] [--json]\n  zenifra project billing usage --project <id> [--from <iso>] [--to <iso>] [--page <n>] [--limit <n>] [--json]\n  zenifra project instances --project <id> [--json]\n  zenifra project instances set --project <id> --count <n> [--json]',
+    usage: 'zenifra project\n  zenifra project info --project <id> [--json]\n  zenifra project source --project <id> [--json]\n  zenifra project source branches --project <id> [--json]\n  zenifra project source deploy-settings set --project <id> --mode <manual|branch|tag|release> [--tag-pattern <pattern>] [--include-prereleases <true|false>] [--json]\n  zenifra project stop --project <id> [--json]\n  zenifra project resume --project <id> [--json]\n  zenifra project delete --project <id> --yes [--json]\n  zenifra project url --project <id> [--json]\n  zenifra project logs --project <id> [--instance <id>] [--json]\n  zenifra project runs --project <id> [--page <n>] [--limit <n>] [--json]\n  zenifra project runs cancel --project <id> --run <id> [--json]\n  zenifra project runs logs --project <id> --run <id> [--json]\n  zenifra project metrics --project <id> [--instance <id>] [--json]\n  zenifra project metrics capabilities --project <id> [--json]\n  zenifra project healthcheck get --project <id> [--json]\n  zenifra project healthcheck set --project <id> --path /health [--json]\n  zenifra project healthcheck disable --project <id> [--json]\n  zenifra project healthcheck failures --project <id> [--page <n>] [--limit <n>] [--json]\n  zenifra project network --project <id> [--view <summary|status-codes|routes|user-agents|request-events|source-ips>] [--json]\n  zenifra project image set --project <id> --image <image> [--json]\n  zenifra project exposure set --project <id> --exposure <public|private> [--json]\n  zenifra project envs --project <id> [--json] [--show-values]\n  zenifra project env add --project <id> --name <name> --value <value> [--json]\n  zenifra project env update --project <id> --name <name> --value <value> [--json]\n  zenifra project env remove --project <id> --name <name> [--json]\n  zenifra project autoscaling --project <id> [--json]\n  zenifra project autoscaling set --project <id> --min <n> --max <n> [--cpu <percent>] [--memory <percent>] [--json]\n  zenifra project autoscaling disable --project <id> [--json]\n  zenifra project autoscaling events --project <id> [--direction <scale_up|scale_down>] [--from <iso>] [--to <iso>] [--page <n>] [--limit <n>] [--json]\n  zenifra project billing usage --project <id> [--from <iso>] [--to <iso>] [--page <n>] [--limit <n>] [--json]\n  zenifra project instances --project <id> [--json]\n  zenifra project instances set --project <id> --count <n> [--json]',
     description: 'Agrupa comandos operacionais e de introspecao sobre um projeto especifico.',
-    examples: ['zenifra project', 'zenifra project info --project proj_1', 'zenifra project env add --project proj_1 --name NODE_ENV --value production'],
+    examples: ['zenifra project', 'zenifra project info --project proj_1', 'zenifra project source --project proj_1', 'zenifra project env add --project proj_1 --name NODE_ENV --value production'],
     output: 'Zenifra CLI - project',
-    notes: ['Use "zenifra help project <subcomando>" para detalhes de info, stop, resume, delete, url, logs, metrics, capabilities, network, image, github, exposure, autoscaling, billing, envs e instances.'],
+    notes: ['Use "zenifra help project <subcomando>" para detalhes de info, stop, resume, delete, url, logs, runs, cancelamento, metrics, capabilities, network, image, github, source, exposure, autoscaling, billing, envs e instances.'],
+  },
+  {
+    command: 'project source',
+    usage: 'zenifra project source --project <id> [--json]\n  zenifra project source branches --project <id> [--json]\n  zenifra project source deploy-settings set --project <id> --mode <manual|branch|tag|release> [--tag-pattern <pattern>] [--include-prereleases <true|false>] [--json]',
+    description: 'Consulta a origem Git generica de um projeto, lista branches ou altera seu modo de deploy.',
+    examples: ['zenifra project source --project proj_1', 'zenifra project source branches --project proj_1'],
+    output: 'Zenifra CLI - project source',
+    notes: ['Use project github para ler ou alterar configuracoes GitHub legadas.'],
+  },
+  {
+    command: 'project source branches',
+    usage: 'zenifra project source branches --project <id> [--json]',
+    description: 'Lista branches disponiveis para a origem Git generica atual do projeto.',
+    flags: ['--project <id>  ID do projeto.', '--json          Imprime a resposta em JSON.'],
+    examples: ['zenifra project source branches --project proj_1'],
+    output: 'Branch  Commit\nmain    abc123',
+    jsonOutput: '{"status":"success","data":[{"name":"main","commit_sha":"<commit-sha>"}]}',
+  },
+  {
+    command: 'project source deploy-settings',
+    usage: 'zenifra project source deploy-settings set --project <id> --mode <manual|branch|tag|release> [--tag-pattern <pattern>] [--include-prereleases <true|false>] [--json]',
+    description: 'Agrupa os modos de deploy da origem Git generica.',
+    examples: ['zenifra project source deploy-settings set --project proj_1 --mode branch'],
+    output: 'Zenifra CLI - project source deploy-settings',
+  },
+  {
+    command: 'project source deploy-settings set',
+    usage: 'zenifra project source deploy-settings set --project <id> --mode <manual|branch|tag|release> [--tag-pattern <pattern>] [--include-prereleases <true|false>] [--json]',
+    description: 'Define e confirma o modo de deploy da origem Git Forgejo do projeto.',
+    flags: [
+      '--project <id>                      ID do projeto.',
+      '--mode <manual|branch|tag|release>   Modo de deploy exclusivo.',
+      '--tag-pattern <pattern>             Obrigatorio para tag e release; aceita * e ?.',
+      '--include-prereleases <true|false>   Inclui prereleases somente no modo release. Padrao: false.',
+      '--json                               Imprime a configuracao confirmada em JSON.',
+    ],
+    examples: [
+      'zenifra project source deploy-settings set --project proj_1 --mode manual',
+      'zenifra project source deploy-settings set --project proj_1 --mode branch',
+      'zenifra project source deploy-settings set --project proj_1 --mode tag --tag-pattern "v*"',
+      'zenifra project source deploy-settings set --project proj_1 --mode release --tag-pattern "v*" --include-prereleases true',
+    ],
+    output: 'Configuracao de deploy da origem Git confirmada: release (v*).',
+    jsonOutput: '{"status":"success","data":{"source":{"connection_id":"connection-id","repository_id":"repository-id","branch":"main","auto_deploy":false,"version_deploy":{"enabled":true,"event":"release","tag_pattern":"v*","include_prereleases":true},"provider_id":"forgejo","repository_path":"equipe/aplicacao"},"build":{"runtime":"nodejs","version":"24","start_command":"npm start"},"source_revision":2}}',
+    notes: [
+      'Tag e release exigem --tag-pattern; prereleases so podem ser habilitadas para release.',
+      'O comando preserva identidade, branch e configuracao de build da origem e confirma o resultado com uma nova leitura.',
+      'A API substitui source e build juntos e nao oferece precondicao de revisao. Evite alterar a origem ao mesmo tempo por outro cliente.',
+      'Para projetos com origem GitHub legada, use "zenifra project github deploy-settings set".',
+    ],
   },
   {
     command: 'project github',
@@ -566,6 +707,38 @@ const HELP_SPECS = [
     jsonOutput: '"server started\\nGET /health 200"',
     notes: ['Nao faz streaming continuo; retorna o snapshot disponibilizado pela API.'],
   },
+  {
+    command: 'project runs',
+    usage: 'zenifra project runs --project <id> [--page <n>] [--limit <n>] [--json]',
+    description: 'Lista as execucoes de um Job agendado com o historico de cobranca.',
+    flags: ['--project <id>  ID do projeto.', '--page <n>      Pagina. Padrao: 1.', '--limit <n>     Itens por pagina. Maximo: 50.', '--json          Imprime a resposta em JSON.'],
+    examples: ['zenifra project runs --project 507f1f77bcf86cd799439012', 'zenifra project runs --project 507f1f77bcf86cd799439012 --page 2 --limit 20 --json'],
+    output: 'ID      Status     Agendada                  Duracao  Minutos cobrados  Valor\nrun_1   succeeded  2026-09-01T12:00:00.000Z  70 s     2                 R$ 0,04',
+    jsonOutput: '{"runs":[{"id":"run_1","status":"succeeded","duration_seconds":70,"billed_minutes":2,"plan":"job-basic","currency":"brl","amount":4}],"pagination":{"page":1,"limit":20,"total":1,"total_pages":1}}',
+  },
+  {
+    command: 'project runs cancel',
+    usage: 'zenifra project runs cancel --project <id> --run <id> [--json]',
+    description: 'Cancela somente a execucao selecionada de um Job e cobra somente o tempo consumido.',
+    flags: ['--project <id>  ID do projeto.', '--run <id>      ID publico da execucao.', '--json          Imprime a resposta em JSON.'],
+    examples: ['zenifra project runs cancel --project 507f1f77bcf86cd799439012 --run run_1'],
+    output: 'Execucao: cancelled',
+    jsonOutput: '{"run":{"id":"run_1","status":"cancelled","billed_minutes":2}}',
+    notes: [
+      'Cancela somente a execucao informada; o cron do projeto continua agendando novas execucoes. Use "zenifra project stop --project <id>" para pausar o projeto e interromper execucoes futuras.',
+      'O cancelamento aguarda ate 30 segundos pela finalizacao segura e pode forcar o encerramento depois desse periodo. Se a execucao nao puder ser cancelada com seguranca, aguarde que ela termine ou alcance o limite de tempo.',
+    ],
+  },
+  {
+    command: 'project runs logs',
+    usage: 'zenifra project runs logs --project <id> --run <id> [--json]',
+    description: 'Mostra os logs de uma execucao especifica de um Job agendado.',
+    flags: ['--project <id>  ID do projeto.', '--run <id>      ID publico da execucao.', '--json          Imprime a resposta em JSON.'],
+    examples: ['zenifra project runs logs --project 507f1f77bcf86cd799439012 --run run_1', 'zenifra project runs logs --project 507f1f77bcf86cd799439012 --run run_1 --json'],
+    output: 'started\ncompleted',
+    jsonOutput: '{"logs":"started\\ncompleted","truncated":false}',
+    notes: ['Os logs pertencem a uma execucao identificada pelo ID publico retornado em project runs.'],
+  },
   {
     command: 'project metrics',
     usage: 'zenifra project metrics --project <id> [--instance <id>] [--json]',
@@ -770,7 +943,7 @@ const HELP_SPECS = [
   {
     command: 'builds',
     usage: 'zenifra builds --project <id> [--page <n>] [--limit <n>] [--branch <name>] [--status <status>] [--json]',
-    description: 'Lista builds GitHub de um projeto.',
+    description: 'Lista builds de um projeto com origem Git.',
     flags: ['--project <id>   ID do projeto.', '--page <n>      Pagina.', '--limit <n>     Itens por pagina.', '--branch <name> Filtra branch.', '--status <status> Filtra status.', '--json          Imprime a resposta em JSON.'],
     examples: ['zenifra builds --project 507f1f77bcf86cd799439012 --status success'],
     output: 'Build                     Status   Branch  Commit\nbuild_123                 success  main    abc123',
@@ -779,7 +952,7 @@ const HELP_SPECS = [
   {
     command: 'builds logs',
     usage: 'zenifra builds logs --project <id> --build <id> [--cursor <n>] [--limit <n>] [--follow] [--interval <seconds>] [--timeout <seconds>] [--json]',
-    description: 'Lê os logs de um build GitHub existente e opcionalmente acompanha novos chunks em tempo real.',
+    description: 'Le os logs de um build Git existente e opcionalmente acompanha novos eventos em tempo real.',
     flags: [
       '--project <id>        ID do projeto.',
       '--build <id>          ID do build.',
@@ -797,7 +970,7 @@ const HELP_SPECS = [
   {
     command: 'deployments',
     usage: 'zenifra deployments --project <id> [--page <n>] [--limit <n>] [--branch <name>] [--status <status>] [--json]',
-    description: 'Alias para listar builds/deployments GitHub de um projeto.',
+    description: 'Alias para listar builds e deployments Git de um projeto.',
     flags: ['--project <id>   ID do projeto.', '--page <n>      Pagina.', '--limit <n>     Itens por pagina.', '--branch <name> Filtra branch.', '--status <status> Filtra status.', '--json          Imprime a resposta em JSON.'],
     examples: ['zenifra deployments --project 507f1f77bcf86cd799439012'],
     output: 'Build                     Status   Branch  Commit\nbuild_123                 success  main    abc123',
@@ -806,7 +979,7 @@ const HELP_SPECS = [
   {
     command: 'deploy',
     usage: 'zenifra deploy --project <id> [--branch <name>] [--commit-sha <sha>] [--json]',
-    description: 'Dispara um build/deploy GitHub para o projeto e retorna o build_id para acompanhamento posterior.',
+    description: 'Dispara um build/deploy Git para o projeto e retorna o build_id para acompanhamento posterior.',
     flags: ['--project <id>    ID do projeto.', '--branch <name>  Branch a publicar.', '--commit-sha <sha> Commit especifico.', '--json           Imprime a resposta em JSON.'],
     examples: [
       'zenifra deploy --project 507f1f77bcf86cd799439012 --branch main',
@@ -877,7 +1050,8 @@ function commandHelp(positionals) {
   const key = helpKeyFromPositionals(positionals);
   if (!key) return usage();
 
