clawfast 1.0.3 → 2.0.0

package/dist/clawfast.cjs

@@ -86,8 +86,8 @@ var require_main = __commonJS({
   "../node_modules/.pnpm/dotenv@17.4.2/node_modules/dotenv/lib/main.js"(exports2, module2) {
     "use strict";
     var fs6 = require("fs");
-    var path8 = require("path");
-    var os5 = require("os");
+    var path10 = require("path");
+    var os7 = require("os");
     var crypto2 = require("crypto");
     var TIPS = [
       "\u25C8 encrypted .env [www.dotenvx.com]",
@@ -225,7 +225,7 @@ var require_main = __commonJS({
           possibleVaultPath = options.path.endsWith(".vault") ? options.path : `${options.path}.vault`;
         }
       } else {
-        possibleVaultPath = path8.resolve(process.cwd(), ".env.vault");
+        possibleVaultPath = path10.resolve(process.cwd(), ".env.vault");
       }
       if (fs6.existsSync(possibleVaultPath)) {
         return possibleVaultPath;
@@ -233,7 +233,7 @@ var require_main = __commonJS({
       return null;
     }
     function _resolveHome(envPath) {
-      return envPath[0] === "~" ? path8.join(os5.homedir(), envPath.slice(1)) : envPath;
+      return envPath[0] === "~" ? path10.join(os7.homedir(), envPath.slice(1)) : envPath;
     }
     function _configVault(options) {
       const debug = parseBoolean(process.env.DOTENV_CONFIG_DEBUG || options && options.debug);
@@ -250,7 +250,7 @@ var require_main = __commonJS({
       return { parsed };
     }
     function configDotenv(options) {
-      const dotenvPath = path8.resolve(process.cwd(), ".env");
+      const dotenvPath = path10.resolve(process.cwd(), ".env");
       let encoding = "utf8";
       let processEnv = process.env;
       if (options && options.processEnv != null) {
@@ -278,13 +278,13 @@ var require_main = __commonJS({
       }
       let lastError;
       const parsedAll = {};
-      for (const path9 of optionPaths) {
+      for (const path11 of optionPaths) {
         try {
-          const parsed = DotenvModule.parse(fs6.readFileSync(path9, { encoding }));
+          const parsed = DotenvModule.parse(fs6.readFileSync(path11, { encoding }));
           DotenvModule.populate(parsedAll, parsed, options);
         } catch (e) {
           if (debug) {
-            _debug(`failed to load ${path9} ${e.message}`);
+            _debug(`failed to load ${path11} ${e.message}`);
           }
           lastError = e;
         }
@@ -297,7 +297,7 @@ var require_main = __commonJS({
         const shortPaths = [];
         for (const filePath of optionPaths) {
           try {
-            const relative2 = path8.relative(process.cwd(), filePath);
+            const relative2 = path10.relative(process.cwd(), filePath);
             shortPaths.push(relative2);
           } catch (e) {
             if (debug) {
@@ -502,7 +502,7 @@ var clawfastVersion, isDevVersion, isNewerVersion;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    clawfastVersion = () => true ? "1.0.3" : "0.0.0-dev";
+    clawfastVersion = () => true ? "2.0.0" : "0.0.0-dev";
     isDevVersion = () => clawfastVersion().includes("-dev");
     isNewerVersion = (a, b) => {
       const parse3 = (v) => v.split("-")[0].split(".").map((n) => Number.parseInt(n, 10) || 0);
@@ -699,14 +699,14 @@ var init_paste_input = __esm({
       /** Replace any paste chips in a submitted line with their real content. */
       expand(line) {
         if (this.pastes.size === 0) return line;
-        let out2 = line;
+        let out3 = line;
         for (const [chip, content] of this.pastes) {
-          if (out2.includes(chip)) {
-            out2 = out2.split(chip).join(content);
+          if (out3.includes(chip)) {
+            out3 = out3.split(chip).join(content);
             this.pastes.delete(chip);
           }
         }
-        return out2;
+        return out3;
       }
       /** How many captured pastes are still waiting to be expanded. */
       pendingCount() {
@@ -878,10 +878,18 @@ var init_news = __esm({
     import_node_path4 = __toESM(require("node:path"));
     init_config();
     NEWS = {
+      "2.0.0": [
+        'Modo ANALISE DE PROJETO (somente leitura): peca "analise/varredura/auditoria do meu projeto" e o clawfast troca sozinho para um auditor dedicado \u2014 sem /comando. Diga "modo normal" para sair.',
+        "Ele mapeia o projeto inteiro: grafo de imports nos dois sentidos (o que cada arquivo importa E quem o importa), achando imports quebrados, ciclos e arquivos orfaos.",
+        "Motor hibrido (estado da arte): orquestra ferramentas deterministicas (ast-grep, semgrep, osv-scanner v2, gitleaks, madge, ctags, rg) para o trabalho pesado e usa o modelo so para o taint cross-module e a validacao. Roda `--preflight` e instala o que falta; cai em fallback (Python + rg) quando uma ferramenta nao existe.",
+        "Caca agressiva de vulnerabilidades e segredos: SQLi, injecao de comando/codigo, XSS, TLS desligado, cripto fraca, CORS aberto, chaves/tokens embutidos (mascarados no relatorio). Regra de ouro: descarta achado sem caminho source->sink confirmado no codigo real.",
+        "Garantia de seguranca: nesse modo ele NUNCA edita/cria/apaga nada no seu projeto \u2014 a unica escrita e UM relatorio ANALISE_PROJETO_<data>.md na raiz do projeto.",
+        "Motor Python somente-leitura semeado a cada sessao (audit/project_audit.py); modo --focus mostra a vizinhanca de import de um arquivo especifico."
+      ],
       "1.0.3": [
         "Atualizacao: `clawfast update` atualiza o CLI e mostra as boas-vindas; aparece um aviso quando ha versao nova; /nov lista as novidades.",
         "Skills: /skillcreator cria ou cola uma skill (de qualquer tamanho), /skills lista e /skill delete remove. As skills viram conhecimento disponivel para TODOS os modelos.",
-        "Modelos na NVIDIA build: minimax-m3, kimi-k2.6, glm-5.1 e qwen3.5-397b \u2014 todos com function calling de verdade (as ferramentas disparam).",
+        "Modelos na NVIDIA build: mistral-medium-3.5, kimi-k2.6, glm-5.1 e qwen3.5-397b \u2014 todos com function calling de verdade (as ferramentas disparam).",
         "Resiliencia a rate limit (429): cai para os outros modelos como contingencia e espera/retenta a cadeia automaticamente."
       ]
     };
@@ -1505,10 +1513,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path8) {
-  if (!path8)
+function getElementAtPath(obj, path10) {
+  if (!path10)
     return obj;
-  return path8.reduce((acc, key) => acc?.[key], obj);
+  return path10.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -1836,11 +1844,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path8, issues) {
+function prefixIssues(path10, issues) {
   return issues.map((iss) => {
     var _a25;
     (_a25 = iss).path ?? (_a25.path = []);
-    iss.path.unshift(path8);
+    iss.path.unshift(path10);
     return iss;
   });
 }
@@ -2058,16 +2066,16 @@ function flattenError(error51, mapper = (issue2) => issue2.message) {
 }
 function formatError(error51, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error52, path8 = []) => {
+  const processError = (error52, path10 = []) => {
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path8, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path10, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path8, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path10, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path8, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path10, ...issue2.path]);
       } else {
-        const fullpath = [...path8, ...issue2.path];
+        const fullpath = [...path10, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -2094,17 +2102,17 @@ function formatError(error51, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error51, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error52, path8 = []) => {
+  const processError = (error52, path10 = []) => {
     var _a25, _b18;
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path8, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path10, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path8, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path10, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path8, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path10, ...issue2.path]);
       } else {
-        const fullpath = [...path8, ...issue2.path];
+        const fullpath = [...path10, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -2136,8 +2144,8 @@ function treeifyError(error51, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path8 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path8) {
+  const path10 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path10) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -12449,11 +12457,11 @@ function _catch(Class2, innerType, catchValue) {
   });
 }
 // @__NO_SIDE_EFFECTS__
-function _pipe(Class2, in_, out2) {
+function _pipe(Class2, in_, out3) {
   return new Class2({
     type: "pipe",
     in: in_,
-    out: out2
+    out: out3
   });
 }
 // @__NO_SIDE_EFFECTS__
@@ -14689,19 +14697,19 @@ function _catch2(innerType, catchValue) {
 function nan(params) {
   return _nan(ZodNaN, params);
 }
-function pipe(in_, out2) {
+function pipe(in_, out3) {
   return new ZodPipe({
     type: "pipe",
     in: in_,
-    out: out2
+    out: out3
     // ...util.normalizeParams(params),
   });
 }
-function codec(in_, out2, params) {
+function codec(in_, out3, params) {
   return new ZodCodec({
     type: "pipe",
     in: in_,
-    out: out2,
+    out: out3,
     transform: params.decode,
     reverseTransform: params.encode
   });
@@ -15640,13 +15648,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path8 = ref.slice(1).split("/").filter(Boolean);
-  if (path8.length === 0) {
+  const path10 = ref.slice(1).split("/").filter(Boolean);
+  if (path10.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path8[0] === defsKey) {
-    const key = path8[1];
+  if (path10[0] === defsKey) {
+    const key = path10[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -16835,8 +16843,8 @@ var init_parseUtil = __esm({
     init_errors3();
     init_en2();
     makeIssue = (params) => {
-      const { data, path: path8, errorMaps, issueData } = params;
-      const fullPath = [...path8, ...issueData.path || []];
+      const { data, path: path10, errorMaps, issueData } = params;
+      const fullPath = [...path10, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -17119,11 +17127,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util2();
     ParseInputLazyPath = class {
-      constructor(parent, value, path8, key) {
+      constructor(parent, value, path10, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path8;
+        this._path = path10;
         this._key = key;
       }
       get path() {
@@ -23163,7 +23171,7 @@ var require_auth_config = __commonJS({
     });
     module2.exports = __toCommonJS(auth_config_exports);
     var fs6 = __toESM2(require("fs"));
-    var path8 = __toESM2(require("path"));
+    var path10 = __toESM2(require("path"));
     var import_token_util = require_token_util();
     function getAuthConfigPath() {
       const dataDir = (0, import_token_util.getVercelDataDir)();
@@ -23172,7 +23180,7 @@ var require_auth_config = __commonJS({
           `Unable to find Vercel CLI data directory. Your platform: ${process.platform}. Supported: darwin, linux, win32.`
         );
       }
-      return path8.join(dataDir, "auth.json");
+      return path10.join(dataDir, "auth.json");
     }
     function readAuthConfig() {
       try {
@@ -23191,7 +23199,7 @@ var require_auth_config = __commonJS({
     }
     function writeAuthConfig(config3) {
       const authPath = getAuthConfigPath();
-      const authDir = path8.dirname(authPath);
+      const authDir = path10.dirname(authPath);
       if (!fs6.existsSync(authDir)) {
         fs6.mkdirSync(authDir, { mode: 504, recursive: true });
       }
@@ -23386,7 +23394,7 @@ var require_token_util = __commonJS({
       saveToken: () => saveToken
     });
     module2.exports = __toCommonJS(token_util_exports);
-    var path8 = __toESM2(require("path"));
+    var path10 = __toESM2(require("path"));
     var fs6 = __toESM2(require("fs"));
     var import_token_error = require_token_error();
     var import_token_io = require_token_io();
@@ -23399,7 +23407,7 @@ var require_token_util = __commonJS({
       if (!dataDir) {
         return null;
       }
-      return path8.join(dataDir, vercelFolder);
+      return path10.join(dataDir, vercelFolder);
     }
     async function getVercelToken2(options) {
       const authConfig = (0, import_auth_config.readAuthConfig)();
@@ -23475,7 +23483,7 @@ var require_token_util = __commonJS({
           "Unable to find project root directory. Have you linked your project with `vc link?`"
         );
       }
-      const prjPath = path8.join(dir, ".vercel", "project.json");
+      const prjPath = path10.join(dir, ".vercel", "project.json");
       if (!fs6.existsSync(prjPath)) {
         throw new import_token_error.VercelOidcTokenError(
           "project.json not found, have you linked your project with `vc link?`"
@@ -23496,9 +23504,9 @@ var require_token_util = __commonJS({
           "Unable to find user data directory. Please reach out to Vercel support."
         );
       }
-      const tokenPath = path8.join(dir, "com.vercel.token", `${projectId}.json`);
+      const tokenPath = path10.join(dir, "com.vercel.token", `${projectId}.json`);
       const tokenJson = JSON.stringify(token);
-      fs6.mkdirSync(path8.dirname(tokenPath), { mode: 504, recursive: true });
+      fs6.mkdirSync(path10.dirname(tokenPath), { mode: 504, recursive: true });
       fs6.writeFileSync(tokenPath, tokenJson);
       fs6.chmodSync(tokenPath, 432);
       return;
@@ -23510,7 +23518,7 @@ var require_token_util = __commonJS({
           "Unable to find user data directory. Please reach out to Vercel support."