-  const spec = HELP_BY_COMMAND.get(key);
+  const spec = HELP_BY_COMMAND.get(key)
+    || (key === 'project run logs' ? HELP_BY_COMMAND.get('project runs logs') : undefined);
   if (!spec) {
     throw new CliError(`Ajuda nao encontrada para: ${key}. Use "zenifra help <command>".`);
   }
@@ -900,7 +1074,7 @@ function removedProjectsCreateMessage() {
 }
 
 function isNamespaceCommand(command) {
-  return ['auth', 'profile', 'project', 'org', 'valkey'].includes(command);
+  return ['auth', 'profile', 'project', 'org', 'valkey', 'git'].includes(command);
 }
 
 function parseArgs(argv) {
@@ -1470,9 +1644,9 @@ async function promptWizardBoolean({ label, docs, examples = ['sim', 'nao'] }) {
   }
 }
 
-async function promptWizardSelect({ label, options, docs, examples = [] }) {
+async function promptWizardSelect({ label, options, docs, examples = [], extraValues = [] }) {
   while (true) {
-    const allowedValues = options.map((option) => option.value);
+    const allowedValues = [...options.map((option) => option.value), ...extraValues];
     const answer = await prompt(buildWizardPromptLine({
       ui: promptWizardSelect.ui,
       label,
@@ -1493,6 +1667,8 @@ async function promptWizardSelect({ label, options, docs, examples = [] }) {
     const normalized = normalizeFreeText(answer);
     const found = options.find((option) => normalizeFreeText(option.value) === normalized);
     if (found) return found.value;
+    const extraValue = extraValues.find((value) => normalizeFreeText(value) === normalized);
+    if (extraValue) return extraValue;
     process.stdout.write(`${tone(`valor invalido: escolha um item entre ${options.map((_, index) => index + 1).join(', ')} ou um dos valores aceitos.`, 'red')}\n`);
     promptWizardSelect.ui.step -= 1;
   }
@@ -1625,6 +1801,14 @@ function httpTimeoutMs() {
   return value;
 }
 
+function publicApiErrorMessage(value) {
+  const message = String(value || 'Nao foi possivel concluir a operacao.');
+  if (/kubernetes|k8s|namespace|cluster|pod|serviceaccount|deployment|internal[_ -]/i.test(message)) {
+    return 'Nao foi possivel concluir a operacao. Tente novamente mais tarde.';
+  }
+  return message;
+}
+
 async function request(session, flags, method, path, {
   body,
   orgId,
@@ -1691,31 +1875,394 @@ async function request(session, flags, method, path, {
   }
 
   if (!response.ok) {
-    const message = payload?.message || payload?.error || `Zenifra API retornou HTTP ${response.status}`;
+    const message = publicApiErrorMessage(payload?.message || payload?.error || `Zenifra API retornou HTTP ${response.status}`);
+    const httpError = (errorMessage) => new CliError(errorMessage, 1, response.status);
     if (response.status === 401) {
       if (credential?.type === 'api_key') {
-        throw new CliError(`${message}. Verifique se a API key esta ativa e se o IP atual esta permitido.`);
+        throw httpError(`${message}. Verifique se a API key esta ativa e se o IP atual esta permitido.`);
       }
-      throw new CliError(`${message}. Rode "zenifra auth login" para renovar sua sessao.`);
+      throw httpError(`${message}. Rode "zenifra auth login" para renovar sua sessao.`);
     }
     if (response.status === 403) {
-      throw new CliError(message);
+      throw httpError(message);
     }
     if (response.status === 429 && Number.isFinite(Number(payload?.retry_after_seconds))) {
-      throw new CliError(`${message} Tente novamente em ${Number(payload.retry_after_seconds)} segundo(s).`);
+      throw httpError(`${message} Tente novamente em ${Number(payload.retry_after_seconds)} segundo(s).`);
     }
     if (response.status === 402 && path.includes('/metrics') && /support metrics/i.test(String(message))) {
-      throw new CliError('Este projeto nao possui acesso a metricas.');
+      throw httpError('Este projeto nao possui acesso a metricas.');
     }
     if (String(message).includes('missing x-organization-id')) {
-      throw new CliError('Organizacao nao selecionada. Rode "zenifra org set" ou use --org <id>.');
+      throw httpError('Organizacao nao selecionada. Rode "zenifra org set" ou use --org <id>.');
     }
-    throw new CliError(message);
+    throw httpError(message);
   }
 