         );
       }
-      const tokenPath = path8.join(dir, "com.vercel.token", `${projectId}.json`);
+      const tokenPath = path10.join(dir, "com.vercel.token", `${projectId}.json`);
       if (!fs6.existsSync(tokenPath)) {
         return null;
       }
@@ -35540,7 +35548,7 @@ function createOpenRouter(options = {}) {
   );
   const createChatModel = (modelId, settings = {}) => new OpenRouterChatLanguageModel(modelId, settings, {
     provider: "openrouter.chat",
-    url: ({ path: path8 }) => `${baseURL}${path8}`,
+    url: ({ path: path10 }) => `${baseURL}${path10}`,
     headers: getHeaders,
     compatibility,
     fetch: options.fetch,
@@ -35548,7 +35556,7 @@ function createOpenRouter(options = {}) {
   });
   const createCompletionModel = (modelId, settings = {}) => new OpenRouterCompletionLanguageModel(modelId, settings, {
     provider: "openrouter.completion",
-    url: ({ path: path8 }) => `${baseURL}${path8}`,
+    url: ({ path: path10 }) => `${baseURL}${path10}`,
     headers: getHeaders,
     compatibility,
     fetch: options.fetch,
@@ -35556,21 +35564,21 @@ function createOpenRouter(options = {}) {
   });
   const createEmbeddingModel = (modelId, settings = {}) => new OpenRouterEmbeddingModel(modelId, settings, {
     provider: "openrouter.embedding",
-    url: ({ path: path8 }) => `${baseURL}${path8}`,
+    url: ({ path: path10 }) => `${baseURL}${path10}`,
     headers: getHeaders,
     fetch: options.fetch,
     extraBody: options.extraBody
   });
   const createImageModel = (modelId, settings = {}) => new OpenRouterImageModel(modelId, settings, {
     provider: "openrouter.image",
-    url: ({ path: path8 }) => `${baseURL}${path8}`,
+    url: ({ path: path10 }) => `${baseURL}${path10}`,
     headers: getHeaders,
     fetch: options.fetch,
     extraBody: options.extraBody
   });
   const createVideoModel = (modelId, settings = {}) => new OpenRouterVideoModel(modelId, settings, {
     provider: "openrouter.video",
-    url: ({ path: path8 }) => `${baseURL}${path8}`,
+    url: ({ path: path10 }) => `${baseURL}${path10}`,
     headers: getHeaders,
     fetch: options.fetch,
     extraBody: options.extraBody
@@ -40106,37 +40114,37 @@ function createOpenAI(options = {}) {
   );
   const createChatModel = (modelId) => new OpenAIChatLanguageModel(modelId, {
     provider: `${providerName}.chat`,
-    url: ({ path: path8 }) => `${baseURL}${path8}`,
+    url: ({ path: path10 }) => `${baseURL}${path10}`,
     headers: getHeaders,
     fetch: options.fetch
   });
   const createCompletionModel = (modelId) => new OpenAICompletionLanguageModel(modelId, {
     provider: `${providerName}.completion`,
-    url: ({ path: path8 }) => `${baseURL}${path8}`,
+    url: ({ path: path10 }) => `${baseURL}${path10}`,
     headers: getHeaders,
     fetch: options.fetch
   });
   const createEmbeddingModel = (modelId) => new OpenAIEmbeddingModel(modelId, {
     provider: `${providerName}.embedding`,
-    url: ({ path: path8 }) => `${baseURL}${path8}`,
+    url: ({ path: path10 }) => `${baseURL}${path10}`,
     headers: getHeaders,
     fetch: options.fetch
   });
   const createImageModel = (modelId) => new OpenAIImageModel(modelId, {
     provider: `${providerName}.image`,
-    url: ({ path: path8 }) => `${baseURL}${path8}`,
+    url: ({ path: path10 }) => `${baseURL}${path10}`,
     headers: getHeaders,
     fetch: options.fetch
   });
   const createTranscriptionModel = (modelId) => new OpenAITranscriptionModel(modelId, {
     provider: `${providerName}.transcription`,
-    url: ({ path: path8 }) => `${baseURL}${path8}`,
+    url: ({ path: path10 }) => `${baseURL}${path10}`,
     headers: getHeaders,
     fetch: options.fetch
   });
   const createSpeechModel = (modelId) => new OpenAISpeechModel(modelId, {
     provider: `${providerName}.speech`,
-    url: ({ path: path8 }) => `${baseURL}${path8}`,
+    url: ({ path: path10 }) => `${baseURL}${path10}`,
     headers: getHeaders,
     fetch: options.fetch
   });
@@ -40151,7 +40159,7 @@ function createOpenAI(options = {}) {
   const createResponsesModel = (modelId) => {
     return new OpenAIResponsesLanguageModel(modelId, {
       provider: `${providerName}.responses`,
-      url: ({ path: path8 }) => `${baseURL}${path8}`,
+      url: ({ path: path10 }) => `${baseURL}${path10}`,
       headers: getHeaders,
       fetch: options.fetch,
       fileIdPrefixes: ["file-"]
@@ -45372,7 +45380,7 @@ function supportsMultimodalToolResults(modelName) {
   const normalized = modelName.toLowerCase();
   return normalized === "ask-model" || normalized.includes("gemini") || normalized.includes("google/") || isAnthropicModel(normalized) || normalized.includes("anthropic/") || normalized.includes("claude") || normalized.includes("openai") || normalized.includes("openai/") || normalized.includes("gpt-") || normalized.includes("o1") || normalized.includes("o3") || normalized.includes("o4") || normalized.includes("x-ai/") || normalized.includes("grok");
 }
-var isRecord, isXaiModelSlug, isGeminiModelSlug, requestCanRouteToXai, requestCanRouteToGemini, hasOwnEncryptedContent, stripEncryptedContent, sanitizeOpenRouterRequestForXai, hasJsonRefKey, wrapToolContentIfGeminiRefSensitive, sanitizeOpenRouterRequestForGeminiFunctionResponses, patchKimiReasoningToolCalls, OPENROUTER_METADATA_HEADER, withOpenRouterMetadataHeader, openrouterPatchFetch, openrouter2, openai2, nvidia, deepseek, kimi, buildProviderMap, hasEnvValue, isDeepSeekEnabled, isKimiEnabled, CLI_MODEL_CHAIN, baseProviders, modelCutoffDates, modelDisplayNames, getModelDisplayName, getModelCutoffDate, myProvider;
+var isRecord, isXaiModelSlug, isGeminiModelSlug, requestCanRouteToXai, requestCanRouteToGemini, hasOwnEncryptedContent, stripEncryptedContent, sanitizeOpenRouterRequestForXai, hasJsonRefKey, wrapToolContentIfGeminiRefSensitive, sanitizeOpenRouterRequestForGeminiFunctionResponses, patchKimiReasoningToolCalls, OPENROUTER_METADATA_HEADER, withOpenRouterMetadataHeader, openrouterPatchFetch, openrouter2, openai2, isNvidiaMistralModel, applyNvidiaMistralConfig, nvidiaPatchFetch, nvidia, deepseek, kimi, buildProviderMap, hasEnvValue, isDeepSeekEnabled, isKimiEnabled, CLI_MODEL_CHAIN, baseProviders, modelCutoffDates, modelDisplayNames, getModelDisplayName, getModelCutoffDate, myProvider;
 var init_providers = __esm({
   "../lib/ai/providers.ts"() {
     "use strict";
@@ -45532,10 +45540,43 @@ var init_providers = __esm({
       name: "openai",
       apiKey: process.env.OPENAI_API_KEY
     });
+    isNvidiaMistralModel = (value) => typeof value === "string" && value.toLowerCase().startsWith("mistralai/mistral");
+    applyNvidiaMistralConfig = (body) => {
+      if (!isRecord(body) || !isNvidiaMistralModel(body.model)) {
+        return { body, changed: false };
+      }
+      return {
+        body: {
+          ...body,
+          reasoning_effort: "none",
+          temperature: 1,
+          top_p: 1,
+          max_tokens: 16384
+        },
+        changed: true
+      };
+    };
+    nvidiaPatchFetch = async (url2, init) => {
+      if (init?.body && typeof init.body === "string") {
+        try {
+          const parsed = JSON.parse(init.body);
+          const patched = applyNvidiaMistralConfig(parsed);
+          if (patched.changed) {
+            return globalThis.fetch(url2, {
+              ...init,
+              body: JSON.stringify(patched.body)
+            });
+          }
+        } catch {
+        }
+      }
+      return globalThis.fetch(url2, init);
+    };
     nvidia = createOpenAI({
       name: "nvidia",
       baseURL: process.env.NVIDIA_BASE_URL || "https://integrate.api.nvidia.com/v1",
-      apiKey: process.env.NVIDIA_API_KEY
+      apiKey: process.env.NVIDIA_API_KEY,
+      fetch: nvidiaPatchFetch
     });
     deepseek = createOpenAI({
       name: "deepseek",
@@ -45563,7 +45604,9 @@ var init_providers = __esm({
       "model-opus-4.6": nvidia("nvidia/nemotron-3-ultra-550b-a55b"),
       "model-kimi-k2.6": or("qwen/qwen3-coder:free"),
       // NVIDIA build models — primary provider for the local CLI (chat-completions).
-      "model-nvidia-minimax-m3": nvidia.chat("minimaxai/minimax-m3"),
+      "model-nvidia-mistral-medium-3.5": nvidia.chat(
+        "mistralai/mistral-medium-3.5-128b"
+      ),
       "model-nvidia-kimi-k2.6": nvidia.chat("moonshotai/kimi-k2.6"),
       "model-nvidia-glm-5.1": nvidia.chat("z-ai/glm-5.1"),
       "model-nvidia-qwen3.5-397b": nvidia.chat("qwen/qwen3.5-397b-a17b"),
@@ -45600,8 +45643,8 @@ var init_providers = __esm({
     };
     CLI_MODEL_CHAIN = [
       ...hasEnvValue("NVIDIA_API_KEY") ? [
-        "model-nvidia-minimax-m3",
-        // NVIDIA minimaxai/minimax-m3
+        "model-nvidia-mistral-medium-3.5",
+        // NVIDIA mistralai/mistral-medium-3.5-128b
         "model-nvidia-kimi-k2.6",
         // NVIDIA moonshotai/kimi-k2.6
         "model-nvidia-glm-5.1",
@@ -45628,7 +45671,7 @@ var init_providers = __esm({
       "model-deepseek-v4-flash": "May 2025",
       "model-opus-4.6": "May 2025",
       "model-kimi-k2.6": "April 2024",
-      "model-nvidia-minimax-m3": "Unknown",
+      "model-nvidia-mistral-medium-3.5": "Unknown",
       "model-nvidia-kimi-k2.6": "April 2024",
       "model-nvidia-glm-5.1": "Unknown",
       "model-nvidia-qwen3.5-397b": "Unknown",
@@ -45652,7 +45695,7 @@ var init_providers = __esm({
       "model-deepseek-v4-flash": "DeepSeek V4 Flash",
       "model-opus-4.6": "Anthropic Claude Opus 4.6",
       "model-kimi-k2.6": "Moonshot Kimi K2.6",
-      "model-nvidia-minimax-m3": "NVIDIA - MiniMax M3",
+      "model-nvidia-mistral-medium-3.5": "NVIDIA - Mistral Medium 3.5",
       "model-nvidia-kimi-k2.6": "NVIDIA - Moonshot Kimi K2.6",
       "model-nvidia-glm-5.1": "NVIDIA - Z.ai GLM 5.1",
       "model-nvidia-qwen3.5-397b": "NVIDIA - Qwen3.5 397B A17B",
@@ -48687,8 +48730,8 @@ var init_background_process_tracker = __esm({
       /**
        * Normalize file path for comparison
        */
-      normalizePath(path8) {
-        let normalized = path8.trim().replace(/\/+/g, "/");
+      normalizePath(path10) {
+        let normalized = path10.trim().replace(/\/+/g, "/");
         if (normalized.startsWith("./")) {
           normalized = normalized.slice(2);
         }
@@ -48926,8 +48969,8 @@ function createGetModuleFromFilename(basePath = process.argv[1] ? (0, import_pat
     return decodedFile;
   };
 }
-function normalizeWindowsPath(path8) {
-  return path8.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
+function normalizeWindowsPath(path10) {
+  return path10.replace(/^[A-Z]:/, "").replace(/\\/g, "/");
 }
 var import_path;
 var init_module_node = __esm({
@@ -51816,9 +51859,9 @@ async function addSourceContext(frames) {
   LRU_FILE_CONTENTS_CACHE.reduce();
   return frames;
 }
-function getContextLinesFromFile(path8, ranges, output) {
+function getContextLinesFromFile(path10, ranges, output) {
   return new Promise((resolve2) => {
-    const stream = (0, import_node_fs5.createReadStream)(path8);
+    const stream = (0, import_node_fs5.createReadStream)(path10);
     const lineReaded = (0, import_node_readline2.createInterface)({
       input: stream
     });
@@ -51833,7 +51876,7 @@ function getContextLinesFromFile(path8, ranges, output) {
     let rangeStart = range[0];
     let rangeEnd = range[1];
     function onStreamError() {
-      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path8, 1);
+      LRU_FILE_CONTENTS_FS_READ_FAILED.set(path10, 1);
       lineReaded.close();
       lineReaded.removeAllListeners();
       destroyStreamAndResolve();
@@ -51894,8 +51937,8 @@ function clearLineContext(frame2) {
   delete frame2.context_line;
   delete frame2.post_context;
 }
-function shouldSkipContextLinesForFile(path8) {
-  return path8.startsWith("node:") || path8.endsWith(".min.js") || path8.endsWith(".min.cjs") || path8.endsWith(".min.mjs") || path8.startsWith("data:");
+function shouldSkipContextLinesForFile(path10) {
+  return path10.startsWith("node:") || path10.endsWith(".min.js") || path10.endsWith(".min.cjs") || path10.endsWith(".min.mjs") || path10.startsWith("data:");
 }
 function shouldSkipContextLinesForFrame(frame2) {
   if (void 0 !== frame2.lineno && frame2.lineno > MAX_CONTEXTLINES_LINENO) return true;
@@ -51914,22 +51957,22 @@ function makeLineReaderRanges(lines) {
   const line = lines[0];
   if ("number" != typeof line) return [];
   let current = makeContextRange(line);
-  const out2 = [];
+  const out3 = [];
   while (true) {
     if (i === lines.length - 1) {
-      out2.push(current);
+      out3.push(current);
       break;
     }
     const next = lines[i + 1];
     if ("number" != typeof next) break;
     if (next <= current[1]) current[1] = next + DEFAULT_LINES_OF_CONTEXT;
     else {
-      out2.push(current);
+      out3.push(current);
       current = makeContextRange(next);
     }
     i++;
   }
-  return out2;
+  return out3;
 }
 function makeContextRange(line) {
   return [
@@ -55447,8 +55490,8 @@ async function createE2BPtyHandle(sandbox, opts) {
     sendInput(bytes) {
       return pty.sendInput(pid, bytes);
     },
-    async resize(cols, rows) {
-      await pty.resize(pid, { cols, rows });
+    async resize(cols2, rows) {
+      await pty.resize(pid, { cols: cols2, rows });
     },
     async kill() {
       const killed = await pty.kill(pid);
@@ -55589,9 +55632,9 @@ var init_pty_session_manager = __esm({
       consumeDelta(session) {
         const total = this.totalBufferBytes(session);
         const start = Math.min(session.readCursor, total);
-        const out2 = this.sliceBuffer(session, start, total);
+        const out3 = this.sliceBuffer(session, start, total);
         session.readCursor = total;
-        return out2;
+        return out3;
       }
       /**
        * Returns the full accumulated buffer without advancing `readCursor`.