   return payload;
 }
 
+function hasValidGitProvidersApiV1(payload) {
+  if (payload?.status !== 'success' || !isRecord(payload.data) || payload.data.api_version !== 1 || !Array.isArray(payload.data.providers)) {
+    return false;
+  }
+
+  return payload.data.providers.every((provider) => (
+    isRecord(provider)
+    && typeof provider.id === 'string'
+    && /^[a-z0-9][a-z0-9_-]{0,63}$/.test(provider.id)
+    && typeof provider.available === 'boolean'
+    && isRecord(provider.capabilities)
+    && typeof provider.capabilities.repositoryDiscovery === 'boolean'
+    && typeof provider.capabilities.pushDeploy === 'boolean'
+    && typeof provider.capabilities.nativePreviews === 'boolean'
+  ));
+}
+
+async function supportsNeutralGitRoutes(session, flags, orgId) {
+  let payload;
+  try {
+    payload = await request(session, flags, 'GET', '/git/providers', { orgId });
+  } catch (error) {
+    if ([404, 405, 501].includes(error?.httpStatus)) return false;
+    throw error;
+  }
+
+  if (!hasValidGitProvidersApiV1(payload)) {
+    throw new CliError('A API retornou uma resposta invalida para as capacidades de origem Git.');
+  }
+  return true;
+}
+
+function hasLegacyGithubSource(project) {
+  if (!isRecord(project)) return false;
+  // Public Git source projections must never be rewritten as legacy GitHub input.
+  // preview.source is separate preview metadata and does not identify the primary project source.
+  const genericSourceFields = ['source', 'build', 'git_source', 'git_build'];
+  if (genericSourceFields.some((field) => project[field] !== undefined || project.config?.[field] !== undefined)) {
+    return false;
+  }
+
+  const github = project.github || project.config?.github;
+  return isRecord(github)
+    && typeof github.repository_owner === 'string'
+    && github.repository_owner.trim().length > 0
+    && typeof github.repository_name === 'string'
+    && github.repository_name.trim().length > 0;
+}
+
+async function resolveGitProjectApiPath(session, flags, projectId, orgId) {
+  if (await supportsNeutralGitRoutes(session, flags, orgId)) {
+    return `/project/${projectId}`;
+  }
+
+  const project = await getProject(session, flags, projectId, orgId);
+  if (!hasLegacyGithubSource(project)) {
+    throw new CliError('Esta API antiga so permite builds e deploys de projetos com uma origem GitHub legada compativel.');
+  }
+  return `/project/${projectId}/github`;
+}
+
+function requiredGitOpaqueId(flags, name, commandKey) {
+  const value = flags[name];
+  if (typeof value !== 'string' || !/^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/.test(value)) {
+    printCommandHelpAndFail(commandKey);
+    return null;
+  }
+  return value;
+}
+
+function requiredGitRepositoryPath(flags, commandKey) {
+  const value = flags.path;
+  const segments = typeof value === 'string' ? value.split('/') : [];
+  if (typeof value !== 'string'
+    || value.length < 3
+    || value.length > 1024
+    || segments.length < 2
+    || segments.some((segment) => segment.length === 0)
+    || /[\u0000-\u001f\u007f-\u009f\\?#%]/u.test(value)) {
+    printCommandHelpAndFail(commandKey);
+    return null;
+  }
+  return value;
+}
+
+function yesNo(value) {
+  if (value === true) return 'sim';
+  if (value === false) return 'nao';
+  return 'indisponivel';
+}
+
+async function handleGitProviders(session, flags) {
+  const orgId = await resolveOrgId(session, flags);
+  const payload = await request(session, flags, 'GET', '/git/providers', { orgId });
+  if (!hasValidGitProvidersApiV1(payload)) {
+    throw new CliError('A API retornou uma resposta invalida para o catalogo de provedores Git.');
+  }
+  if (flags.json) return printJson(payload);
+
+  printTable(payload.data.providers, [
+    { label: 'Provedor', value: (provider) => provider.id },
+    { label: 'Disponivel', value: (provider) => yesNo(provider.available) },
+    { label: 'Descoberta', value: (provider) => yesNo(provider.capabilities.repositoryDiscovery) },
+    { label: 'Deploy por branch', value: (provider) => yesNo(provider.capabilities.pushDeploy) },
+    { label: 'Deploy por versao', value: (provider) => yesNo(provider.capabilities.versionDeploy) },
+  ]);
+}
+
+async function handleGitRuntimes(session, flags) {
+  const orgId = await resolveOrgId(session, flags);
+  const payload = await request(session, flags, 'GET', '/git/runtime-catalog', { orgId });
+  const runtimes = unwrapData(payload);
+  if (!Array.isArray(runtimes)) {
+    throw new CliError('A API retornou uma resposta invalida para o catalogo de runtimes Git.');
+  }
+  if (flags.json) return printJson(payload);
+
+  printTable(runtimes, [
+    { label: 'Runtime', value: (runtime) => runtime.label || runtime.id || '-' },
+    { label: 'Versao padrao', value: (runtime) => runtime.default_version || '-' },
+    { label: 'Versoes', value: (runtime) => Array.isArray(runtime.versions) ? runtime.versions.map((version) => version.id).join(', ') : '-' },
+  ]);
+}
+
+async function handleGitConnections(session, flags) {
+  const orgId = await resolveOrgId(session, flags);
+  const payload = await request(session, flags, 'GET', '/git/connections', { orgId });
+  const connections = unwrapData(payload);
+  if (!Array.isArray(connections)) {
+    throw new CliError('A API retornou uma resposta invalida para as conexoes Git.');
+  }
+  if (flags.json) return printJson(payload);
+
+  printTable(connections, [
+    { label: 'ID', value: (connection) => connection.id || '-' },
+    { label: 'Provedor', value: (connection) => connection.provider_id || '-' },
+    { label: 'Nome', value: (connection) => connection.display_name || '-' },
+    { label: 'Status', value: (connection) => connection.status || '-' },
+  ]);
+}
+
+async function handleGitRepositoryResolve(session, flags) {
+  const connectionId = requiredGitOpaqueId(flags, 'connection', 'git repositories resolve');
+  const repositoryPath = requiredGitRepositoryPath(flags, 'git repositories resolve');
+  if (!connectionId || !repositoryPath) return;
+
+  const orgId = await resolveOrgId(session, flags);
+  const endpoint = '/git/connections/' + encodeURIComponent(connectionId) + '/repositories/resolve';
+  const payload = await request(session, flags, 'POST', endpoint, {
+    orgId,
+    body: { path: repositoryPath },
+  });
+  if (flags.json) return printJson(payload);
+
+  const repository = unwrapData(payload);
+  printTable([repository], [
+    { label: 'ID', value: (entry) => entry.id || '-' },
+    { label: 'Caminho', value: (entry) => entry.path || '-' },
+    { label: 'Branch padrao', value: (entry) => entry.default_branch || '-' },
+    { label: 'Privado', value: (entry) => yesNo(entry.private) },
+  ]);
+}
+
+async function handleGitBranches(session, flags) {
+  const connectionId = requiredGitOpaqueId(flags, 'connection', 'git branches');
+  const repositoryId = requiredGitOpaqueId(flags, 'repository', 'git branches');
+  if (!connectionId || !repositoryId) return;
+
+  const orgId = await resolveOrgId(session, flags);
+  const endpoint = '/git/connections/' + encodeURIComponent(connectionId)
+    + '/repositories/' + encodeURIComponent(repositoryId) + '/branches';
+  const payload = await request(session, flags, 'GET', endpoint, { orgId });
+  const branches = unwrapData(payload);
+  if (!Array.isArray(branches)) {
+    throw new CliError('A API retornou uma resposta invalida para as branches Git.');
+  }
+  if (flags.json) return printJson(payload);
+
+  printTable(branches, [
+    { label: 'Branch', value: (branch) => branch.name || '-' },
+    { label: 'Commit', value: (branch) => branch.commit_sha || '-' },
+  ]);
+}
+
+function printGitProjectSource(data) {
+  if (!isRecord(data?.source)) {
+    process.stdout.write('Este projeto nao possui uma origem Git generica configurada.\n');
+    return;
+  }
+
+  const source = data.source;
+  const build = isRecord(data.build) ? data.build : {};
+  const mode = source.provider_id === 'github' ? null : gitSourceDeploymentMode(source);
+  const rows = [
+    { field: 'Provedor', value: source.provider_id || '-' },
+    { field: 'Repositorio', value: source.repository_path || source.repository_id || '-' },
+    { field: 'Branch', value: source.branch || '-' },
+    { field: 'Runtime', value: build.runtime ? build.runtime + '@' + (build.version || '-') : '-' },
+    { field: 'Modo de deploy', value: mode || (source.provider_id === 'github' ? 'consulte project github' : 'indisponivel') },
+  ];
+  if (mode === 'tag' || mode === 'release') {
+    rows.push(
+      { field: 'Padrao de tags', value: source.version_deploy?.tag_pattern || '-' },
+      { field: 'Incluir prereleases', value: source.version_deploy?.include_prereleases === true ? 'sim' : 'nao' },
+    );
+  }
+  printTable(rows, [
+    { label: 'Campo', value: (row) => row.field },
+    { label: 'Valor', value: (row) => row.value },
+  ]);
+}
+
+async function handleProjectSource(session, flags) {
+  const projectId = requireProjectId(flags, 'project source');
+  if (!projectId) return;
+  const orgId = await resolveOrgId(session, flags);
+  const payload = await request(session, flags, 'GET', '/project/' + encodeURIComponent(projectId) + '/source', { orgId });
+  const source = unwrapData(payload);
+  if (flags.json) return printJson(payload);
+  printGitProjectSource(source);
+}
+
+async function handleProjectSourceBranches(session, flags) {
+  const projectId = requireProjectId(flags, 'project source branches');
+  if (!projectId) return;
+  const orgId = await resolveOrgId(session, flags);
+  const endpoint = '/project/' + encodeURIComponent(projectId) + '/source/branches';
+  const payload = await request(session, flags, 'GET', endpoint, { orgId });
+  const branches = unwrapData(payload);
+  if (!Array.isArray(branches)) {
+    throw new CliError('A API retornou uma resposta invalida para as branches da origem Git.');
+  }
+  if (flags.json) return printJson(payload);
+  printTable(branches, [
+    { label: 'Branch', value: (branch) => branch.name || '-' },
+    { label: 'Commit', value: (branch) => branch.commit_sha || '-' },
+  ]);
+}
+
+function projectGitSourceInput(source) {
+  if (!isRecord(source)
+    || typeof source.connection_id !== 'string'
+    || typeof source.repository_id !== 'string'
+    || typeof source.branch !== 'string'
+    || typeof source.auto_deploy !== 'boolean') {
+    throw new CliError('A API retornou uma origem Git incompleta; nenhuma alteracao foi enviada.');
+  }
+
+  const input = {
+    connection_id: source.connection_id,
+    repository_id: source.repository_id,
+    branch: source.branch,
+    auto_deploy: source.auto_deploy,
+  };
+  if (source.version_deploy === undefined || source.version_deploy === null) return input;
+  if (!isRecord(source.version_deploy)) {
+    throw new CliError('A API retornou configuracoes de deploy Git invalidas; nenhuma alteracao foi enviada.');
+  }
+  const versionDeploy = {};
+  for (const field of GITHUB_PUBLIC_VERSION_DEPLOY_FIELDS) {
+    if (Object.hasOwn(source.version_deploy, field)) versionDeploy[field] = source.version_deploy[field];
+  }
+  input.version_deploy = versionDeploy;
+  return input;
+}
+
+function projectGitBuildSettingsInput(build) {
+  if (!isRecord(build)) {
+    throw new CliError('A API retornou configuracoes de build incompletas; nenhuma alteracao foi enviada.');
+  }
+  const input = {};
+  for (const field of GIT_BUILD_SETTINGS_FIELDS) {
+    if (Object.hasOwn(build, field)) input[field] = build[field];
+  }
+  return input;
+}
+
+function gitSourceDeploymentMode(source) {
+  const versionDeployEnabled = source?.version_deploy?.enabled === true;
+  if (source?.auto_deploy === true && versionDeployEnabled) return null;
+  if (source?.auto_deploy === true) return 'branch';
+  if (!versionDeployEnabled) return 'manual';
+  if (!ALLOWED_GITHUB_VERSION_DEPLOY_EVENTS.has(source.version_deploy.event)) return null;
+  return source.version_deploy.event;
+}
+
+function projectGitSourceMatches(data, expectedSource, expectedBuild, desired) {
+  if (!isRecord(data) || !isRecord(data.source) || !isRecord(data.build)) return false;
+  const source = data.source;
+  if (source.provider_id !== 'forgejo'
+    || source.connection_id !== expectedSource.connection_id
+    || source.repository_id !== expectedSource.repository_id
+    || source.branch !== expectedSource.branch
+    || gitSourceDeploymentMode(source) !== desired.mode) return false;
+
+  if (desired.mode === 'tag' || desired.mode === 'release') {
+    if (source.version_deploy?.tag_pattern !== desired.body.version_deploy.tag_pattern
+      || (source.version_deploy?.include_prereleases === true) !== desired.includePrereleases) return false;
+  }
+
+  return Object.entries(expectedBuild).every(([field, value]) => data.build[field] === value);
+}
+
+async function handleProjectSourceDeploySettingsSet(session, flags) {
+  const desired = parseGithubDeploySettings(flags);
+  const projectId = requireProjectId(flags, 'project source deploy-settings set');
+  if (!projectId) return;
+  const orgId = await resolveOrgId(session, flags);
+  const endpoint = '/project/' + encodeURIComponent(projectId) + '/source';
+  let current;
+  try {
+    current = unwrapData(await request(session, flags, 'GET', endpoint, { orgId }));
+  } catch (error) {
+    if (error?.httpStatus === 404) {
+      throw new CliError('A origem Git generica nao esta disponivel para este projeto ou API. Para projetos GitHub legados, use "zenifra project github deploy-settings set".', 1, 404);
+    }
+    throw error;
+  }
+
+  if (!isRecord(current?.source) || !isRecord(current?.build)) {
+    throw new CliError('Este projeto nao tem uma origem Git generica configurada. Configure-a antes de alterar o modo de deploy.');
+  }
+  if (current.source.provider_id === 'github') {
+    throw new CliError('Esta origem GitHub nao pode ser alterada por este comando. Consulte e altere com "zenifra project github deploy-settings set".');
+  }
+  if (current.source.provider_id !== 'forgejo') {
+    throw new CliError('O provedor da origem nao e suportado por este comando; nenhuma alteracao foi enviada.');
+  }
+  if (desired.mode === 'branch' && current.capabilities?.pushDeploy !== true) {
+    throw new CliError('A origem Git nao oferece deploy automatico por branch.');
+  }
+  if ((desired.mode === 'tag' || desired.mode === 'release') && current.capabilities?.versionDeploy !== true) {
+    throw new CliError('A origem Git nao oferece deploy automatico por tag ou release.');
+  }
+
+  const source = projectGitSourceInput(current.source);
+  const build = projectGitBuildSettingsInput(current.build);
+  source.auto_deploy = desired.body.auto_deploy;
+  delete source.version_deploy;
+  if (desired.mode === 'tag' || desired.mode === 'release') {
+    source.version_deploy = desired.body.version_deploy;
+  }
+  const expectedSource = {
+    connection_id: source.connection_id,
+    repository_id: source.repository_id,
+    branch: source.branch,
+  };
+
+  await request(session, flags, 'PUT', endpoint, {
+    orgId,
+    body: { source, build },
+  });
+  const confirmed = unwrapData(await request(session, flags, 'GET', endpoint, { orgId }));
+  if (!projectGitSourceMatches(confirmed, expectedSource, build, desired)) {
+    throw new CliError('A configuracao solicitada nao foi confirmada pela API. Consulte "zenifra project source".');
+  }
+
+  if (flags.json) return printJson({ status: 'success', data: confirmed });
+  process.stdout.write('Configuracao de deploy da origem Git confirmada: ' + desired.mode
+    + ((desired.mode === 'tag' || desired.mode === 'release') ? ' (' + desired.body.version_deploy.tag_pattern + ')' : '') + '.\n');
+}
+
 function unwrapData(payload) {
   return payload?.data ?? payload;
 }
@@ -1945,9 +2492,66 @@ function printEnvs(envs, flags) {
   ]);
 }
 