@@ -55649,7 +55692,7 @@ var init_pty_session_manager = __esm({
       }
       sliceBuffer(session, start, end) {
         if (end <= start) return new Uint8Array(0);
-        const out2 = new Uint8Array(end - start);
+        const out3 = new Uint8Array(end - start);
         let outOffset = 0;
         let cursor = 0;
         for (const chunk of session.buffer) {
@@ -55662,11 +55705,11 @@ var init_pty_session_manager = __esm({
           if (chunkStart >= end) break;
           const sliceStart = Math.max(0, start - chunkStart);
           const sliceEnd = Math.min(chunk.byteLength, end - chunkStart);
-          out2.set(chunk.subarray(sliceStart, sliceEnd), outOffset);
+          out3.set(chunk.subarray(sliceStart, sliceEnd), outOffset);
           outOffset += sliceEnd - sliceStart;
           cursor = chunkEnd;
         }
-        return out2;
+        return out3;
       }
       async killAndRemove(session, _reason) {
         if (session.closing) {
@@ -55924,7 +55967,7 @@ var require_xterm_headless = __commonJS({
         };
         Object.defineProperty(t2, "__esModule", { value: true }), t2.InputHandler = t2.WindowsOptionsReportType = void 0, t2.isValidColorIndex = k;
         const n2 = s2(3534), o = s2(6760), a = s2(6717), h = s2(7150), c = s2(726), l = s2(6107), u = s2(8938), d = s2(3055), f = s2(5451), _ = s2(6501), p = s2(6415), g = s2(1346), v = s2(9823), m = s2(8693), b = s2(802), S = { "(": 0, ")": 1, "*": 2, "+": 3, "-": 1, ".": 2 }, y = 131072;
-        function C4(e3, t3) {
+        function C5(e3, t3) {
           if (e3 > 24) return t3.setWinLines || false;
           switch (e3) {
             case 1:
@@ -56059,7 +56102,7 @@ var require_xterm_headless = __commonJS({
             this._parser.precedingJoinState = g2, this._activeBuffer.x < a2 && s3 - t3 > 0 && 0 === _2.getWidth(this._activeBuffer.x) && !_2.hasContent(this._activeBuffer.x) && _2.setCellFromCodepoint(this._activeBuffer.x, 0, 1, f2), this._dirtyRowTracker.markDirty(this._activeBuffer.y);
           }
           registerCsiHandler(e3, t3) {
-            return "t" !== e3.final || e3.prefix || e3.intermediates ? this._parser.registerCsiHandler(e3, t3) : this._parser.registerCsiHandler(e3, ((e4) => !C4(e4.params[0], this._optionsService.rawOptions.windowOptions) || t3(e4)));
+            return "t" !== e3.final || e3.prefix || e3.intermediates ? this._parser.registerCsiHandler(e3, t3) : this._parser.registerCsiHandler(e3, ((e4) => !C5(e4.params[0], this._optionsService.rawOptions.windowOptions) || t3(e4)));
           }
           registerDcsHandler(e3, t3) {
             return this._parser.registerDcsHandler(e3, new v.DcsHandler(t3));
@@ -56573,7 +56616,7 @@ var require_xterm_headless = __commonJS({
             return (e3.length < 2 || (s3 = e3.params[1]) > this._bufferService.rows || 0 === s3) && (s3 = this._bufferService.rows), s3 > t3 && (this._activeBuffer.scrollTop = t3 - 1, this._activeBuffer.scrollBottom = s3 - 1, this._setCursor(0, 0)), true;
           }
           windowOptions(e3) {
-            if (!C4(e3.params[0], this._optionsService.rawOptions.windowOptions)) return true;
+            if (!C5(e3.params[0], this._optionsService.rawOptions.windowOptions)) return true;
             const t3 = e3.length > 1 ? e3.params[1] : 0;
             switch (e3.params[0]) {
               case 14:
@@ -61700,12 +61743,12 @@ function applyDelta(source, delta) {
         zDelta.pos += cnt;
         break;
       case ";": {
-        const out2 = zOut.toByteArray(source);
-        if (cnt !== checksum(out2))
+        const out3 = zOut.toByteArray(source);
+        if (cnt !== checksum(out3))
           throw new Error("bad checksum");
         if (total !== limit)
           throw new Error("generated size does not match predicted size");
-        return out2;
+        return out3;
       }
       default:
         throw new Error("unknown delta operator");
@@ -66279,11 +66322,11 @@ async function createCentrifugoPtyHandle(sandbox, opts) {
       };
       await publish(payload);
     },
-    async resize(cols, rows) {
+    async resize(cols2, rows) {
       const payload = {
         type: "pty_resize",
         sessionId,
-        cols,
+        cols: cols2,
         rows,
         targetConnectionId: connectionId
       };
@@ -66518,7 +66561,7 @@ In using these tools, adhere to the following guidelines:
           timeout,
           interactive
         }, { toolCallId, abortSignal }) => {
-          const cols = DEFAULT_PTY_COLS;
+          const cols2 = DEFAULT_PTY_COLS;
           const rows = DEFAULT_PTY_ROWS;
           let activePtySessionId;
           let emitQueue = Promise.resolve();
@@ -66613,20 +66656,20 @@ In using these tools, adhere to the following guidelines:
                 }
               }
               const session = await ptySessionManager2.create(chatId, {
-                cols,
+                cols: cols2,
                 rows,
                 createHandle: async () => {
                   if (isCentrifugo) {
                     const { createCentrifugoPtyHandle: createCentrifugoPtyHandle2 } = await Promise.resolve().then(() => (init_centrifugo_pty_adapter(), centrifugo_pty_adapter_exports));
                     return createCentrifugoPtyHandle2(sandbox, {
                       command,
-                      cols,
+                      cols: cols2,
                       rows,
                       envs: caidoEnvVars
                     });
                   }
                   return createE2BPtyHandle(sandbox, {
-                    cols,
+                    cols: cols2,
                     rows,
                     envs: caidoEnvVars
                   });
@@ -67305,8 +67348,8 @@ var init_logger2 = __esm({
 });
 
 // ../lib/ai/tools/file.ts
-function isSpritPath(path8) {
-  return path8.split(/[\\/]/).some((segment) => segment.toLowerCase() === "sprit");
+function isSpritPath(path10) {
+  return path10.split(/[\\/]/).some((segment) => segment.toLowerCase() === "sprit");
 }
 function getViewSandboxType(sandbox) {
   return isCentrifugoSandbox(sandbox) ? "centrifugo" : "e2b";
@@ -67337,7 +67380,7 @@ function captureFileViewImageUsage(args) {
   const {
     context: context2,
     sandbox,
-    path: path8,
+    path: path10,
     outcome,
     durationMs,
     mediaType,
@@ -67355,7 +67398,7 @@ function captureFileViewImageUsage(args) {
     model: getActiveModelName(context2),
     configured_model: context2.modelName,
     sandbox_type: getViewSandboxType(sandbox),
-    file_extension: getFileExtension(path8),
+    file_extension: getFileExtension(path10),
     outcome,
     success: outcome === "success",
     duration_ms: durationMs,
@@ -67429,22 +67472,22 @@ async function runSandboxCommand(sandbox, command, envVars, timeoutMs = 6e4) {
 function isWindowsSandbox(sandbox) {
   return isCentrifugoSandbox(sandbox) && sandbox.isWindows();
 }
-function getWindowsNativePath(path8) {
-  if (/^[A-Za-z]:[\\/]/.test(path8)) return path8;
-  if (path8.startsWith("/tmp/")) {
-    return `C:\\temp${path8.slice(4).replace(/\//g, "\\")}`;
+function getWindowsNativePath(path10) {
+  if (/^[A-Za-z]:[\\/]/.test(path10)) return path10;
+  if (path10.startsWith("/tmp/")) {
+    return `C:\\temp${path10.slice(4).replace(/\//g, "\\")}`;
   }
-  return path8.replace(/\//g, "\\");
+  return path10.replace(/\//g, "\\");
 }
-function getPythonPathForSandbox(sandbox, path8) {
-  return isWindowsSandbox(sandbox) ? getWindowsNativePath(path8) : path8;
+function getPythonPathForSandbox(sandbox, path10) {
+  return isWindowsSandbox(sandbox) ? getWindowsNativePath(path10) : path10;
 }
-function toWindowsBashPath(path8) {
-  const drive = path8.match(/^([A-Za-z]):[\\/](.*)$/);
+function toWindowsBashPath(path10) {
+  const drive = path10.match(/^([A-Za-z]):[\\/](.*)$/);
   if (drive) {
     return `/${drive[1].toLowerCase()}/${drive[2].replace(/\\/g, "/")}`;
   }
-  return path8.replace(/\\/g, "/");
+  return path10.replace(/\\/g, "/");
 }
 async function detectSandboxShell(sandbox) {
   if (!isWindowsSandbox(sandbox)) return "bash";
@@ -67483,8 +67526,8 @@ PY`;
     }
   }
 }
-async function getSandboxFileState(sandbox, path8) {
-  const pythonPath = getPythonPathForSandbox(sandbox, path8);
+async function getSandboxFileState(sandbox, path10) {
+  const pythonPath = getPythonPathForSandbox(sandbox, path10);
   const result = await runPythonScript(
     sandbox,
     FILE_STATE_SCRIPT,
@@ -67501,23 +67544,23 @@ async function getSandboxFileState(sandbox, path8) {
   if (result.exitCode !== 0) {
     return {
       kind: "unknown",
-      path: path8,
+      path: path10,
       error: result.stderr || result.stdout || "file state command failed"
     };
   }
   try {
     const payload = JSON.parse(result.stdout.trim());
     if (payload.kind === "file" && typeof payload.sizeBytes === "number" && Number.isFinite(payload.sizeBytes)) {
-      return { ...payload, path: path8 };
+      return { ...payload, path: path10 };
     }
     if (payload.kind === "missing" || payload.kind === "not_file") {
-      return { ...payload, path: path8 };
+      return { ...payload, path: path10 };
     }
   } catch {
   }
   return {
     kind: "unknown",
-    path: path8,
+    path: path10,
     error: result.stderr || result.stdout || "invalid file state response"
   };
 }
@@ -67549,8 +67592,8 @@ ${numberedContent}${truncatedNotice}${footerNotice}`;
     })
   };
 }
-async function readSandboxTextFile(sandbox, path8, range) {
-  const pythonPath = getPythonPathForSandbox(sandbox, path8);
+async function readSandboxTextFile(sandbox, path10, range) {
+  const pythonPath = getPythonPathForSandbox(sandbox, path10);
   const envVars = {
     HACKERAI_FILE_READ_PATH: pythonPath,
     HACKERAI_FILE_READ_RANGE_START: String(range?.[0] ?? 0),
@@ -67578,40 +67621,40 @@ async function readSandboxTextFile(sandbox, path8, range) {
   }
   return payload;
 }
-async function readSandboxTextFileWithFallback(sandbox, path8, range) {
+async function readSandboxTextFileWithFallback(sandbox, path10, range) {
   try {
-    return await readSandboxTextFile(sandbox, path8, range);
+    return await readSandboxTextFile(sandbox, path10, range);
   } catch (error51) {
     const errorMessage = error51 instanceof Error ? error51.message : String(error51);
     if (errorMessage.startsWith("Invalid ") || errorMessage.includes("File not found")) {
       throw error51;
     }
-    const state = await getSandboxFileState(sandbox, path8);
+    const state = await getSandboxFileState(sandbox, path10);
     if (state.kind === "unknown") {
       throw new Error(
-        `Unable to determine file size for ${path8}; refusing to load the file into memory. ${state.error}`
+        `Unable to determine file size for ${path10}; refusing to load the file into memory. ${state.error}`
       );
     }
     if (state.kind === "missing") {
-      throw new Error(`File not found or is not a regular file: ${path8}`);
+      throw new Error(`File not found or is not a regular file: ${path10}`);
     }
     if (state.kind === "not_file") {
-      throw new Error(`File is not a regular file: ${path8}`);
+      throw new Error(`File is not a regular file: ${path10}`);
     }
     if (state.sizeBytes > MAX_TEXT_FILE_READ_BYTES) {
       if (range) {
         throw new Error(
-          `Unable to perform a bounded range read for ${path8}, and the file is too large to load safely (${formatBytes(state.sizeBytes)}). Use a targeted terminal command that writes a small result to a separate file.`
+          `Unable to perform a bounded range read for ${path10}, and the file is too large to load safely (${formatBytes(state.sizeBytes)}). Use a targeted terminal command that writes a small result to a separate file.`
         );
       }
       return {
-        path: path8,
+        path: path10,
         sizeBytes: state.sizeBytes,
         totalLines: 0,
         tooLarge: true
       };
     }
-    const fileContent = await sandbox.files.read(path8, {
+    const fileContent = await sandbox.files.read(path10, {
       user: "user"
     });
     const lines = fileContent.split("\n");
@@ -67640,7 +67683,7 @@ async function readSandboxTextFileWithFallback(sandbox, path8, range) {
       const startIndex = start - 1;
       const endIndex = end === -1 ? lines.length : end;
       return {
-        path: path8,
+        path: path10,
         sizeBytes: Buffer.byteLength(fileContent),
         totalLines: lines.length,
         content: lines.slice(startIndex, endIndex).join("\n"),
@@ -67648,7 +67691,7 @@ async function readSandboxTextFileWithFallback(sandbox, path8, range) {
       };
     }
     return {
-      path: path8,
+      path: path10,
       sizeBytes: Buffer.byteLength(fileContent),
       totalLines: lines.length,
       content: fileContent,
@@ -67656,7 +67699,7 @@ async function readSandboxTextFileWithFallback(sandbox, path8, range) {
     };
   }
 }
-async function appendSandboxTextFile(sandbox, path8, text2) {
+async function appendSandboxTextFile(sandbox, path10, text2) {
   const tempPath = `/tmp/hackerai_append_${Date.now()}_${Math.random().toString(36).slice(2)}.tmp`;
   await sandbox.files.write(tempPath, text2, {
     user: "user"
@@ -67665,7 +67708,7 @@ async function appendSandboxTextFile(sandbox, path8, text2) {
     sandbox,
     APPEND_TEXT_FILE_SCRIPT,
     {
-      HACKERAI_FILE_APPEND_TARGET_PATH: getPythonPathForSandbox(sandbox, path8),
+      HACKERAI_FILE_APPEND_TARGET_PATH: getPythonPathForSandbox(sandbox, path10),
       HACKERAI_FILE_APPEND_SOURCE_PATH: getPythonPathForSandbox(
         sandbox,
         tempPath
@@ -67677,13 +67720,13 @@ async function appendSandboxTextFile(sandbox, path8, text2) {
     throw new Error(result.stderr || result.stdout || "Failed to append file");
   }
 }
-async function readSandboxFileForView(sandbox, path8, includeData) {
+async function readSandboxFileForView(sandbox, path10, includeData) {
   if (isCentrifugoSandbox(sandbox) && sandbox.isWindows()) {
     throw new Error(
       "The view action is not available for Windows local sandboxes yet. Use a Linux/E2B sandbox or inspect the image manually."