+function isJobProject(project) {
+  return project?.type_project === 'job' || project?.config?.type_project === 'job';
+}
+
+const JOB_INFO_HIDDEN_KEYS = new Set(['domain', 'url', 'exposure', 'port', 'instances']);
+const JOB_CONFIG_HIDDEN_KEYS = new Set(['exposure', 'port', 'instances', 'network_access', 'domain', 'custom_domains', 'autoscaling', 'healthcheck']);
+const INTERNAL_PROJECT_KEYS = new Set([
+  'current_instances',
+  'runtime_name',
+  'namespace',
+  'k8s_job_name',
+]);
+
+function sanitizePublicProjectValue(value) {
+  if (Array.isArray(value)) return value.map(sanitizePublicProjectValue);
+  if (!value || typeof value !== 'object') return value;
+  return Object.fromEntries(Object.entries(value)
+    .filter(([key]) => !INTERNAL_PROJECT_KEYS.has(key))
+    .map(([key, entryValue]) => [key, sanitizePublicProjectValue(entryValue)]));
+}
+
+function sanitizeJobConfigInfo(value) {
+  if (Array.isArray(value)) return value.map(sanitizeJobConfigInfo);
+  if (!value || typeof value !== 'object') return value;
+  return Object.fromEntries(Object.entries(value)
+    .filter(([key]) => !JOB_CONFIG_HIDDEN_KEYS.has(key))
+    .map(([key, entryValue]) => [key, sanitizeJobConfigInfo(entryValue)]));
+}
+
+function sanitizePublicProject(project) {
+  const sanitized = sanitizePublicProjectValue(project);
+  if (!sanitized || typeof sanitized !== 'object' || Array.isArray(sanitized)) return sanitized;
+  return Object.fromEntries(Object.entries(sanitized)
+    .filter(([key]) => !JOB_INFO_HIDDEN_KEYS.has(key))
+    .map(([key, value]) => [key, key === 'config' ? sanitizeJobConfigInfo(value) : value]));
+}
+
+function sanitizeJobProjectResponse(payload) {
+  if (!payload || typeof payload !== 'object' || Array.isArray(payload)) return payload;
+  if (payload.data && typeof payload.data === 'object' && !Array.isArray(payload.data)) {
+    return { ...payload, data: sanitizePublicProject(payload.data) };
+  }
+  return sanitizePublicProjectValue(payload);
+}
+
+function publicProjectsData(data) {
+  if (Array.isArray(data)) return data.map((project) => isJobProject(project) ? sanitizePublicProject(project) : project);
+  if (!data || typeof data !== 'object') return data;
+  return {
+    ...data,
+    projects: Array.isArray(data.projects)
+      ? data.projects.map((project) => isJobProject(project) ? sanitizePublicProject(project) : project)
+      : data.projects,
+  };
+}
+
 function printProject(project) {
   const managedService = project.managed_service;
   const isValkey = project.type_project === 'valkey' || managedService?.engine === 'valkey';
+  const isJob = isJobProject(project);
   const rows = [
     { label: 'ID', value: projectIdOf(project) || '-' },
     { label: 'Nome', value: project.name || '-' },
@@ -1956,7 +2560,13 @@ function printProject(project) {
     { label: 'Plano', value: project.plan || '-' },
   ];
 
-  if (isValkey) {
+  if (isJob) {
+    const schedule = project.job || project.config?.job || {};
+    rows.push(
+      { label: 'Agendamento', value: schedule.cron || '-' },
+      { label: 'Armazenamento', value: project.storage?.persistent === true || project.config?.storage?.persistent === true ? 'persistente' : 'efemero' },
+    );
+  } else if (isValkey) {
     rows.push(
       { label: 'Perfil', value: managedService?.profile || '-' },
       { label: 'Versao', value: managedService?.version || '-' },
@@ -2423,9 +3033,10 @@ async function handleProjects(session, flags) {
   };
   const query = buildQuery(projectFlags, ['type', 'page', 'limit']);
   const data = unwrapData(await request(session, flags, 'GET', `/project${query}`, { orgId }));
-  const projects = asArray(data);
+  const publicData = publicProjectsData(data);
+  const projects = asArray(publicData);
 
-  if (flags.json) return printJson(data);
+  if (flags.json) return printJson(publicData);
   printTable(projects, [
     { label: 'ID', value: projectIdOf },
     { label: 'Nome', value: (project) => project.name || '-' },
@@ -2514,6 +3125,8 @@ function normalizePlan(value) {
   ]);
 
   if (aliases.has(normalized)) return aliases.get(normalized);
+  const normalizedJobPlan = normalized.startsWith('job_') ? `job-${normalized.slice(4)}` : '';
+  if (WIZARD_JOB_PLAN_OPTIONS.includes(normalizedJobPlan)) return normalizedJobPlan;
   if (ALLOWED_PLAN_VALUES.has(normalized)) return normalized;
   return normalized;
 }
@@ -2533,6 +3146,10 @@ function normalizePaymentMode(value) {
     ['annual', 'yearly'],
     ['anual', 'yearly'],
     ['por ano', 'yearly'],
+    ['per_minute', 'per_minute'],
+    ['per-minute', 'per_minute'],
+    ['por minuto', 'per_minute'],
+    ['minuto', 'per_minute'],
   ]);
   return aliases.get(raw) || raw;
 }
@@ -2669,12 +3286,21 @@ async function fetchWizardCatalogs(session, flags) {
   return { httpPlans, availableInstances, databasePlans };
 }
 
+function requireJobPlans(value) {
+  const plans = Array.isArray(value) ? value : value?.plans;
+  if (!Array.isArray(plans)) {
+    throw new CliError('Falha ao carregar o catalogo de Jobs agendados. Tente novamente mais tarde.');
+  }
+  return plans;
+}
+
 function normalizePlansCatalogType(value) {
   const normalized = normalizeFreeText(value || 'all');
   if (!normalized || normalized === 'all') return 'all';
   if (normalized === 'http') return 'http';
   if (['database', 'db', 'postgresql', 'mariadb'].includes(normalized)) return 'database';
   if (normalized === 'valkey') return 'valkey';
+  if (normalized === 'job' || normalized === 'jobs' || normalized === 'scheduled job' || normalized === 'scheduled jobs') return 'job';
   if (normalized === 'key-value' || normalized === 'key value' || normalized === 'key_value') return 'valkey-key_value';
   if (normalized === 'cache') return 'valkey-cache';
   if (normalized === 'queue') return 'valkey-queue';
@@ -2695,6 +3321,18 @@ function formatBrlFromCents(value) {
   return formatBrl(Number.isFinite(number) ? number / 100 : 0);
 }
 