     );
   }
-  const sandboxPath = getSandboxViewPath(sandbox, path8);
+  const sandboxPath = getSandboxViewPath(sandbox, path10);
   const viewEnvVars = {
     HACKERAI_FILE_VIEW_PATH: sandboxPath,
     HACKERAI_FILE_VIEW_INCLUDE_DATA: includeData ? "1" : "0",
@@ -68026,19 +68069,19 @@ try:
 except OSError:
     pass
 `;
-    getFilename = (path8) => path8.split("/").pop() || path8;
-    getFileExtension = (path8) => {
-      const filename = getFilename(path8);
+    getFilename = (path10) => path10.split("/").pop() || path10;
+    getFileExtension = (path10) => {
+      const filename = getFilename(path10);
       const dotIndex = filename.lastIndexOf(".");
       if (dotIndex <= 0 || dotIndex === filename.length - 1) return void 0;
       return filename.slice(dotIndex + 1).toLowerCase();
     };
-    getSandboxViewPath = (sandbox, path8) => {
+    getSandboxViewPath = (sandbox, path10) => {
       const maybeSandbox = sandbox;
-      if (isCentrifugoSandbox(maybeSandbox) && maybeSandbox.isWindows() && path8.startsWith("/tmp/")) {
-        return `C:\\temp${path8.slice(4).replace(/\//g, "\\")}`;
+      if (isCentrifugoSandbox(maybeSandbox) && maybeSandbox.isWindows() && path10.startsWith("/tmp/")) {
+        return `C:\\temp${path10.slice(4).replace(/\//g, "\\")}`;
       }
-      return path8;
+      return path10;
     };
     stripTrailingWs = (line) => line.replace(/[ \t]+$/u, "");
     editSchema = external_exports.object({
@@ -68112,7 +68155,7 @@ ${instructionsDescription}`,
             "A list of edits to be sequentially applied to the file. Required for `edit` action."
           )
         }),
-        execute: async ({ action, path: path8, text: text2, range, edits }) => {
+        execute: async ({ action, path: path10, text: text2, range, edits }) => {
           try {
             const { sandbox } = await sandboxManager.getSandbox();
             switch (action) {
@@ -68122,7 +68165,7 @@ ${instructionsDescription}`,
                   captureFileViewImageUsage({
                     context: context2,
                     sandbox,
-                    path: path8,
+                    path: path10,
                     outcome: "unsupported_model",
                     durationMs: Date.now() - viewStartedAt,
                     failureReason: "unsupported_model"
@@ -68131,26 +68174,26 @@ ${instructionsDescription}`,
                 }
                 let viewPayload;
                 try {
-                  viewPayload = await readSandboxFileForView(sandbox, path8, false);
+                  viewPayload = await readSandboxFileForView(sandbox, path10, false);
                 } catch (error51) {
                   captureFileViewImageUsage({
                     context: context2,
                     sandbox,
-                    path: path8,
+                    path: path10,
                     outcome: "inspection_failed",
                     durationMs: Date.now() - viewStartedAt,
                     failureReason: classifyFileViewError(error51)
                   });
                   throw error51;
                 }
-                const filename = getFilename(path8);
+                const filename = getFilename(path10);
                 let previewFiles = [];
                 let previewUploadError;
                 try {
                   previewFiles = await uploadViewPreviewFiles({
                     context: context2,
                     sandbox,
-                    sourcePath: path8,
+                    sourcePath: path10,
                     payload: viewPayload
                   });
                 } catch (error51) {
@@ -68164,7 +68207,7 @@ ${instructionsDescription}`,
                       user_id: context2.userID,
                       sandbox_type: getViewSandboxType(sandbox),
                       file_name: filename,
-                      source_path: path8,
+                      source_path: path10,
                       kind: viewPayload.kind,
                       media_type: viewPayload.mediaType,
                       size_bytes: viewPayload.sizeBytes,
@@ -68175,7 +68218,7 @@ ${instructionsDescription}`,
                 captureFileViewImageUsage({
                   context: context2,
                   sandbox,
-                  path: path8,
+                  path: path10,
                   outcome: "success",
                   durationMs: Date.now() - viewStartedAt,
                   mediaType: viewPayload.mediaType,
@@ -68185,7 +68228,7 @@ ${instructionsDescription}`,
                 return {
                   action: "view",
                   content: `Viewing image file: ${filename} (${viewPayload.mediaType}, ${viewPayload.sizeBytes} bytes).`,
-                  path: path8,
+                  path: path10,
                   filename,
                   mediaType: viewPayload.mediaType,
                   sizeBytes: viewPayload.sizeBytes,
@@ -68195,8 +68238,8 @@ ${instructionsDescription}`,
                 };
               }
               case "read": {
-                const filename = path8.split("/").pop() || path8;
-                const spritChunked = isSpritPath(path8);
+                const filename = path10.split("/").pop() || path10;
+                const spritChunked = isSpritPath(path10);
                 let effectiveRange = range;
                 if (spritChunked) {
                   const start = range && range[0] > 0 ? range[0] : 1;
@@ -68209,7 +68252,7 @@ ${instructionsDescription}`,
                 }
                 const readPayload = await readSandboxTextFileWithFallback(
                   sandbox,
-                  path8,
+                  path10,
                   effectiveRange
                 );
                 if (readPayload.tooLarge) {
@@ -68246,46 +68289,46 @@ File is too large to read in full (${formatBytes(readPayload.sizeBytes)}, ${tota
                 if (text2 === void 0) {
                   return { error: "text is required for write action" };
                 }
-                await sandbox.files.write(path8, text2, {
+                await sandbox.files.write(path10, text2, {
                   user: "user"
                 });
-                return `File written: ${path8}`;
+                return `File written: ${path10}`;
               }
               case "append": {
                 if (text2 === void 0) {
                   return { error: "text is required for append action" };
                 }
-                const existingState = await getSandboxFileState(sandbox, path8);
+                const existingState = await getSandboxFileState(sandbox, path10);
                 if (existingState.kind === "unknown") {
                   return {
-                    error: `Cannot append safely because the existing file size could not be determined for ${path8}. ${existingState.error}`
+                    error: `Cannot append safely because the existing file size could not be determined for ${path10}. ${existingState.error}`
                   };
                 }
                 if (existingState.kind === "not_file") {
                   return {
-                    error: `Cannot append to ${path8} because it is not a file.`
+                    error: `Cannot append to ${path10} because it is not a file.`
                   };
                 }
                 if (existingState.kind === "file" && existingState.sizeBytes > MAX_TEXT_FILE_READ_BYTES) {
-                  await appendSandboxTextFile(sandbox, path8, text2);
+                  await appendSandboxTextFile(sandbox, path10, text2);
                   return {
-                    content: `File appended: ${path8}
+                    content: `File appended: ${path10}
 Existing file is ${formatBytes(existingState.sizeBytes)}, so the full diff preview was skipped to avoid loading the entire file into memory.`
                   };
                 }
                 let existingContent = "";
                 try {
-                  existingContent = await sandbox.files.read(path8, {
+                  existingContent = await sandbox.files.read(path10, {
                     user: "user"
                   });
                 } catch {
                 }
                 const newContent = existingContent + text2;
-                await sandbox.files.write(path8, newContent, {
+                await sandbox.files.write(path10, newContent, {
                   user: "user"
                 });
                 return {
-                  content: `File appended: ${path8}`,
+                  content: `File appended: ${path10}`,
                   originalContent: truncateOutput({
                     content: existingContent,
                     mode: "read-file"
@@ -68300,31 +68343,31 @@ Existing file is ${formatBytes(existingState.sizeBytes)}, so the full diff previ
                 if (!edits || edits.length === 0) {
                   return { error: "edits array is required for edit action" };
                 }
-                const existingState = await getSandboxFileState(sandbox, path8);
+                const existingState = await getSandboxFileState(sandbox, path10);
                 if (existingState.kind === "unknown") {
                   return {
-                    error: `Cannot edit ${path8} safely because the file size could not be determined. ${existingState.error}`
+                    error: `Cannot edit ${path10} safely because the file size could not be determined. ${existingState.error}`
                   };
                 }
                 if (existingState.kind === "missing") {
                   return {
-                    error: `Cannot edit file ${path8} - file is empty or does not exist`
+                    error: `Cannot edit file ${path10} - file is empty or does not exist`
                   };
                 }
                 if (existingState.kind === "not_file") {
-                  return { error: `Cannot edit ${path8} because it is not a file.` };
+                  return { error: `Cannot edit ${path10} because it is not a file.` };
                 }
                 if (existingState.sizeBytes > MAX_TEXT_FILE_READ_BYTES) {
                   return {
-                    error: `File ${path8} is too large for the edit action (${formatBytes(existingState.sizeBytes)}). Use a targeted shell command, restore the file from a clean source, or replace it with the write action instead of loading the whole file into memory.`
+                    error: `File ${path10} is too large for the edit action (${formatBytes(existingState.sizeBytes)}). Use a targeted shell command, restore the file from a clean source, or replace it with the write action instead of loading the whole file into memory.`
                   };
                 }
-                const originalContent = await sandbox.files.read(path8, {
+                const originalContent = await sandbox.files.read(path10, {
                   user: "user"
                 });
                 if (!originalContent) {
                   return {
-                    error: `Cannot edit file ${path8} - file is empty or does not exist`
+                    error: `Cannot edit file ${path10} - file is empty or does not exist`
                   };
                 }
                 const resolvedEdits = [];
@@ -68369,7 +68412,7 @@ ${hint}` : "")
                     }
                   }
                 }
-                await sandbox.files.write(path8, content, {
+                await sandbox.files.write(path10, content, {
                   user: "user"
                 });
                 const lines = content.split("\n");
@@ -68609,11 +68652,11 @@ function findGitBash() {
     if ((0, import_fs.existsSync)(c)) return c;
   }
   try {
-    const out2 = (0, import_child_process.execSync)("where git", {
+    const out3 = (0, import_child_process.execSync)("where git", {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"]
     });
-    const gitExe = out2.split(/\r?\n/).find((l) => l.trim().endsWith("git.exe"));
+    const gitExe = out3.split(/\r?\n/).find((l) => l.trim().endsWith("git.exe"));
     if (gitExe) {
       const bash = (0, import_path3.join)((0, import_path3.dirname)((0, import_path3.dirname)(gitExe.trim())), "bin", "bash.exe");
       if ((0, import_fs.existsSync)(bash)) return bash;
@@ -68794,6 +68837,7 @@ var init_local_sandbox = __esm({
       async init() {
         await import_node_fs6.promises.mkdir(this.workdir, { recursive: true });
         await this.seedReconToolkit();
+        await this.seedAuditToolkit();
       }
       /**
        * Seed the deep-recon toolkit (recon_deep.py + console_recon.js + README)
@@ -68834,6 +68878,29 @@ var init_local_sandbox = __esm({
         } catch {
         }
       }
+      /**
+       * Seed the read-only project-audit toolkit (project_audit.py + README) into
+       * <workdir>/audit so the agent can deeply analyze the user's own project on
+       * demand. Tooling files are refreshed each session so fixes propagate.
+       * Best-effort: a failure here must never block the session.
+       */
+      async seedAuditToolkit() {
+        try {
+          const assetsDir = (0, import_node_url.fileURLToPath)(
+            new URL("../assets/audit", import_meta.url)
+          );
+          const destDir = import_node_path5.default.join(this.workdir, "audit");
+          await import_node_fs6.promises.mkdir(destDir, { recursive: true });
+          for (const name25 of ["project_audit.py", "README.md"]) {
+            try {
+              const content = await import_node_fs6.promises.readFile(import_node_path5.default.join(assetsDir, name25));
+              await import_node_fs6.promises.writeFile(import_node_path5.default.join(destDir, name25), content);
+            } catch {
+            }
+          }
+        } catch {
+        }
+      }
       getConnectionId() {
         return "local";
       }
@@ -68879,6 +68946,21 @@ EDITING SCRIPTS:
       getOsContext() {
         return this.getSandboxContext();
       }
+      /**
+       * One concise paragraph about the shell the agent's commands run in, plus the
+       * critical "each command is a fresh shell" rule. Used by the standalone audit
+       * prompt, which doesn't carry the full sandbox context.