+function formatJobBrlFromCents(value) {
+  if (value === undefined || value === null || value === '') return '-';
+  const number = Number(value);
+  if (!Number.isFinite(number)) return '-';
+  return new Intl.NumberFormat('pt-BR', {
+    style: 'currency',
+    currency: 'BRL',
+    minimumFractionDigits: 2,
+    maximumFractionDigits: 4,
+  }).format(number / 100);
+}
+
 function humanizeStorageName(value) {
   const raw = String(value || '').trim();
   if (!raw) return { storage: '-', type: '-' };
@@ -2792,6 +3430,17 @@ async function fetchPlansCatalogs(session, flags, type) {
     };
   }
 
+  if (type === 'job') {
+    return {
+      http: [],
+      database: [],
+      storage: [],
+      job: requireJobPlans(
+        unwrapData(await request(session, flags, 'GET', '/project/job/plans', { tokenRequired: false })),
+      ),
+    };
+  }
+
   if (type === 'valkey' || type.startsWith('valkey-')) {
     const catalog = requireValkeyCatalog(
       unwrapData(await request(session, flags, 'GET', '/managed-services/catalog', { tokenRequired: false })),
@@ -2804,10 +3453,11 @@ async function fetchPlansCatalogs(session, flags, type) {
     };
   }
 
-  const [httpPayload, databasePayload, storagePayload, valkeyPayload] = await Promise.all([
+  const [httpPayload, databasePayload, storagePayload, jobPayload, valkeyPayload] = await Promise.all([
     request(session, flags, 'GET', '/project/plans', { tokenRequired: false }),
     request(session, flags, 'GET', '/project/database/plans', { tokenRequired: false }),
     request(session, flags, 'GET', '/project/storage/plans', { tokenRequired: false }),
+    request(session, flags, 'GET', '/project/job/plans', { tokenRequired: false }),
     request(session, flags, 'GET', '/managed-services/catalog', { tokenRequired: false }),
   ]);
 
@@ -2815,6 +3465,7 @@ async function fetchPlansCatalogs(session, flags, type) {
     http: requireWizardCatalogArray(unwrapData(httpPayload), 'os planos HTTP'),
     database: requireWizardCatalogArray(unwrapData(databasePayload), 'os planos de banco'),
     storage: requireWizardCatalogArray(unwrapData(storagePayload), 'os planos de storage'),
+    job: requireJobPlans(unwrapData(jobPayload)),
     valkey: requireValkeyCatalog(unwrapData(valkeyPayload)),
   };
 }
@@ -2853,6 +3504,15 @@ function formatPlanCapabilities(capabilities) {
   return available.join(', ') || '-';
 }
 
+function printJobCatalog(plans) {
+  process.stdout.write('Jobs agendados' + String.fromCharCode(10));
+  printTable(asArray(plans), [
+    { label: 'Plano', value: (plan) => plan.plan || plan.id || '-' },
+    { label: 'Por minuto', value: (plan) => formatJobBrlFromCents(plan.price_per_minute) },
+    { label: 'Features', value: (plan) => asArray(plan.features).join(', ') || '-' },
+  ]);
+}
+
 function printPlansCatalogs(payload, type) {
   if (type === 'all' || type === 'http') {
     process.stdout.write('HTTP\n');
@@ -2890,6 +3550,16 @@ function printPlansCatalogs(payload, type) {
     ]);
   }
 
+  if (type === 'all') {
+    process.stdout.write('\n');
+    printJobCatalog(payload.job);
+  }
+
+  if (type === 'job') {
+    printJobCatalog(payload.job);
+    return;
+  }
+
   if (type === 'all' || type === 'valkey' || type.startsWith('valkey-')) {
     if (type === 'all') process.stdout.write('\n');
     printValkeyCatalog(payload.valkey, valkeyProfileFilter(type));
@@ -2899,7 +3569,7 @@ function printPlansCatalogs(payload, type) {
 async function handlePlans(session, flags) {
   const type = normalizePlansCatalogType(flags.type);
   if (!type) {
-    throw new CliError('Tipo de catalogo invalido. Valores aceitos: all, http, database, storage, valkey.');
+    throw new CliError('Tipo de catalogo invalido. Valores aceitos: all, http, database, storage, valkey, job, key-value, cache ou queue.');
   }
 
   const payload = await fetchPlansCatalogs(session, flags, type);
@@ -2911,6 +3581,75 @@ function formatAllowedValues(values) {
   return [...values].join(', ');
 }
 
+function validateJobConfig(config) {
+  if (!isRecord(config)) throw new CliError('config deve ser um objeto.');
+
+  if (!isRecord(config.job)) throw new CliError('Jobs exigem config.job.');
+  const cron = String(config.job.cron || '').trim();
+  if (cron.split(/\s+/).filter(Boolean).length !== 5) {
+    throw new CliError('config.job.cron deve conter exatamente cinco campos em UTC.');
+  }
+  const forbiddenFields = ['instances', 'port', 'exposure', 'network_access', 'domain', 'custom_domains', 'autoscaling', 'healthcheck'];
+  const forbiddenField = forbiddenFields.find((field) => config[field] !== undefined);
+  if (forbiddenField) {
+    throw new CliError(`Jobs nao aceitam config.${forbiddenField}.`);
+  }
+  const forbiddenJobField = ['command', 'args'].find((field) => config.job[field] !== undefined);
+  if (forbiddenJobField) {
+    throw new CliError(`Jobs nao aceitam config.job.${forbiddenJobField}. A imagem ja define o comando e os argumentos.`);
+  }
+
+  if (!isRecord(config.image) || typeof config.image.url !== 'string' || !config.image.url.trim()) {
+    throw new CliError('Jobs exigem uma imagem OCI em config.image. O fluxo GitHub ainda nao esta disponivel para Jobs.');
+  }
+  const imageReference = config.image.url.trim();
+  if (imageReference.length < OCI_IMAGE_REFERENCE_MIN_LENGTH
+    || imageReference.length > OCI_IMAGE_REFERENCE_MAX_LENGTH
+    || !OCI_IMAGE_REFERENCE_PATTERN.test(imageReference)) {
+    throw new CliError('config.image.url deve ser uma referencia OCI completa com registro e tag ou digest.');
+  }
+  if (config.github !== undefined) {
+    throw new CliError('Jobs aceitam somente config.image. O fluxo GitHub ainda nao esta disponivel para Jobs.');
+  }
+
+  if (!Array.isArray(config.envs)) {
+    throw new CliError('config.envs deve ser um array.');
+  }
+  if (config.envs.length > 100) throw new CliError('config.envs nao pode conter mais de 100 variaveis.');
+  for (const env of config.envs) {
+    if (!isRecord(env) || typeof env.name !== 'string' || typeof env.value !== 'string') {
+      throw new CliError('Cada item de config.envs deve conter name e value como texto.');
+    }
+  }
+
+  if (!isRecord(config.storage)) throw new CliError('Jobs exigem config.storage.');
+  if (typeof config.storage.persistent !== 'boolean') {
+    throw new CliError('config.storage.persistent deve ser booleano.');
+  }
+  const capacity = Number(config.storage.capacity);
+  if (!Number.isInteger(capacity) || capacity < 1 || capacity > 250) {
+    throw new CliError('config.storage.capacity deve ser um inteiro entre 1 e 250 GiB.');
+  }
+  if (config.storage.persistent) {
+    if (typeof config.storage.dir_path_to_persist !== 'string' || !config.storage.dir_path_to_persist.trim()) {
+      throw new CliError('config.storage.dir_path_to_persist e obrigatorio para storage persistente.');
+    }
+  } else if (config.storage.dir_path_to_persist !== undefined) {
+    throw new CliError('config.storage.dir_path_to_persist nao e aceito para storage efemero.');
+  }
+
+  return { ...config, type_project: 'job', job: { ...config.job, cron } };
+}
+
+function validateJobPlanAndPayment(plan, paymentMode) {
+  if (!WIZARD_JOB_PLAN_OPTIONS.includes(plan)) {
+    throw new CliError(`Plano invalido para Jobs: "${plan}". Valores aceitos: ${formatAllowedValues(WIZARD_JOB_PLAN_OPTIONS)}.`);
+  }
+  if (paymentMode !== 'per_minute') {
+    throw new CliError('Jobs agendados aceitam somente o modo de pagamento per_minute.');
+  }
+}
+
 function validateCreateAutoscaling(config, plan, typeProject) {
   if (config?.autoscaling === undefined) return config;
   if (typeProject !== 'http') {
@@ -3054,19 +3793,39 @@ function validateGithubVersionDeployConfig(github) {
 function validateCreateInput({ plan, paymentMode, config, valkeyCatalog }) {
   const nextTypeProject = normalizeTypeProject(config?.type_project);
   const nextPlan = normalizePlan(plan);
+  const nextPaymentMode = normalizePaymentMode(paymentMode);
+
+  if (nextTypeProject === 'job') {
+    validateJobPlanAndPayment(nextPlan, nextPaymentMode);
+    return {
+      plan: nextPlan,
+      paymentMode: nextPaymentMode,
+      config: validateJobConfig({ ...config, type_project: nextTypeProject }),
+    };
+  }
+
   if (!nextPlan || (nextTypeProject !== 'valkey' && !ALLOWED_PLAN_VALUES.has(nextPlan))) {
     throw new CliError(`Plano invalido: "${plan}". Valores aceitos: ${formatAllowedValues(ALLOWED_PLAN_VALUES)}. Docs: ${DOCS_CREATE_HTTP_URL}`);
   }
-
-  const nextPaymentMode = normalizePaymentMode(paymentMode);
-  if (!nextPaymentMode || !ALLOWED_PAYMENT_MODE_VALUES.has(nextPaymentMode)) {
-    throw new CliError(`Modo de pagamento invalido: "${paymentMode}". Valores aceitos: ${formatAllowedValues(ALLOWED_PAYMENT_MODE_VALUES)}. Docs: ${DOCS_PAYMENTS_URL}`);
+  if (!nextPaymentMode || !ALLOWED_PAYMENT_MODE_VALUES.has(nextPaymentMode) || nextPaymentMode === 'per_minute') {
+    throw new CliError(`Modo de pagamento invalido: "${paymentMode}". Valores aceitos: ${formatAllowedValues(new Set(['hourly', 'monthly', 'yearly']))}. Docs: ${DOCS_PAYMENTS_URL}`);
   }
 
   if (!nextTypeProject || !ALLOWED_TYPE_PROJECT_VALUES.has(nextTypeProject)) {
     throw new CliError(`type_project invalido: "${config?.type_project}". Valores aceitos: ${formatAllowedValues(ALLOWED_TYPE_PROJECT_VALUES)}. Docs: ${DOCS_CREATE_HTTP_URL}`);
   }
 
+  const hasGenericGitConfig = config?.source !== undefined || config?.build !== undefined;
+  if (hasGenericGitConfig && (!isRecord(config.source) || !isRecord(config.build))) {
+    throw new CliError('config.source e config.build devem ser informados juntos para projetos com origem Git.');
+  }
+  if (hasGenericGitConfig && nextTypeProject !== 'http') {
+    throw new CliError('config.source e config.build so podem ser usados em projetos HTTP.');
+  }
+  if (hasGenericGitConfig && config.github !== undefined) {
+    throw new CliError('Use config.github ou config.source/config.build, sem misturar os formatos de origem Git.');
+  }
+
   const nextConfig = { ...config, type_project: nextTypeProject };
   if (nextTypeProject === 'valkey') {
     return {
@@ -3118,10 +3877,13 @@ function maskWizardSummary(value, key = '') {
 
 function printWizardSummary(payload) {
   const masked = maskWizardSummary(payload);
+  const projectSummary = masked.config.type_project === 'job'
+    ? `  projeto: ${masked.name} | plano: ${masked.plan}`
+    : `  projeto: ${masked.name} | plano: ${masked.plan} | pagamento: ${masked.payment_mode}`;
   const lines = [
     '',
     tone('Resumo da criacao', 'green'),
-    `  projeto: ${masked.name} | plano: ${masked.plan} | pagamento: ${masked.payment_mode}`,
+    projectSummary,
     `  tipo: ${masked.config.type_project}`,
   ];
 
@@ -3143,6 +3905,12 @@ function printWizardSummary(payload) {
     lines.push(`  banco: versao ${masked.config.version} | instancias ${masked.config.instances} | storage ${masked.config.storage.capacity}Gi`);
   }
 
+  if (masked.config.type_project === 'job') {
+    lines.push(`  Job: cron ${masked.config.job.cron} UTC | storage ${masked.config.storage.capacity}Gi (${masked.config.storage.persistent ? 'persistente' : 'efemero'})`);
+    if (masked.config.image) lines.push(`  imagem: ${masked.config.image.url} | publica: ${masked.config.image.is_public ? 'sim' : 'nao'}`);
+    if (masked.config.github) lines.push(`  github: ${masked.config.github.repository_owner}/${masked.config.github.repository_name}@${masked.config.github.branch}`);
+  }
+
   if (masked.config.type_project === 'valkey') {
     lines.push(`  Valkey: perfil ${masked.config.profile} | versao ${masked.config.version}${masked.config.storage ? ` | storage ${masked.config.storage.capacity}Gi persistente` : ' | sem storage persistente'}`);
   }
@@ -3632,6 +4400,67 @@ async function buildValkeyConfig({ profile, plan, catalog }) {
   };
 }
 
+async function buildJobConfig() {
+  const image = {
+    url: await promptWizardText({
+      label: 'Imagem OCI da tarefa',
+      required: true,
+      examples: ['ghcr.io/example/report:1.0.0', 'registry.example.com/team/job@sha256:digest'],
+      docs: DOCS_CONFIGURATION_URL,
+      validate: (value) => {
+        const reference = value.trim();
+        return reference.length >= OCI_IMAGE_REFERENCE_MIN_LENGTH
+          && reference.length <= OCI_IMAGE_REFERENCE_MAX_LENGTH
+          && OCI_IMAGE_REFERENCE_PATTERN.test(reference)
+          ? null
+          : 'use uma referencia OCI com registro e tag ou digest';
+      },
+    }),
+    is_public: true,
+  };
+  const persistent = await promptWizardBoolean({
+    label: 'Armazenamento persistente',
+    docs: DOCS_CONFIGURATION_URL,
+    examples: ['sim', 'nao'],
+  });
+  const storage = {
+    persistent,
+    capacity: await promptWizardNumber({
+      label: 'Capacidade de armazenamento (Gi)',
+      docs: DOCS_CONFIGURATION_URL,
+      examples: ['1', '5', '10'],
+      min: 1,
+      max: 250,
+    }),
+    ...(persistent ? {
+      dir_path_to_persist: await promptWizardText({
+        label: 'Diretorio persistente',
+        required: true,
+        examples: ['/data'],
+        docs: DOCS_CONFIGURATION_URL,
+      }),
+    } : {}),
+  };
+  const envs = await promptWizardPairs({
+    introLabel: 'Deseja adicionar variaveis de ambiente?',
+    docs: DOCS_CONFIGURATION_URL,
+    examples: ['sim', 'nao'],
+    stateKey: 'jobEnvs',
+    itemLabels: [
+      { key: 'name', label: 'Nome da env', required: true, examples: ['MODE'], docs: DOCS_CONFIGURATION_URL },
+      { key: 'value', label: 'Valor da env', required: true, examples: ['daily'], docs: DOCS_CONFIGURATION_URL },
+    ],
+  });
+  const cron = await promptWizardText({
+    label: 'Cron em UTC (cinco campos)',
+    required: true,
+    examples: ['0 * * * *'],
+    docs: DOCS_CONFIGURATION_URL,
+    validate: (value) => value.split(/\s+/).filter(Boolean).length === 5 ? null : 'use exatamente cinco campos em UTC',
+  });
+  return { type_project: 'job', image, envs, storage, job: { cron } };
+}
+
 async function runProjectCreateWizard(session, flags) {
   const catalogs = await fetchWizardCatalogs(session, flags);
   const ui = createWizardUi();
@@ -3660,11 +4489,15 @@ async function runProjectCreateWizard(session, flags) {
     docs: DOCS_CONFIGURATION_URL,
     examples: WIZARD_TYPE_PROJECT_OPTIONS,
     options: WIZARD_TYPE_PROJECT_OPTIONS.map((value) => ({ value })),
+    extraValues: ['job'],
   });
   ui.state.typeProject = typeProject;
   const valkeyCatalog = typeProject === 'valkey'
     ? requireValkeyCatalog(unwrapData(await request(session, flags, 'GET', '/managed-services/catalog')))
     : undefined;
+  const jobPlans = typeProject === 'job'
+    ? requireJobPlans(unwrapData(await request(session, flags, 'GET', '/project/job/plans')))
+    : undefined;
   const profile = typeProject === 'valkey'
     ? await promptWizardSelect({
       label: 'Perfil Valkey',
@@ -3682,6 +4515,8 @@ async function runProjectCreateWizard(session, flags) {
       ? valkeyCatalog.plans
         .filter((planDefinition) => planDefinition.profile === profile)
         .map((planDefinition) => planDefinition.id)
+      : typeProject === 'job'
+        ? sortWizardOptions(jobPlans.map((plan) => plan?.plan || plan?.id).filter(Boolean), WIZARD_JOB_PLAN_OPTIONS)
     : sortWizardOptions(catalogs.databasePlans
       .map((plan) => plan?.plan)
       .filter((plan) => WIZARD_DATABASE_PLAN_OPTIONS.includes(plan) && (typeProject !== 'mariadb' || plan !== 'db-free')), WIZARD_DATABASE_PLAN_OPTIONS);
@@ -3689,7 +4524,8 @@ async function runProjectCreateWizard(session, flags) {
     label: 'Plano',
     docs: typeProject === 'http'
       ? DOCS_CREATE_HTTP_URL
-      : typeProject === 'valkey' ? DOCS_CREATE_VALKEY_URL : DOCS_DATABASE_CONFIGURATION_URL,
+      : typeProject === 'valkey' ? DOCS_CREATE_VALKEY_URL
+        : typeProject === 'job' ? DOCS_CONFIGURATION_URL : DOCS_DATABASE_CONFIGURATION_URL,
     examples: [planOptions[0], planOptions.at(-1)],
     options: planOptions.map((value) => ({ value })),
   });
@@ -3699,7 +4535,7 @@ async function runProjectCreateWizard(session, flags) {
     ui.state.planAllowsSubdomain = isSubdomainCustomizable(catalogs.httpPlans, plan);
     ui.state.planAllowsAutoscaling = isAutoscalingEnabledForPlan(catalogs.httpPlans, plan);
   }
-  const paymentMode = await promptWizardSelect({
+  const paymentMode = typeProject === 'job' ? 'per_minute' : await promptWizardSelect({
     label: 'Modo de pagamento',
     docs: DOCS_PAYMENTS_URL,
     examples: WIZARD_PAYMENT_MODE_OPTIONS,
@@ -3717,6 +4553,8 @@ async function runProjectCreateWizard(session, flags) {
     config = await buildPostgresqlConfig({ plan, databasePlans: catalogs.databasePlans });
   } else if (typeProject === 'valkey') {
     config = await buildValkeyConfig({ profile, plan, catalog: valkeyCatalog });
+  } else if (typeProject === 'job') {
+    config = await buildJobConfig();
   } else {
     config = await buildMariadbConfig();
   }
@@ -3753,18 +4591,26 @@ async function handleProjectCreate(session, flags) {
   const name = wizardPayload?.name || flags.name || await prompt('Nome do projeto');
   const description = wizardPayload?.description || flags.description;
   const plan = wizardPayload?.plan || flags.plan || await prompt('Plano');
-  const paymentMode = wizardPayload?.payment_mode || flags.paymentMode || await prompt('Modo de pagamento');
   const config = wizardPayload?.config || await parseConfig(flags.config || await prompt('Config JSON ou @arquivo'));
   const idempotencyKey = flags.idempotencyKey === undefined ? undefined : validateIdempotencyKey(flags.idempotencyKey);
   if (Array.isArray(config?.custom_domains)) {
     config.custom_domains = normalizeCustomDomains(config.custom_domains, { primaryDomain: config.domain });
   }
   const typeProject = normalizeTypeProject(config?.type_project);
+  const paymentMode = typeProject === 'job'
+    ? flags.paymentMode || 'per_minute'
+    : wizardPayload?.payment_mode || flags.paymentMode || await prompt('Modo de pagamento');
   const valkeyCatalog = typeProject === 'valkey'
     ? requireValkeyCatalog(unwrapData(await request(session, flags, 'GET', '/managed-services/catalog')))
     : undefined;
   const validated = validateCreateInput({ plan, paymentMode, config, valkeyCatalog });
 