+       */
+      getShellHint() {
+        const persist = "IMPORTANTE: cada comando roda num shell NOVO \u2014 vari\xE1veis, `export`/`set` e mudan\xE7as de PATH N\xC3O persistem para o pr\xF3ximo comando. Chame cada ferramenta pelo caminho completo, por um lan\xE7ador que resolve o PATH (`npx <pkg>`), ou via `python -m <modulo>`.";
+        if (this.isBashLikeShell()) {
+          return `Shell: ${this.shellBin} (POSIX, tipo Git Bash). Use sintaxe bash: \`export VAR=...\`, \`command -v ferramenta\`, \`which\`. N\xC3O use \`set VAR=\` nem \`where\` do cmd. ${persist}`;
+        }
+        if (this.isCmdShell()) {
+          return `Shell: cmd.exe. Use \`where ferramenta\` e \`set VAR=...\`; evite sintaxe bash (\`export\`, \`$(...)\`, heredoc). ${persist}`;
+        }
+        return `Shell: ${this.shellBin}. Verifique a sintaxe antes de assumir bash ou cmd. ${persist}`;
+      }
       getWorkdir() {
         return this.workdir;
       }
@@ -69155,7 +69237,7 @@ function formatToolCall(toolName, input) {
       return `${C2.cyan}executando${C2.reset} ${C2.bold}$ ${truncate3(cmd, 400)}${C2.reset}${bg}`;
     }
     case "file": {
-      const path8 = String(i.path ?? "");
+      const path10 = String(i.path ?? "");
       const brief = i.brief ? `${C2.dim} - ${truncate3(String(i.brief))}${C2.reset}` : "";
       const map2 = {
         write: `${C2.green}criando arquivo${C2.reset}`,
@@ -69166,7 +69248,7 @@ function formatToolCall(toolName, input) {
       };
       const action = typeof i.action === "string" ? i.action : "";
       const label = map2[action] ?? (action ? `${C2.blue}arquivo (${action})${C2.reset}` : `${C2.blue}preparando operacao de arquivo${C2.reset}`);
-      const target = path8 ? ` ${C2.bold}${path8}${C2.reset}` : "";
+      const target = path10 ? ` ${C2.bold}${path10}${C2.reset}` : "";
       return `${label}${target}${brief}`;
     }
     case "todo_write":
@@ -69401,15 +69483,210 @@ var init_proxy_manager2 = __esm({
   }
 });
 
+// src/audit-mode.ts
+function projectRootFromWorkdir(workdir) {
+  return import_node_path7.default.dirname(import_node_path7.default.resolve(workdir.replace(/\\/g, "/")));
+}
+function detectProjectAuditIntent(input) {
+  const text2 = input.trim();
+  if (!text2) return false;
+  if (AUDIT_ACTION_THEN_SCOPE.test(text2)) return true;
+  if (AUDIT_SCOPE_THEN_ACTION.test(text2)) return true;
+  return AUDIT_STRONG.some((re2) => re2.test(text2));
+}
+function detectAuditExitIntent(input) {
+  const text2 = input.trim();
+  if (!text2) return false;
+  return AUDIT_EXIT.some((re2) => re2.test(text2));
+}
+function buildAuditSystemPrompt(opts) {
+  const root = opts.projectRoot.replace(/\\/g, "/");
+  const workdir = opts.workdir.replace(/\\/g, "/");
+  const isWin = (opts.platform ?? process.platform) === "win32";
+  const py = isWin ? "python" : "python3";
+  const shellNote = isWin ? "Voc\xEA est\xE1 em Windows. Use `python` (n\xE3o `python3`), aspas em caminhos com espa\xE7os, e `/` ou `\\` indiferente nos caminhos." : "Use `python3` quando `python` n\xE3o existir.";
+  const shellHint = opts.shellHint ?? shellNote;
+  const toolkit = `"${workdir}/audit/project_audit.py"`;
+  return `Voc\xEA \xE9 o **HackerAI Auditor** \u2014 um ORQUESTRADOR de auditoria de SEGURAN\xC7A DE APLICA\xC7\xD5ES e ARQUITETURA DE C\xD3DIGO, operando em modo SOMENTE LEITURA dentro do terminal do VS Code, no projeto REAL do usu\xE1rio.
+
+FILOSOFIA (estado da arte \u2014 h\xEDbrido, n\xE3o LLM puro):
+Voc\xEA N\xC3O \xE9 um LLM que l\xEA o projeto inteiro linha a linha. Voc\xEA \xE9 um orquestrador que roda FERRAMENTAS DETERMIN\xCDSTICAS para o trabalho pesado (mapeamento, SAST, depend\xEAncias, segredos) e usa o RACIOC\xCDNIO DO MODELO s\xF3 para o que ferramenta gr\xE1tis nenhuma faz bem: **taint cross-module** (seguir o dado que cruza fronteira de fun\xE7\xE3o/arquivo) e **valida\xE7\xE3o** de cada achado lendo o c\xF3digo real. LLM puro infla recall mas explode falso-positivo; ferramenta pura perde sem\xE2ntica inter-procedural; o h\xEDbrido ganha. O Semgrep gr\xE1tis s\xF3 faz taint INTRA-procedural (dentro de uma fun\xE7\xE3o) \u2014 a propaga\xE7\xE3o que atravessa imports \xE9 exatamente o buraco que o seu racioc\xEDnio preenche.
+
+Miss\xE3o desta sess\xE3o: an\xE1lise extremamente precisa e profunda do projeto inteiro e entrega de **um relat\xF3rio** acion\xE1vel e honesto. Ferramentas do agente: \`run_terminal_cmd\`, \`file\`, \`todo_write\`.
+
+PROJETO SOB AN\xC1LISE (raiz): ${root}
+WORKSPACE DE TRABALHO (ferramentas/sa\xEDdas intermedi\xE1rias): ${workdir}
+SA\xCDDAS INTERMEDI\xC1RIAS: grave JSON/tempor\xE1rios em \`${workdir}/audit-out/\` (crie a pasta). N\xC3O use /tmp (pode n\xE3o existir no Windows).
+
+================================================================
+REGRA ANTI-ALUCINA\xC7\xC3O \u2014 A MAIS IMPORTANTE
+================================================================
+Um relat\xF3rio de seguran\xE7a inventado \xE9 PIOR que nenhum \u2014 \xE9 perigoso. Portanto:
+1. Voc\xEA s\xF3 pode relatar um achado que veio de DADOS REAIS que voc\xEA LEU nesta sess\xE3o: a sa\xEDda de uma ferramenta que apareceu no terminal, o DIGEST consolidado (FASE 6), ou um trecho de c\xF3digo que voc\xEA abriu com a ferramenta \`file\`.
+2. \xC9 TERMINANTEMENTE PROIBIDO "simular", "assumir", dar um "exemplo", ou descrever o que o relat\xF3rio "seria". Se voc\xEA redirecionou a sa\xEDda de uma ferramenta para um arquivo, ela N\xC3O est\xE1 no seu contexto \u2014 voc\xEA TEM que l\xEA-la de volta (via \`--consolidate\` ou \`file\` read) antes de cit\xE1-la.
+3. TODO caminho de arquivo no relat\xF3rio tem que ser um arquivo que voc\xEA CONFIRMOU existir neste projeto (apareceu no grafo/digest ou voc\xEA o leu). Nunca cite caminhos gen\xE9ricos de mem\xF3ria (ex.: \`src/services/userService.ts\`, \`lodash@x\`) sem t\xEA-los visto na sa\xEDda real.
+4. Se voc\xEA ainda n\xE3o tem dados reais (digest vazio, ferramentas n\xE3o rodaram), N\xC3O escreva relat\xF3rio: diga exatamente o que falta e rode o passo que falta. Parar \xE9 melhor que inventar.
+
+================================================================
+AMBIENTE & SHELL \u2014 leia antes de rodar comandos
+================================================================
+- ${shellHint}
+- ${shellNote}
+- Como o ambiente N\xC3O persiste entre comandos, N\xC3O tente "consertar o PATH" com \`export PATH=...\` / \`set PATH=...\` (\xE9 in\xFAtil para o pr\xF3ximo comando). Em vez disso, invoque a ferramenta de um jeito que n\xE3o dependa do PATH:
+  \u2022 ferramenta instalada via pip mas fora do PATH \u2192 rode como m\xF3dulo: \`${py} -m semgrep ...\` (o aviso de "deprecated" \xE9 inofensivo, funciona).
+  \u2022 pacote npm \u2192 \`npx <pkg> ...\` resolve sozinho (ex.: \`npx madge ...\`, \`npx @ast-grep/cli ...\`).
+- Verifique presen\xE7a com o comando do SEU shell (\`command -v X\` no bash; \`where X\` no cmd) \u2014 n\xE3o misture os dois.
+
+================================================================
+REGRA INVIOL\xC1VEL \u2014 SOMENTE LEITURA NO PROJETO
+================================================================
+1. Voc\xEA **NUNCA** modifica, edita, cria, renomeia, move ou apaga QUALQUER arquivo dentro do projeto (${root}) \u2014 nem para "corrigir", nem para testar.
+2. Voc\xEA **N\xC3O** roda comandos que alterem o projeto: nada de \`git\` que escreva (commit/checkout/reset/clean), build, formatadores, geradores, migrations, ou qualquer script do projeto, e nada de \`npm/pnpm/yarn install\` DENTRO do projeto (isso escreve node_modules/lockfile na pasta dele). Apenas LEIA o projeto.
+   EXCE\xC7\xC3O permitida: instalar as FERRAMENTAS DE AUDITORIA de forma GLOBAL/externa \u2014 \`npm install -g @ast-grep/cli madge\`, \`python -m pip install semgrep\`, \`scoop/winget/brew/go install ...\` \u2014 porque isso n\xE3o escreve nada dentro de ${root}. Rode esses instaladores a partir da workspace, nunca \`cd\` para dentro do projeto para instalar.
+3. A **\xDANICA** escrita permitida no projeto \xE9 **um** arquivo de relat\xF3rio na RAIZ do projeto:
+   \`${root}/ANALISE_PROJETO_<timestamp>.md\`
+   Esse \xE9 o \xFAnico \`file\` action: write fora da workspace. Todo o resto (scripts auxiliares, dados intermedi\xE1rios, relat\xF3rios t\xE9cnicos) fica em ${workdir}.
+4. Se o usu\xE1rio pedir para voc\xEA corrigir/alterar algo, **n\xE3o altere** \u2014 explique no relat\xF3rio como corrigir e diga que para aplicar mudan\xE7as ele deve sair do modo de an\xE1lise (ex.: "pode corrigir" / "modo normal").
+5. Se precisar criar um script auxiliar (Python), crie-o em ${workdir} com a ferramenta \`file\`, nunca via redirecionamento de shell, e nunca dentro do projeto.
+
+================================================================
+TOOLCHAIN \u2014 cada ferramenta vira uma "tool" no seu loop
+================================================================
+Preferidas (determin\xEDsticas, trabalho pesado): \`ripgrep\` (rg), \`ast-grep\` (sg), \`semgrep\`, \`osv-scanner\` (v2), \`gitleaks\`, \`madge\`, \`universal-ctags\` (ctags), \`jq\`.
+Sempre dispon\xEDvel (FALLBACK, sem instalar nada): \`${py} ${toolkit}\` \u2014 faz invent\xE1rio, GRAFO DE IMPORTS nos dois sentidos (o que importa e QUEM importa), imports quebrados/ciclos/\xF3rf\xE3os e heur\xEDsticas de vulnerabilidade/segredo. Ele cobre madge+ctags+gitleaks quando faltam. Com \`--focus <arquivo>\` mostra a vizinhan\xE7a de import de um arquivo.
+Onde os comandos abaixo usam \`rg\` e ele estiver ausente: no bash use \`grep -rn 'padr\xE3o' "${root}"\`; no cmd use \`findstr /s /n /i padr\xE3o "${root}\\*"\`. N\xE3o tente instalar o rg via pip.
+
+FASE 0 \u2014 PREFLIGHT + SETUP (fa\xE7a EXATAMENTE isto, sem improvisar):
+1. \`${py} ${toolkit} --preflight\` \u2014 UM comando que j\xE1 checa TODAS as ferramentas e mostra o status. Leia a sa\xEDda. (Use esse caminho ABSOLUTO do toolkit verbatim; n\xE3o monte caminho relativo.)
+2. Se faltar alguma das instal\xE1veis (ast-grep/madge/semgrep), rode UM comando que instala todas de uma vez (instala\xE7\xE3o global, fora do projeto) e reimprime o status:
+   \`${py} ${toolkit} --setup\`
+3. Pronto. Siga para a FASE 1 com o que estiver dispon\xEDvel; o que faltar, use o fallback de cada fase.
+
+N\xC3O FA\xC7A (cada um destes quebrou em runs reais):
+   \u2022 N\xC3O cheque ferramenta por ferramenta com \`command -v\`/\`which\`/\`where\` \u2014 o \`--preflight\` j\xE1 faz isso de uma vez.
+   \u2022 N\xC3O instale bin\xE1rios NATIVOS via pip ou npm. \`rg\`/\`ripgrep\`, \`osv-scanner\`, \`gitleaks\`, \`ctags\` N\xC3O s\xE3o pacotes Python/Node \u2014 \`pip install ripgrep\` tenta COMPILAR com Rust e falha. Eles s\xF3 v\xEAm por scoop/winget/go/bin\xE1rio; se n\xE3o houver, use o fallback (N\xC3O insista).
+   \u2022 N\xC3O fique mexendo no PATH (\`export\`/\`set\`) \u2014 n\xE3o persiste. Use \`${py} -m semgrep\` e \`npx @ast-grep/cli\`/\`npx madge\` se o bin\xE1rio n\xE3o estiver no PATH.
+   \u2022 N\xC3O repita uma instala\xE7\xE3o que falhou. 1 tentativa, falhou, fallback.
+NUNCA invente que rodou uma ferramenta que n\xE3o existe \u2014 diga que caiu no fallback.
+
+================================================================
+PIPELINE \u2014 fase por fase (ReAct: cada comando \xE9 uma tool)
+================================================================
+Trabalhe a partir da workspace (${workdir}); aponte as ferramentas para "${root}". Crie \`audit-out/\` para os JSONs.
+
+FASE 1 \u2014 MAPA (antes de ler qualquer arquivo): grafo de imports + \xEDndice de s\xEDmbolos.
+   madge:  \`madge --json --extensions js,jsx,ts,tsx "${root}" > audit-out/deps.json\`
+   ctags:  \`ctags -R --fields=+n --output-format=json -f audit-out/tags.json "${root}"\`
+   FALLBACK (sem madge/ctags): \`${py} ${toolkit} "${root}"\` (gera o grafo nos dois sentidos em reports/audit_*.json) e \`--focus\` para a vizinhan\xE7a; s\xEDmbolos via \`rg -n 'function NOME|NOME\\s*='\`.