+  if (validated.config.source !== undefined || validated.config.build !== undefined) {
+    if (!await supportsNeutralGitRoutes(session, flags, orgId)) {
+      throw new CliError('Esta API nao oferece suporte a criacao de projetos com origem Git generica. Atualize a API ou use a configuracao GitHub legada compativel.');
+    }
+  }
+
   const payload = await request(session, flags, 'POST', '/project', {
     orgId,
     headers: idempotencyKey === undefined ? {} : { 'Idempotency-Key': idempotencyKey },
@@ -3777,14 +4623,16 @@ async function handleProjectCreate(session, flags) {
     },
   });
 
-  if (flags.json) return printJson(payload);
+  if (flags.json) {
+    return printJson(validated.config.type_project === 'job' ? sanitizeJobProjectResponse(payload) : payload);
+  }
   if (wizardPayload) {
     closePromptResources();
   }
   const project = unwrapData(payload);
   const rows = [
     { field: 'Projeto', value: projectIdOf(project) || 'id indisponivel' },
-    ...(project.domain ? [{ field: 'Dominio', value: formatPublicUrl(project.domain) }] : []),
+    ...(validated.config.type_project === 'job' ? [] : project.domain ? [{ field: 'Dominio', value: formatPublicUrl(project.domain) }] : []),
     ...(project.api_key ? [{ field: 'API key', value: project.api_key }] : []),
   ];
   if (validated.config.type_project === 'valkey') {
@@ -3819,7 +4667,9 @@ async function handleProjectInfo(session, flags) {
   const orgId = await resolveOrgId(session, flags);
   const project = await getProject(session, flags, projectId, orgId);
 
-  if (flags.json) return printJson(projectInfoForOutput(project));
+  if (flags.json) return printJson(projectInfoForOutput(
+    isJobProject(project) ? sanitizePublicProject(project) : project,
+  ));
   printProject({ ...project, id: projectId });
 }
 
@@ -4032,6 +4882,231 @@ async function handleProjectLogs(session, flags) {
   printLogs(logs, flags);
 }
 
+const PUBLIC_JOB_RUN_KEYS = [
+  'status',
+  'scheduled_at',
+  'started_at',
+  'finished_at',
+  'duration_seconds',
+  'billed_minutes',
+  'plan',
+  'currency',
+  'amount',
+];
+
+function sanitizeJobRun(run) {
+  if (!run || typeof run !== 'object' || Array.isArray(run)) return {};
+  const output = {};
+  const id = run.id || run._id || run.run_id;
+  if (id !== undefined) output.id = id;
+  for (const key of PUBLIC_JOB_RUN_KEYS) {
+    if (run[key] !== undefined) output[key] = run[key];
+  }
+  return output;
+}
+
+function jobRunsDataOf(data) {
+  if (Array.isArray(data)) return { runs: data.map(sanitizeJobRun), pagination: null };
+  if (!data || typeof data !== 'object') return { runs: [], pagination: null };
+  return {
+    runs: Array.isArray(data.runs) ? data.runs.map(sanitizeJobRun) : [],
+    pagination: data.pagination ?? null,
+  };
+}
+
+function sanitizeJobRunResponse(data) {
+  if (data && typeof data === 'object' && !Array.isArray(data) && data.run !== undefined) {
+    return { run: sanitizeJobRun(data.run) };
+  }
+  return sanitizeJobRun(data);
+}
+
+function formatJobRunDuration(durationSeconds) {
+  if (durationSeconds === undefined || durationSeconds === null || !Number.isFinite(Number(durationSeconds))) return '-';
+  return `${Number(Number(durationSeconds).toFixed(1))} s`;
+}
+
+function formatJobRunAmount(run) {
+  const amount = run.amount;
+  if (amount === undefined || amount === null) return '-';
+  return formatJobBrlFromCents(amount);
+}
+
+function printJobRuns(data) {
+  const runs = asArray(data?.runs);
+  printTable(runs, [
+    { label: 'ID', value: (run) => run.id || '-' },
+    { label: 'Status', value: (run) => run.status || '-' },
+    { label: 'Agendada', value: (run) => run.scheduled_at || '-' },
+    { label: 'Iniciada', value: (run) => run.started_at || '-' },
+    { label: 'Finalizada', value: (run) => run.finished_at || '-' },
+    { label: 'Duracao', value: (run) => formatJobRunDuration(run.duration_seconds) },
+    { label: 'Minutos cobrados', value: (run) => run.billed_minutes ?? '-' },
+    { label: 'Valor', value: formatJobRunAmount },
+  ]);
+  printPagination(data?.pagination, 'execucao');
+}
+
+function sanitizeJobRunLogEntries(logs) {
+  if (!Array.isArray(logs)) return logs;
+  return logs.map((entry) => {
+    if (typeof entry === 'string') return entry;
+    if (!entry || typeof entry !== 'object') return String(entry ?? '');
+    return Object.fromEntries(['sequence', 'timestamp', 'level', 'message']
+      .filter((key) => entry[key] !== undefined)
+      .map((key) => [key, entry[key]]));
+  });
+}
+
+function sanitizeJobRunLogs(data) {
+  if (typeof data === 'string') return data;
+  if (Array.isArray(data)) return sanitizeJobRunLogEntries(data);
+  if (!data || typeof data !== 'object') return data;
+  const output = {};
+  for (const key of ['logs', 'next_cursor', 'truncated', 'finished', 'status']) {
+    if (data[key] !== undefined) output[key] = key === 'logs' ? sanitizeJobRunLogEntries(data[key]) : data[key];
+  }
+  return output;
+}
+
+function skipTerminalString(text, index) {
+  while (index < text.length) {
+    const code = text.charCodeAt(index);
+    if (code === 0x07 || code === 0x9c) return index + 1;
+    if (code === 0x1b && text.charCodeAt(index + 1) === 0x5c) return index + 2;
+    index += 1;
+  }
+  return index;
+}
+
+function skipTerminalCsi(text, index) {
+  while (index < text.length) {
+    const code = text.charCodeAt(index);
+    index += 1;
+    if (code >= 0x40 && code <= 0x7e) break;
+  }
+  return index;
+}
+
+function skipTerminalEscape(text, index) {
+  const next = text.charCodeAt(index);
+  if (next >= 0x30 && next <= 0x7e) return index + 1;
+  while (index < text.length && text.charCodeAt(index) >= 0x20 && text.charCodeAt(index) <= 0x2f) {
+    index += 1;
+  }
+  if (index < text.length && text.charCodeAt(index) >= 0x30 && text.charCodeAt(index) <= 0x7e) {
+    return index + 1;
+  }
+  return index;
+}
+
+function stripTerminalControls(value) {
+  const text = String(value ?? '');
+  let output = '';
+  let index = 0;
+
+  while (index < text.length) {
+    const code = text.charCodeAt(index);
+    if (code === 0x1b) {
+      const next = text.charCodeAt(index + 1);
+      if (next === 0x5d) {
+        index = skipTerminalString(text, index + 2);
+      } else if (next === 0x50 || next === 0x58 || next === 0x5e || next === 0x5f) {
+        index = skipTerminalString(text, index + 2);
+      } else if (next === 0x5b) {
+        index = skipTerminalCsi(text, index + 2);
+      } else {
+        index = skipTerminalEscape(text, index + 1);
+      }
+      continue;
+    }
+    if (code === 0x9b) {
+      index = skipTerminalCsi(text, index + 1);
+      continue;
+    }
+    if (code === 0x9d || code === 0x90 || code === 0x98 || code === 0x9e || code === 0x9f) {
+      index = skipTerminalString(text, index + 1);
+      continue;
+    }
+    if ((code <= 0x1f && code !== 0x09 && code !== 0x0a) || code === 0x7f || (code >= 0x80 && code <= 0x9f)) {
+      index += 1;
+      continue;
+    }
+    output += text[index];
+    index += 1;
+  }
+
+  return output;
+}
+
+function printHumanJobRunLogs(logs) {
+  if (Array.isArray(logs)) {
+    for (const log of logs) {
+      const line = typeof log === 'string' ? log : buildLogLineOf(log);
+      process.stdout.write(`${stripTerminalControls(line)}\n`);
+    }
+    return;
+  }
+  const value = logs || '';
+  process.stdout.write(`${stripTerminalControls(value)}${String(value).endsWith('\n') ? '' : '\n'}`);
+}
+
+async function handleProjectRuns(session, flags) {
+  const projectId = requireProjectId(flags, 'project runs');
+  if (!projectId) return;
+  validateProjectListFlags(flags, { maxLimit: 50 });
+  const orgId = await resolveOrgId(session, flags);
+  const query = buildQuery(flags, ['page', 'limit']);
+  const data = jobRunsDataOf(unwrapData(await request(session, flags, 'GET', `/project/${projectId}/job-runs${query}`, { orgId })));
+
+  if (flags.json) return printJson(data);
+  printJobRuns(data);
+}
+
+async function handleProjectRunCancel(session, flags) {
+  const projectId = requireProjectId(flags, 'project runs cancel');
+  if (!projectId) return;
+  if (!flags.run && !flags.runId || flags.run === true || flags.runId === true) {
+    printCommandHelpAndFail('project runs cancel');
+    return;
+  }
+  const runId = String(flags.run || flags.runId);
+  const orgId = await resolveOrgId(session, flags);
+  const data = unwrapData(await request(
+    session,
+    flags,
+    'POST',
+    `/project/${projectId}/job-runs/${encodeURIComponent(runId)}/cancel`,
+    { orgId, body: {} },
+  ));
+
+  if (flags.json) return printJson(sanitizeJobRunResponse(data));
+  const run = data?.run || data;
+  process.stdout.write(`Execucao: ${run?.status || 'cancelled'}\n`);
+}
+
+async function handleProjectRunLogs(session, flags) {
+  const projectId = requireProjectId(flags, 'project runs logs');
+  if (!projectId) return;
+  if (!flags.run && !flags.runId || flags.run === true || flags.runId === true) {
+    printCommandHelpAndFail('project runs logs');
+    return;
+  }
+  const runId = String(flags.run || flags.runId);
+  const orgId = await resolveOrgId(session, flags);
+  const data = sanitizeJobRunLogs(unwrapData(await request(
+    session,
+    flags,
+    'GET',
+    `/project/${projectId}/job-runs/${encodeURIComponent(runId)}/logs`,
+    { orgId },
+  )));
+
+  if (flags.json) return printJson(data);
+  const logs = typeof data === 'object' && data !== null && !Array.isArray(data) ? data.logs : data;
+  printHumanJobRunLogs(logs);
+}
+
 async function handleProjectMetricsCapabilities(session, flags) {
   const projectId = requireProjectId(flags, 'project metrics capabilities');
   if (!projectId) return;
@@ -4742,8 +5817,9 @@ async function handleDeployments(session, flags) {
     return
   }
   const orgId = await resolveOrgId(session, flags);
+  const projectApiPath = await resolveGitProjectApiPath(session, flags, projectId, orgId);
   const query = buildQuery(flags, ['page', 'limit', 'branch', 'status']);
-  const data = unwrapData(await request(session, flags, 'GET', `/project/${projectId}/github/builds${query}`, { orgId }));
+  const data = unwrapData(await request(session, flags, 'GET', `${projectApiPath}/builds${query}`, { orgId }));
   const builds = asArray(data);
 