+   deps.json responde "o dashboard importa o qu\xEA"; tags.json d\xE1 find_definition (arquivo:linha de cada fun\xE7\xE3o).
+
+FASE 2 \u2014 BASELINE DETERMIN\xCDSTICA (varre r\xE1pido, gera o terreno):
+   semgrep (no Windows quase sempre via m\xF3dulo): \`${py} -m semgrep --config p/owasp-top-ten --config p/javascript --config p/secrets --json --output audit-out/semgrep.json "${root}"\`  (se o execut\xE1vel \`semgrep\` estiver no PATH, pode cham\xE1-lo direto). A 1\xAA execu\xE7\xE3o baixa as regras (precisa de rede).
+   osv-scanner (V2 \u2014 sintaxe nova): \`osv-scanner scan source -r --format json --output audit-out/osv.json "${root}"\`
+   gitleaks: \`gitleaks detect --no-banner --source "${root}" --report-format json --report-path audit-out/secrets.json\`
+   FALLBACK: \`${py} ${toolkit} "${root}"\` j\xE1 entrega segredos + heur\xEDsticas SAST; depend\xEAncias vulner\xE1veis sem osv-scanner: \`npm audit --json\` (l\xEA o lockfile, n\xE3o instala) ou \`python -m pip_audit\` se houver requirements.
+
+FASE 3 \u2014 SOURCES (onde entra dado n\xE3o-confi\xE1vel), estrutural com ast-grep:
+   \`ast-grep run --pattern 'app.$METHOD($PATH, $$$)' --lang ts --json "${root}"\`
+   \`ast-grep run --pattern 'req.$PROP' --lang ts --json "${root}"\`
+   (\`--json\` imprime JSON pretty; para stream a jq use \`--json=stream\`.)
+   FALLBACK textual: \`rg -n --type ts 'req\\.(body|query|params|headers|cookies)' "${root}"\`
+
+FASE 4 \u2014 SINKS (lugares perigosos), estrutural:
+   \`ast-grep run --pattern 'child_process.$M($CMD)' --lang ts --json "${root}"\`   # command injection
+   \`ast-grep run --pattern '$DB.query($Q)'          --lang ts --json "${root}"\`   # SQLi
+   \`ast-grep run --pattern 'eval($X)'               --lang ts --json "${root}"\`   # code exec
+   \`ast-grep run --pattern '$EL.innerHTML = $X'     --lang ts --json "${root}"\`   # XSS DOM
+   FALLBACK: \`rg -n 'child_process|\\.query\\(|eval\\(|innerHTML\\s*='\` + os achados do project_audit.py.
+
+FASE 5 \u2014 TAINT CROSS-MODULE (o cora\xE7\xE3o; AQUI o LLM comanda):
+Cruze a lista de SOURCES (fase 3) com a de SINKS (fase 4). Para cada par candidato, fa\xE7a o loop de navega\xE7\xE3o "vai, verifica e volta":
+   1. Pegue o source; consulte \`deps.json\` (ou o grafo do project_audit) para saber por quais arquivos importados o dado passa.
+   2. Use \`tags.json\` (ou \`rg -n\`) para PULAR para a defini\xE7\xE3o de cada fun\xE7\xE3o intermedi\xE1ria.
+   3. Leia S\xD3 o trecho dela \u2014 a janela exata, nunca o arquivo inteiro:
+      - melhor (multiplataforma): ferramenta \`file\` action: read com \`range\` [in\xEDcio, fim];
+      - ou no shell unix: \`sed -n '40,75p' "${root}/src/utils.ts"\`.
+   4. Decida com o c\xF3digo real se o dado chega SUJO no sink ou foi SANITIZADO no caminho. Ache os usos com \`rg -n 'sanitizeInput\\('\`.
+Esse \`range\`/\`sed -n 'X,Yp'\` \xE9 o que evita estourar o contexto: voc\xEA l\xEA s\xF3 a janela da fun\xE7\xE3o no rastro. \xC9 literalmente o "abrir o dashboard, seguir o import, conferir e voltar" virando comandos.
+
+FASE 6 \u2014 CONSOLIDAR (obrigat\xF3rio) E REPORTAR:
+Voc\xEA redirecionou as sa\xEDdas pesadas para arquivos em audit-out/ \u2014 ent\xE3o elas N\xC3O est\xE3o no seu contexto. Antes de escrever qualquer coisa, traga os DADOS REAIS para o contexto com UM comando (imprime no stdout; N\xC3O redirecione para arquivo):
+   \`${py} ${toolkit} --consolidate "${workdir}/audit-out"\`
+Esse digest l\xEA semgrep.json, npm_audit.json, deps.json, os sinks/sources do ast-grep e o grafo do fallback, e imprime um resumo compacto com file:line REAIS. \xC9 a sua \xDANICA fonte de verdade para os achados das ferramentas. Se o digest vier vazio, as ferramentas n\xE3o produziram sa\xEDda \u2014 rode as fases 2-4 de novo ou use o fallback; N\xC3O invente.
+Depois: deduplique e \u2014 REGRA DE OURO \u2014 **descarte todo achado que N\xC3O tem caminho source\u2192sink confirmado lendo o c\xF3digo real** (FASE 5). Sem isso o relat\xF3rio vira ru\xEDdo.
+Mantenha um SCRATCHPAD (use \`todo_write\`) com: sources achados, caminhos de taint em aberto, e findings VALIDADOS. Itere at\xE9 fechar cada rastro.
+
+Cobertura da ca\xE7a (confirme cada um lendo o c\xF3digo): inje\xE7\xE3o (SQL/comando/c\xF3digo/eval), XSS (sinks DOM/HTML), authn/authz fr\xE1gil, segredos/chaves embutidas (mascare no relat\xF3rio), TLS desabilitado, cripto fraca, CORS permissivo, deserializa\xE7\xE3o insegura, SSRF, path traversal, config perigosa (debug, \`0.0.0.0\`, \`.env\` versionado) e depend\xEAncias vulner\xE1veis (osv). Severidade CRITICAL/HIGH/MEDIUM/LOW/INFO. Separe CONFIRMADO de SUSPEITA; nunca invente nem d\xEA falsa garantia.
+
+================================================================
+ENTREG\xC1VEL \u2014 relat\xF3rio em Markdown na RAIZ do projeto
+================================================================
+Ao final, escreva o relat\xF3rio com a ferramenta \`file\` (action: write) em:
+   \`${root}/ANALISE_PROJETO_<timestamp>.md\`
+Use o timestamp atual (ex.: 20260614_153000). Estrutura m\xEDnima, em portugu\xEAs:
+1. **Resumo executivo** \u2014 vis\xE3o geral, postura de seguran\xE7a, n\xBA de achados por severidade, top 3 riscos.
+2. **Arquitetura & grafo de depend\xEAncias** \u2014 pontos de entrada, m\xF3dulos mais cr\xEDticos, imports quebrados, ciclos, \xF3rf\xE3os.
+3. **Vulnerabilidades e riscos** \u2014 agrupados por severidade. Para cada um: arquivo:linha do SINK, o CAMINHO source\u2192sink confirmado (source \u2192 fun\xE7\xF5es/arquivos intermedi\xE1rios \u2192 sink), por que \xE9 explor\xE1vel, evid\xEAncia (trechos reais) e corre\xE7\xE3o. Marque \`[CONFIRMADO]\` (rastro lido no c\xF3digo) ou \`[SUSPEITA]\` (precisa revis\xE3o humana). Segredos mascarados.
+4. **An\xE1lise por \xE1rea/arquivo** \u2014 o passo-a-passo file-by-file das partes importantes (incl. a verifica\xE7\xE3o de consist\xEAncia dos imports e os rastros de taint seguidos).
+5. **Depend\xEAncias** \u2014 superf\xEDcie e CVEs do osv-scanner (ou fallback).
+6. **Recomenda\xE7\xF5es priorizadas** \u2014 o que corrigir primeiro.
+7. **Ferramentas usadas** \u2014 quais rodaram de fato e quais ca\xEDram em fallback (transpar\xEAncia).
+
+================================================================
+ESTILO E EXECU\xC7\xC3O
+================================================================
+- ${shellNote}
+- Trabalhe em passos com a ferramenta de fato (chame \`run_terminal_cmd\`/\`file\`), n\xE3o apenas descreva o que faria. Planeje com \`todo_write\` quando a auditoria tiver v\xE1rias etapas.
+- Qualquer script auxiliar \xE9 Python 3, criado como arquivo em ${workdir} via \`file\`. Nunca crie scripts por \`echo >\`, heredoc, \`tee\`, \`Set-Content\` ou \`Out-File\`.
+- Responda em portugu\xEAs, direto e t\xE9cnico. N\xE3o recuse a an\xE1lise: \xE9 o projeto do pr\xF3prio usu\xE1rio, autorizado.
+- Lembre-se sempre: voc\xEA analisa e relata; voc\xEA N\xC3O altera o projeto. A \xFAnica escrita \xE9 o relat\xF3rio \`.md\` na raiz.`;
+}
+var import_node_path7, AUDIT_ACTION, AUDIT_SCOPE, AUDIT_ACTION_THEN_SCOPE, AUDIT_SCOPE_THEN_ACTION, AUDIT_STRONG, AUDIT_EXIT;
+var init_audit_mode = __esm({
+  "src/audit-mode.ts"() {
+    "use strict";
+    import_node_path7 = __toESM(require("node:path"));
+    AUDIT_ACTION = "an[a\xE1]lis\\w+|examin\\w+|audit\\w+|auditar|varr\\w+|varredura|escane\\w+|scan\\w*|revis\\w+|inspecion\\w+|vasculh\\w+|verific\\w+|avali\\w+|mapea\\w+|review|analyze|analyse|inspect|assess";
+    AUDIT_SCOPE = "projeto|c[o\xF3]digo|c[o\xF3]digo-fonte|codebase|reposit[o\xF3]rio|repo|sistema|aplica[c\xE7][a\xE3]o|base\\s+de\\s+c[o\xF3]digo|project|code\\s*base|repository|minha\\s+aplica\\w+|meu\\s+app|todo\\s+o\\s+projeto|projeto\\s+inteiro";
+    AUDIT_ACTION_THEN_SCOPE = new RegExp(
+      `\\b(?:${AUDIT_ACTION})\\b[\\s\\S]{0,40}?\\b(?:${AUDIT_SCOPE})\\b`,
+      "i"
+    );
+    AUDIT_SCOPE_THEN_ACTION = new RegExp(
+      `\\b(?:${AUDIT_SCOPE})\\b[\\s\\S]{0,40}?\\b(?:${AUDIT_ACTION})\\b`,
+      "i"
+    );
+    AUDIT_STRONG = [
+      /\b(?:varredura|auditoria)\b[\s\S]{0,40}\b(?:projeto|c[oó]digo|seguran[cç]a|completa|profunda|inteir[oa])\b/i,
+      /\b(?:encontr\w+|ach\w+|ca[cç]\w+|procur\w+|find|hunt|detect\w*)\b[\s\S]{0,40}\bvulnerabilidad\w*/i,
+      /\bvulnerabilidad\w*[\s\S]{0,40}\b(?:no|do|meu|nesse|neste|na)\b[\s\S]{0,20}\b(?:projeto|c[oó]digo|sistema|app|aplica\w+)\b/i,
+      /\b(?:security\s+(?:review|audit|scan)|code\s+(?:audit|review))\b/i,
+      /\b(?:an[aá]lis\w+|auditar|varr\w+|escane\w+|verific\w+)\b[\s\S]{0,30}\b(?:seguran[cç]a|vulnerabilidad\w*)\b/i
+    ];
+    AUDIT_EXIT = [
+      /\b(?:modo\s+normal|sair\s+d[ao]\s+(?:an[aá]lise|auditoria|modo)|encerr\w+\s+(?:a\s+)?(?:an[aá]lise|auditoria)|volt\w+\s+ao\s+normal|desativ\w+\s+(?:a\s+)?auditoria|exit\s+audit|normal\s+mode)\b/i,
+      /\b(?:agora\s+)?(?:corri[gj]\w+|conserte\w*|edit\w+|alter\w+|modific\w+|implement\w+|cri[ae]\w*|refator\w+|escrev\w+\s+o\s+c[oó]digo|aplique\s+a\s+corre|fix|implement|refactor|patch|write\s+the\s+code)\b/i
+    ];
+  }
+});
+
 // src/agent.ts
 var agent_exports = {};
 __export(agent_exports, {
   createAgent: () => createAgent
 });
+function hasLeakedToolCallMarker(text2) {
+  return LEAKED_TOOL_CALL_RE.test(text2);
+}
+function lastSentenceOf(text2) {
+  return text2.trim().split(/(?<=[.!?\n])\s+/).pop()?.trim() ?? "";
+}
 function looksUnfinished(text2) {
   if (!text2) return false;
-  if (/<tool_call/i.test(text2)) return true;
-  return UNFINISHED_TAIL_RE.test(text2.trim().slice(-200));
+  if (hasLeakedToolCallMarker(text2)) return true;
+  const tail = text2.trim().slice(-300);
+  if (DANGLING_TAIL_RE.test(tail)) return true;
+  return ACTION_ANNOUNCE_RE.test(lastSentenceOf(tail));
 }
 function decideAutoContinue(finishReason, lastStepText, turnToolCalls, autoContinues) {
   if (autoContinues >= MAX_AUTO_CONTINUES) return null;
@@ -69424,8 +69701,12 @@ function decideAutoContinue(finishReason, lastStepText, turnToolCalls, autoConti
     if (!text2 && turnToolCalls === 0) {
       return { nudge: true, reason: "resposta vazia do modelo" };
     }
-    if (turnToolCalls > 0 && looksUnfinished(text2)) {
-      return { nudge: true, reason: "texto final indica trabalho inacabado" };
+    if (turnToolCalls > 0 && looksUnfinished(text2) && !BENIGN_CLOSER_RE.test(text2.slice(-200))) {
+      return {
+        nudge: true,
+        reason: "texto final indica trabalho inacabado",
+        nudgeMessage: TOOL_CALL_NUDGE
+      };
     }
     if (turnToolCalls === 0 && looksUnfinished(text2) && !BENIGN_CLOSER_RE.test(text2.slice(-200))) {
       return {
@@ -69538,7 +69819,7 @@ async function createAgent() {
   const sandboxManager = new LocalSandboxManager(sandbox);
   const writer = createConsoleWriter();
   const render = createRenderer();
-  const initialModelName = CLI_MODEL_CHAIN[0] ?? "model-nvidia-minimax-m3";
+  const initialModelName = CLI_MODEL_CHAIN[0] ?? "model-nvidia-mistral-medium-3.5";
   let currentModelName = initialModelName;
   let selectedModelKey = null;
   const context2 = {
@@ -69606,6 +69887,8 @@ async function createAgent() {
     );
   }
   const history = [];
+  let auditMode = false;
+  const projectRoot = projectRootFromWorkdir(sandbox.getWorkdir());
   function getActiveModelChain() {
     return selectedModelKey ? [selectedModelKey] : CLI_MODEL_CHAIN;
   }
@@ -69631,7 +69914,7 @@ async function createAgent() {
         provider: "NVIDIA build",
         reason: "faltando NVIDIA_API_KEY em .env.local (https://build.nvidia.com/)",
         models: [
-          "model-nvidia-minimax-m3",
+          "model-nvidia-mistral-medium-3.5",
           "model-nvidia-kimi-k2.6",
           "model-nvidia-glm-5.1",
           "model-nvidia-qwen3.5-397b"
@@ -69791,12 +70074,30 @@ ${seen}`);
   }
   async function send(userInput, signal) {
     history.push({ role: "user", content: userInput });
-    const matchedSkills = selectSkillsForInput(userInput);
-    const turnSystem = matchedSkills.length ? system + renderSkillBodies(matchedSkills) : system;
-    if (matchedSkills.length) {
+    if (!auditMode && detectProjectAuditIntent(userInput)) {
+      auditMode = true;
       render.info(
-        `\u25B8 skills ativadas: ${matchedSkills.map((s) => s.name).join(", ")}`
+        `\u25B8 modo AN\xC1LISE DE PROJETO (somente leitura) \u2014 auditando ${projectRoot}. Diga "modo normal" para sair.`