   if (flags.json) return printJson(data);
@@ -4764,11 +5840,12 @@ async function handleDeploy(session, flags) {
     return;
   }
   const orgId = await resolveOrgId(session, flags);
+  const projectApiPath = await resolveGitProjectApiPath(session, flags, projectId, orgId);
   const body = {};
   if (flags.branch) body.branch = String(flags.branch);
   if (flags.commitSha) body.commit_sha = String(flags.commitSha);
 
-  const payload = await request(session, flags, 'POST', `/project/${projectId}/github/deploy`, {
+  const payload = await request(session, flags, 'POST', `${projectApiPath}/deploy`, {
     orgId,
     body,
   });
@@ -4778,9 +5855,9 @@ async function handleDeploy(session, flags) {
   process.stdout.write(`Deploy iniciado${buildId ? `: ${buildId}` : '.'}\n`);
 }
 
-async function getBuildLogs(session, flags, projectId, buildId, orgId, { cursor = 0, limit = 200 } = {}) {
+async function getBuildLogs(session, flags, projectApiPath, buildId, orgId, { cursor = 0, limit = 200 } = {}) {
   const query = buildQuery({ cursor, limit }, ['cursor', 'limit'])
-  return unwrapData(await request(session, flags, 'GET', `/project/${projectId}/github/builds/${buildId}/logs${query}`, { orgId }))
+  return unwrapData(await request(session, flags, 'GET', `${projectApiPath}/builds/${buildId}/logs${query}`, { orgId }))
 }
 
 function parseIntegerOption(value, flagName, { defaultValue, min, max }) {
@@ -4831,7 +5908,7 @@ function printBuildLogEventsJson(logs) {
   }
 }
 
-async function followBuildLogs(session, flags, projectId, buildId, orgId, {
+async function followBuildLogs(session, flags, projectApiPath, buildId, orgId, {
   initialCursor = 0,
   limit = 200,
   intervalSeconds = 5,
@@ -4844,7 +5921,7 @@ async function followBuildLogs(session, flags, projectId, buildId, orgId, {
   const startedAt = Date.now()
 
   while (true) {
-    const result = await getBuildLogs(session, flags, projectId, buildId, orgId, {
+    const result = await getBuildLogs(session, flags, projectApiPath, buildId, orgId, {
       cursor,
       limit: pollLimit,
     })
@@ -4885,20 +5962,27 @@ async function handleBuildLogs(session, flags) {
     return
   }
 
-  const orgId = await resolveOrgId(session, flags);
   const cursor = parseIntegerOption(flags.cursor, '--cursor', { defaultValue: 0, min: 0 })
   const limit = parseIntegerOption(flags.limit, '--limit', { defaultValue: 200, min: 1, max: 500 })
+  const intervalSeconds = flags.follow
+    ? parseSecondsOption(flags.interval, '--interval', { defaultValue: 5, min: 0.1 })
+    : undefined;
+  const timeoutSeconds = flags.follow
+    ? parseSecondsOption(flags.timeout, '--timeout', { defaultValue: 900, min: 1 })
+    : undefined;
+  const orgId = await resolveOrgId(session, flags);
+  const projectApiPath = await resolveGitProjectApiPath(session, flags, projectId, orgId);
 
   if (flags.follow) {
-    return followBuildLogs(session, flags, projectId, buildId, orgId, {
+    return followBuildLogs(session, flags, projectApiPath, buildId, orgId, {
       initialCursor: cursor,
       limit,
-      intervalSeconds: parseSecondsOption(flags.interval, '--interval', { defaultValue: 5, min: 0.1 }),
-      timeoutSeconds: parseSecondsOption(flags.timeout, '--timeout', { defaultValue: 900, min: 1 }),
+      intervalSeconds,
+      timeoutSeconds,
     })
   }
 
-  const result = await getBuildLogs(session, flags, projectId, buildId, orgId, { cursor, limit })
+  const result = await getBuildLogs(session, flags, projectApiPath, buildId, orgId, { cursor, limit })
   if (flags.json) return printJson(result)
   printBuildLogs(result?.logs)
 }
@@ -4911,12 +5995,15 @@ async function handleDeployWatch(session, flags) {
     return;
   }
 
+  const intervalSeconds = parseSecondsOption(flags.interval, '--interval', { defaultValue: 5, min: 0.1 });
+  const timeoutSeconds = parseSecondsOption(flags.timeout, '--timeout', { defaultValue: 900, min: 1 });
   const orgId = await resolveOrgId(session, flags);
-  return followBuildLogs(session, flags, projectId, buildId, orgId, {
+  const projectApiPath = await resolveGitProjectApiPath(session, flags, projectId, orgId);
+  return followBuildLogs(session, flags, projectApiPath, buildId, orgId, {
     initialCursor: 0,
     limit: 200,
-    intervalSeconds: parseSecondsOption(flags.interval, '--interval', { defaultValue: 5, min: 0.1 }),
-    timeoutSeconds: parseSecondsOption(flags.timeout, '--timeout', { defaultValue: 900, min: 1 }),
+    intervalSeconds,
+    timeoutSeconds,
   })
 }
 
@@ -4962,6 +6049,15 @@ async function main() {
     if (command === 'login') return await handleLogin(session, flags);
     if (command === 'logout') return handleLogout(session, flags);
     if (command === 'plans') return handlePlans(session, flags);
+    if (command === 'git' && subcommand === 'providers') return handleGitProviders(session, flags);
+    if (command === 'git' && subcommand === 'runtimes') return handleGitRuntimes(session, flags);
+    if (command === 'git' && subcommand === 'connections') return handleGitConnections(session, flags);
+    if (command === 'git' && subcommand === 'repositories' && positional.length === 2) {
+      process.stdout.write(commandHelp(['git', 'repositories']));
+      return;
+    }
+    if (command === 'git' && subcommand === 'repositories' && positional[2] === 'resolve') return handleGitRepositoryResolve(session, flags);
+    if (command === 'git' && subcommand === 'branches') return handleGitBranches(session, flags);
     if (command === 'create' && subcommand === 'project') return handleProjectCreate(session, flags);
     if (command === 'orgs') return handleOrgs(session, flags);
     if (command === 'whoami') return handleWhoami(session, flags);
@@ -4989,11 +6085,24 @@ async function main() {
       return;
     }
     if (command === 'project' && subcommand === 'github' && positional.length === 2) return handleProjectGithub(session, flags);
+    if (command === 'project' && subcommand === 'source' && positional.length === 2) return handleProjectSource(session, flags);
+    if (command === 'project' && subcommand === 'source' && positional[2] === 'branches') return handleProjectSourceBranches(session, flags);
+    if (command === 'project' && subcommand === 'source' && positional[2] === 'deploy-settings' && positional[3] === 'set') {
+      return handleProjectSourceDeploySettingsSet(session, flags);
+    }
+    if (command === 'project' && subcommand === 'source' && positional[2] === 'deploy-settings') {
+      process.stdout.write(commandHelp(['project', 'source', 'deploy-settings']));
+      return;
+    }
     if (command === 'project' && subcommand === 'info') return handleProjectInfo(session, flags);
     if (command === 'project' && subcommand === 'stop') return handleProjectLifecycleMutation(session, flags, 'stop');
     if (command === 'project' && subcommand === 'resume') return handleProjectLifecycleMutation(session, flags, 'resume');
     if (command === 'project' && subcommand === 'delete') return handleProjectDelete(session, flags);
     if (command === 'project' && subcommand === 'url') return handleProjectUrl(session, flags);
+    if (command === 'project' && subcommand === 'runs' && positional[2] === 'cancel') return handleProjectRunCancel(session, flags);
+    if (command === 'project' && subcommand === 'runs' && positional[2] === 'logs') return handleProjectRunLogs(session, flags);
+    if (command === 'project' && subcommand === 'runs') return handleProjectRuns(session, flags);
+    if (command === 'project' && subcommand === 'run' && positional[2] === 'logs') return handleProjectRunLogs(session, flags);
     if (command === 'project' && subcommand === 'logs') return handleProjectLogs(session, flags);
     if (command === 'project' && subcommand === 'metrics' && positional[2] === 'capabilities') return handleProjectMetricsCapabilities(session, flags);
     if (command === 'project' && subcommand === 'metrics') return handleProjectMetrics(session, flags);