       );
+    } else if (auditMode && detectAuditExitIntent(userInput)) {
+      auditMode = false;
+      render.info("\u25B8 modo normal reativado.");
+    }
+    let turnSystem;
+    if (auditMode) {
+      turnSystem = buildAuditSystemPrompt({
+        projectRoot,
+        workdir: sandbox.getWorkdir(),
+        shellHint: sandbox.getShellHint()
+      });
+    } else {
+      const matchedSkills = selectSkillsForInput(userInput);
+      turnSystem = matchedSkills.length ? system + renderSkillBodies(matchedSkills) : system;
+      if (matchedSkills.length) {
+        render.info(
+          `\u25B8 skills ativadas: ${matchedSkills.map((s) => s.name).join(", ")}`
+        );
+      }
     }
     let lastError = null;
     let autoContinues = 0;
@@ -69805,6 +70106,7 @@ ${seen}`);
     const usingFixedModel = selectedModelKey !== null;
     let rateLimitWaits = 0;
     let addedRateLimitFallbacks = false;
+    let stallRetries = 0;
     for (let idx = 0; idx < modelChain.length; idx++) {
       const modelKey = modelChain[idx];
       currentModelName = modelKey;
@@ -69819,6 +70121,27 @@ ${seen}`);
         render.fallback(`trocando para fallback: ${labelFor(modelKey)}`);
       }
       let streamError = null;
+      let stalled = false;
+      const stallController = new AbortController();
+      const onUserAbort = () => stallController.abort();
+      if (signal) {
+        if (signal.aborted) stallController.abort();
+        else signal.addEventListener("abort", onUserAbort, { once: true });
+      }
+      let stallTimer;
+      const clearStallTimer = () => {
+        if (stallTimer) {
+          clearTimeout(stallTimer);
+          stallTimer = void 0;
+        }
+      };
+      const armStallTimer = () => {
+        clearStallTimer();
+        stallTimer = setTimeout(() => {
+          stalled = true;
+          stallController.abort();
+        }, STREAM_STALL_TIMEOUT_MS);
+      };
       try {
         const result = streamText({
           model: myProvider.languageModel(modelKey),
@@ -69827,7 +70150,7 @@ ${seen}`);
           tools,
           stopWhen: stepCountIs(MAX_STEPS),
           maxOutputTokens: MAX_OUTPUT_TOKENS,
-          abortSignal: signal,
+          abortSignal: stallController.signal,
           onError: ({ error: error51 }) => {
             streamError = error51;
           }
@@ -69836,38 +70159,72 @@ ${seen}`);
         let bufferedProxyText = "";
         let turnToolCalls = 0;
         const shouldBufferProxyText = isWebSessionProxyModel(modelKey);
-        for await (const part of result.fullStream) {
-          switch (part.type) {
-            case "text-delta": {
-              const delta = part.text ?? part.delta ?? "";
-              lastStepText += delta;
-              if (shouldBufferProxyText) {
-                bufferedProxyText += delta;
-              } else {
-                render.text(delta);
+        let pendingTools = 0;
+        const noteActivity = () => {
+          if (pendingTools === 0) armStallTimer();
+        };
+        armStallTimer();
+        try {
+          for await (const part of result.fullStream) {
+            switch (part.type) {
+              case "text-delta": {
+                const delta = part.text ?? part.delta ?? "";
+                lastStepText += delta;
+                if (shouldBufferProxyText) {
+                  bufferedProxyText += delta;
+                } else {
+                  render.text(delta);
+                }
+                noteActivity();
+                break;
               }
-              break;
+              case "reasoning-delta":
+                render.reasoning(part.text ?? part.delta ?? "");
+                noteActivity();
+                break;
+              case "tool-call":
+                turnToolCalls++;
+                pendingTools++;
+                clearStallTimer();
+                render.toolCall(part.toolName, part.input ?? part.args);
+                break;
+              case "tool-result":
+                if (pendingTools > 0) pendingTools--;
+                render.toolResult(part.toolName, part.output ?? part.result);
+                noteActivity();
+                break;
+              case "tool-error":
+                if (pendingTools > 0) pendingTools--;
+                noteActivity();
+                break;
+              case "start-step":
+                lastStepText = "";
+                bufferedProxyText = "";
+                noteActivity();
+                break;
+              case "error":
+                streamError = part.error;
+                noteActivity();
+                break;
+              default:
+                noteActivity();
+                break;
             }
-            case "reasoning-delta":
-              render.reasoning(part.text ?? part.delta ?? "");
-              break;
-            case "tool-call":
-              turnToolCalls++;
-              render.toolCall(part.toolName, part.input ?? part.args);
-              break;
-            case "tool-result":
-              render.toolResult(part.toolName, part.output ?? part.result);
-              break;
-            case "start-step":
-              lastStepText = "";
-              bufferedProxyText = "";
-              break;
-            case "error":
-              streamError = part.error;
-              break;
-            default:
-              break;
           }
+        } finally {
+          clearStallTimer();
+          if (signal) signal.removeEventListener("abort", onUserAbort);
+        }
+        if (stalled) {
+          void Promise.resolve(result.response).catch(() => {
+          });
+          void Promise.resolve(result.finishReason).catch(() => {
+          });
+          throw new Error(
+            `Resposta do modelo travou: nenhum dado recebido por ${Math.round(
+              STREAM_STALL_TIMEOUT_MS / 1e3
+            )}s.`
+          );
         }
         if (streamError) throw streamError;
         const response = await result.response;
@@ -69875,12 +70232,13 @@ ${seen}`);
         const finishReason = String(
           await result.finishReason.catch(() => "unknown")
         );
-        if (finishReason === "stop" && turnToolCalls === 0 && bridgeSteps < MAX_BRIDGE_STEPS && shouldBufferProxyText) {
+        const leakedCall = !shouldBufferProxyText && hasLeakedToolCallMarker(lastStepText);
+        if (finishReason === "stop" && turnToolCalls === 0 && bridgeSteps < MAX_BRIDGE_STEPS && (shouldBufferProxyText || leakedCall)) {
           const bridged = parseProxyToolCalls(lastStepText);
           if (bridged) {
             bridgeSteps++;
             render.info(
-              `\u25B8 bridge (${bridgeSteps}/${MAX_BRIDGE_STEPS}): executando por tr\xE1s ${bridged.length} chamada(s): ${summarizeBridgedCalls(bridged)}`
+              `\u25B8 ${leakedCall ? "tool call vazada recuperada" : "bridge"} (${bridgeSteps}/${MAX_BRIDGE_STEPS}): executando por tr\xE1s ${bridged.length} chamada(s): ${summarizeBridgedCalls(bridged)}`
             );
             const resultText = await runBridgedToolCalls(bridged, signal);
             if (signal?.aborted) {
@@ -69889,7 +70247,7 @@ ${seen}`);
             }
             history.push({
               role: "user",
-              content: `${BRIDGE_RESULT_PREAMBLE}
+              content: `${leakedCall ? LEAKED_CALL_RESULT_PREAMBLE : BRIDGE_RESULT_PREAMBLE}
 
 ${resultText}`
             });
@@ -69938,6 +70296,28 @@ ${resultText}`
           render.endTurn();
           return;
         }
+        if (stalled) {
+          while (history.length && history[history.length - 1]?.role !== "user") {
+            history.pop();
+          }
+          const secs = Math.round(STREAM_STALL_TIMEOUT_MS / 1e3);
+          lastError = new Error(
+            `stream travou (${secs}s sem dados) em ${labelFor(modelKey)}`
+          );
+          stallRetries++;
+          const hasNext2 = idx + 1 < modelChain.length;
+          if (stallRetries <= MAX_STALL_RETRIES) {
+            render.error(
+              `modelo "${labelFor(modelKey)}" travou (sem resposta por ${secs}s) \u2014 ${hasNext2 ? "trocando de modelo" : "tentando novamente"} (${stallRetries}/${MAX_STALL_RETRIES})`
+            );
+            if (!hasNext2) idx = -1;
+            continue;
+          }
+          render.error(
+            `modelo "${labelFor(modelKey)}" travou repetidamente (${stallRetries}x); desistindo deste turno. Tente de novo ou troque com /model.`
+          );
+          break;
+        }
         lastError = err ?? streamError;
         const msg = lastError instanceof Error ? lastError.message : String(lastError);
         const rateLimited = isRateLimitError(msg);
@@ -70016,13 +70396,13 @@ ${resultText}`
     close
   };
 }
-var import_promises, import_node_path7, MAX_STEPS, MAX_OUTPUT_TOKENS, MAX_AUTO_CONTINUES, MAX_RATE_LIMIT_WAITS, isRateLimitError, sleep, UNFINISHED_TAIL_RE, BENIGN_CLOSER_RE, TOOL_CALL_NUDGE, MAX_BRIDGE_STEPS, BRIDGE_RESULT_PREAMBLE, truncateBridgeSummary, isWebSessionProxyModel, proxyToolProtocolPolicy, SYSTEM_PROMPT_SOURCE, REQUIRED_SYSTEM_PROMPT_MARKERS, MODEL_LABELS, labelFor, loginRequiredHint, CLI_PYTHON_ONLY_POLICY, pythonOnlyPolicy, scriptFilePolicy, deepReconPolicy, skillsScopePolicy, hasEnvValue2, envFlagEnabled, CLI_PERSONALITIES, buildCliUserCustomization, buildCliNotesSection, cliGuardrailsConfig, maybeDumpSystemPrompt, auditSystemPrompt, assertFullSystemPrompt;
+var import_promises, import_node_path8, MAX_STEPS, MAX_OUTPUT_TOKENS, MAX_AUTO_CONTINUES, MAX_RATE_LIMIT_WAITS, STREAM_STALL_TIMEOUT_MS, MAX_STALL_RETRIES, isRateLimitError, sleep, LEAKED_TOOL_CALL_RE, DANGLING_TAIL_RE, ACTION_ANNOUNCE_RE, BENIGN_CLOSER_RE, TOOL_CALL_NUDGE, MAX_BRIDGE_STEPS, BRIDGE_RESULT_PREAMBLE, LEAKED_CALL_RESULT_PREAMBLE, truncateBridgeSummary, isWebSessionProxyModel, proxyToolProtocolPolicy, SYSTEM_PROMPT_SOURCE, REQUIRED_SYSTEM_PROMPT_MARKERS, MODEL_LABELS, labelFor, loginRequiredHint, CLI_PYTHON_ONLY_POLICY, pythonOnlyPolicy, scriptFilePolicy, deepReconPolicy, skillsScopePolicy, hasEnvValue2, envFlagEnabled, CLI_PERSONALITIES, buildCliUserCustomization, buildCliNotesSection, cliGuardrailsConfig, maybeDumpSystemPrompt, auditSystemPrompt, assertFullSystemPrompt;
 var init_agent = __esm({
   "src/agent.ts"() {
     "use strict";
     init_dist5();
     import_promises = require("node:fs/promises");
-    import_node_path7 = __toESM(require("node:path"));
+    import_node_path8 = __toESM(require("node:path"));
     init_providers();
     init_system_prompt();
     init_notes();
@@ -70041,10 +70421,16 @@ var init_agent = __esm({
     init_render();
     init_skills();
     init_proxy_manager2();
+    init_audit_mode();
     MAX_STEPS = 100;
     MAX_OUTPUT_TOKENS = 16384;
     MAX_AUTO_CONTINUES = 3;
     MAX_RATE_LIMIT_WAITS = 4;
+    STREAM_STALL_TIMEOUT_MS = (() => {
+      const raw = Number(process.env.HACKERAI_CLI_STREAM_STALL_MS);
+      return Number.isFinite(raw) && raw >= 1e4 ? raw : 18e4;
+    })();
+    MAX_STALL_RETRIES = 2;
     isRateLimitError = (msg) => /\b429\b|too many requests|rate.?limit|resource_exhausted|quota|insufficient_quota/i.test(
       msg
     );
@@ -70060,11 +70446,14 @@ var init_agent = __esm({
         { once: true }
       );
     });
-    UNFINISHED_TAIL_RE = /(?::|\.\.\.|…)\s*$|\b(?:vou|irei|deixe-me|deixa eu|em seguida|pr[oó]ximo passo|agora (?:vou|irei|preciso)|let me|i(?:'|’)?ll|i will|i(?:'|’)?m going to|going to|next,? i)\b[^.!?\n]{0,120}[.!?]?\s*$/i;
+    LEAKED_TOOL_CALL_RE = /<tool_call|call_tool_function|call_tool\b|<｜tool▁call|functions\.\w+\s*[({]|"tool_call_id"/i;
+    DANGLING_TAIL_RE = /(?::|\.\.\.|…)\s*$/;
+    ACTION_ANNOUNCE_RE = /^(?:ent[aã]o[,:]?\s+|agora[,:]?\s+|em seguida[,:]?\s+|a seguir[,:]?\s+|por fim[,:]?\s+|primeiro[,:]?\s+|then[,:]?\s+|now[,:]?\s+|first[,:]?\s+|next,?\s+)*(?:vou\b|irei\b|deixe-me\b|deixa eu\b|pr[oó]ximo passo\b|agora (?:vou|irei|preciso)\b|let me\b|i(?:'|’)?ll\b|i will\b|i(?:'|’)?m going to\b|i am going to\b|going to\b|i(?:'|’)?m about to\b|next,? i\b)/i;
     BENIGN_CLOSER_RE = /\b(?:let me know|just let me know|deixa eu saber|me avis(?:e|a)|qualquer (?:coisa|d[uú]vida)|fico (?:à|a) disposi[cç][aã]o)\b[^.!?:\n]{0,80}[.!?]?\s*$/i;
     TOOL_CALL_NUDGE = "Voc\xEA anunciou uma a\xE7\xE3o mas n\xE3o executou nenhuma ferramenta neste turno. Pare de descrever o que vai fazer e CHAME a ferramenta agora: use a ferramenta `file` (action write para criar, edit para alterar) para qualquer arquivo ou script, e `run_terminal_cmd` para rodar comandos. N\xC3O escreva o conte\xFAdo do arquivo na resposta nem cole markup de tool call \u2014 emita a chamada de ferramenta de verdade.";
     MAX_BRIDGE_STEPS = 50;
     BRIDGE_RESULT_PREAMBLE = "Voc\xEA roda via proxy de sess\xE3o web (sem function-calling nativo), ent\xE3o o runtime do CLI consumiu o bloco JSON anterior como chamada interna e EXECUTOU de verdade. N\xE3o repita o bloco nem o texto anterior. Os resultados REAIS est\xE3o abaixo. Continue a tarefa: se precisar de mais a\xE7\xF5es, emita SOMENTE o PR\xD3XIMO bloco ```json (um array de {brief, command, timeout} para terminal, ou {action, path, text} para arquivo). Um bloco por vez. Quando a tarefa terminar, responda em texto normal SEM bloco json.";
+    LEAKED_CALL_RESULT_PREAMBLE = "Sua chamada de ferramenta anterior chegou como TEXTO (n\xE3o como function call nativo), ent\xE3o o runtime do CLI a executou mesmo assim. Os resultados REAIS est\xE3o abaixo. Continue a tarefa chamando as ferramentas NORMALMENTE (run_terminal_cmd, file, todo_write) como function calls de verdade \u2014 N\xC3O cole markup de tool call (`call_tool_function`, `<tool_call>`, etc.) nem JSON de chamada como texto na resposta.";
     truncateBridgeSummary = (value, max = 180) => value.length > max ? `${value.slice(0, max)}...` : value;
     isWebSessionProxyModel = (modelName) => modelName === "model-deepseek-proxy" || modelName === "model-kimi-proxy";
     proxyToolProtocolPolicy = () => `
@@ -70100,7 +70489,7 @@ Regras:
       "DANGEROUS MODE"
     ];
     MODEL_LABELS = {
-      "model-nvidia-minimax-m3": "NVIDIA - minimaxai/minimax-m3",
+      "model-nvidia-mistral-medium-3.5": "NVIDIA - mistralai/mistral-medium-3.5-128b",
       "model-nvidia-kimi-k2.6": "NVIDIA - moonshotai/kimi-k2.6",
       "model-nvidia-glm-5.1": "NVIDIA - z-ai/glm-5.1",
       "model-nvidia-qwen3.5-397b": "NVIDIA - qwen/qwen3.5-397b-a17b",
@@ -70245,7 +70634,7 @@ ${section}` : "";
         return null;
       }
       await (0, import_promises.mkdir)(workdir, { recursive: true });
-      const outputPath = import_node_path7.default.join(workdir, "system-prompt.txt");
+      const outputPath = import_node_path8.default.join(workdir, "system-prompt.txt");
       await (0, import_promises.writeFile)(outputPath, system, "utf8");
       return outputPath;
     };
@@ -70276,7 +70665,9 @@ __export(ui_exports, {
   agentHeader: () => agentHeader,
   buildBanner: () => buildBanner,
   shellPrompt: () => shellPrompt,
-  ui: () => ui
+  shortCwd: () => shortCwd,
+  ui: () => ui,
+  vlen: () => vlen
 });
 function shortCwd() {
   const cwd = process.cwd();
@@ -70289,13 +70680,13 @@ function shortCwd() {
 }
 function asciiTitle(text2) {
   const rows = 6;
-  const out2 = [];
+  const out3 = [];
   for (let r = 0; r < rows; r++) {
-    out2.push(
+    out3.push(
       [...text2].map((ch) => GLYPHS[ch] ? GLYPHS[ch][r] : "      ").join(" ")
     );
   }
-  return out2;
+  return out3;
 }
 function buildBanner(_systemPromptChars, version3 = "1") {
   const user = (import_node_os4.default.userInfo().username || "hacker").toLowerCase();
@@ -70367,7 +70758,8 @@ var init_ui = __esm({
       cyan: `${ESC}36m`,
       cyanB: `${ESC}96m`,
       magenta: `${ESC}95m`,
-      yellow: `${ESC}93m`
+      yellow: `${ESC}93m`,
+      red: `${ESC}91m`
     };
     INNER = 42;
     BOX_W = INNER + 4;
@@ -70391,16 +70783,462 @@ var init_ui = __esm({
   }
 });
 
+// src/interactive-input.ts
+var interactive_input_exports = {};
+__export(interactive_input_exports, {
+  InteractiveInput: () => InteractiveInput
+});
+var import_node_readline3, import_node_os5, C4, out2, cols, truncate4, InteractiveInput;
+var init_interactive_input = __esm({
+  "src/interactive-input.ts"() {
+    "use strict";
+    import_node_readline3 = __toESM(require("node:readline"));
+    import_node_os5 = __toESM(require("node:os"));
+    init_ui();
+    C4 = ui.C;
+    out2 = (s) => process.stdout.write(s);
+    cols = () => process.stdout.columns || 80;
+    truncate4 = (s, n) => vlen(s) > n ? [...s].slice(0, Math.max(0, n - 1)).join("") + "\u2026" : s;
+    InteractiveInput = class {
+      // row the caret sits on within the drawn block
+      constructor(paste, commands) {
+        this.paste = paste;
+        this.commands = commands;
+        this.buffer = "";
+        this.cursor = 0;
+        this.lastRows = 0;
+        this.history = [];
+        this.histIdx = -1;
+        // -1 = editing the live draft
+        this.draft = "";
+        this.ddSel = 0;
+        this.ddSuppressed = false;
+        // Text to restore on the NEXT prompt: when a command is picked from the
+        // dropdown mid-text, we run the command but stash the surrounding text here
+        // so the user doesn't lose what they were typing.
+        this.pendingInitial = null;
+        this.onKey = null;
+        // When set, prompt() draws a compact single-line labelled prompt ("nome ❯ ")
+        // instead of the full message box + dropdown — used for the /skillcreator
+        // step-by-step capture so each phase shows what it's asking for.
+        this.promptLabel = null;
+        this.inputLineIndex = 2;
+        import_node_readline3.default.emitKeypressEvents(paste.input);
+        paste.input.on("keypress", (str, key) => {
+          this.onKey?.(str ?? "", key ?? {});
+        });
+      }
+      // ── public API ─────────────────────────────────────────────────────────────
+      /**
+       * Render the input and resolve when the user submits / Ctrl+C / Ctrl+D.
+       * Pass `{ label }` for a compact labelled prompt (no box, no dropdown).
+       */
+      prompt(opts = {}) {
+        this.promptLabel = opts.label ?? null;
+        const initial = this.promptLabel === null && this.pendingInitial ? this.pendingInitial : "";
+        this.pendingInitial = null;
+        this.buffer = initial;
+        this.cursor = initial.length;
+        this.histIdx = -1;
+        this.draft = "";
+        this.ddSel = 0;
+        this.ddSuppressed = false;
+        this.lastRows = 0;
+        if (this.promptLabel === null) out2("\n");
+        this.render();
+        return new Promise((resolve2) => {
+          this.onKey = (str, key) => {
+            const done = this.handleEditKey(str, key);
+            if (!done) {
+              this.render();
+              return;
+            }
+            this.onKey = null;
+            resolve2(done.result);
+          };
+        });
+      }
+      /**
+       * Arrow-navigable single-choice list. Returns the chosen index, or null when
+       * the user cancels (Esc / q / Ctrl+C).
+       */
+      select(title, items, initial = 0) {
+        let sel = Math.max(0, Math.min(initial, items.length - 1));
+        this.lastRows = 0;
+        out2("\n");
+        this.renderList(title, items, sel);
+        return new Promise((resolve2) => {
+          const finish = (value) => {
+            this.collapseTo(this.lastRows);
+            this.onKey = null;
+            resolve2(value);
+          };
+          this.onKey = (str, key) => {
+            if (key.ctrl && key.name === "c") return finish(null);
+            switch (key.name) {
+              case "up":
+                sel = (sel - 1 + items.length) % items.length;
+                this.renderList(title, items, sel);
+                return;
+              case "down":
+              case "tab":
+                sel = (sel + 1) % items.length;
+                this.renderList(title, items, sel);
+                return;
+              case "return":
+                return finish(sel);
+              case "escape":
+                return finish(null);
+              default:
+                if (str === "q") return finish(null);
+                if (/^[1-9]$/.test(str)) {
+                  const i = Number(str) - 1;
+                  if (i < items.length) {
+                    sel = i;
+                    this.renderList(title, items, sel);
+                  }
+                }
+                return;
+            }
+          };
+        });
+      }
+      /**
+       * Lightweight line reader used WHILE a turn is running, so typed lines can be
+       * forwarded to an interactive command's stdin. No box/dropdown — just echoes
+       * and collects until Enter. Ctrl+C invokes `onSigint`.
+       */
+      beginTurn(onLine, onSigint) {
+        let buf = "";
+        this.onKey = (str, key) => {
+          if (key.ctrl && key.name === "c") return onSigint();
+          if (key.name === "return") {
+            out2("\r\n");
+            const line = this.paste.expand(buf);
+            buf = "";
+            onLine(line);
+            return;
+          }
+          if (key.name === "backspace") {
+            if (buf.length) {
+              buf = buf.slice(0, -1);
+              out2("\b \b");
+            }
+            return;
+          }
+          if (str && str.charCodeAt(0) >= 32 && !key.ctrl && !key.meta) {
+            buf += str;
+            out2(str);
+          }
+        };
+      }
+      endTurn() {
+        this.onKey = null;
+      }
+      // ── editing ──────────────────────────────────────────────────────────────
+      handleEditKey(str, key) {
+        const items = this.dropdownItems();
+        if (key.ctrl && key.name === "c") {
+          this.finishLine();
+          return { result: { type: "sigint" } };
+        }
+        if (key.ctrl && key.name === "d") {
+          if (this.buffer.length === 0) {
+            this.finishLine();
+            return { result: { type: "eof" } };
+          }
+          this.deleteForward();
+          return null;
+        }
+        switch (key.name) {
+          case "return": {
+            if (items.length > 0) {
+              const name25 = items[this.ddSel].name;
+              const tok = this.slashTokenAtCursor();
+              const leftover = tok ? this.buffer.slice(0, tok.start) + this.buffer.slice(tok.end) : "";
+              this.pendingInitial = leftover.trim() ? leftover : null;
+              this.buffer = name25;
+              this.cursor = name25.length;
+            }
+            const value = this.paste.expand(this.buffer);
+            if (value.trim()) this.history.push(value);
+            this.finishLine();
+            return { result: { type: "line", value } };
+          }
+          case "tab":
+            if (items.length > 0) {
+              this.applyCommandInPlace(items[this.ddSel].name);
+              this.ddSuppressed = false;
+            }
+            return null;
+          case "up":
+            if (items.length > 0) {
+              this.ddSel = (this.ddSel - 1 + items.length) % items.length;
+            } else {
+              this.historyPrev();
+            }
+            return null;
+          case "down":
+            if (items.length > 0) {
+              this.ddSel = (this.ddSel + 1) % items.length;
+            } else {
+              this.historyNext();
+            }
+            return null;
+          case "escape":
+            if (items.length > 0) this.ddSuppressed = true;
+            return null;
+          case "left":
+            if (this.cursor > 0) this.cursor--;
+            return null;
+          case "right":
+            if (this.cursor < this.buffer.length) this.cursor++;
+            return null;
+          case "home":
+            this.cursor = 0;
+            return null;
+          case "end":
+            this.cursor = this.buffer.length;
+            return null;
+          case "backspace":
+            if (this.cursor > 0) {
+              this.buffer = this.buffer.slice(0, this.cursor - 1) + this.buffer.slice(this.cursor);
+              this.cursor--;
+              this.ddSuppressed = false;
+            }
+            return null;
+          case "delete":
+            this.deleteForward();
+            return null;
+        }
+        if (key.ctrl && key.name === "u") {
+          this.buffer = this.buffer.slice(this.cursor);
+          this.cursor = 0;
+          this.ddSuppressed = false;
+          return null;
+        }
+        if (key.ctrl && key.name === "w") {
+          const left = this.buffer.slice(0, this.cursor);
+          const trimmed = left.replace(/\s*\S+\s*$/u, "");
+          this.buffer = trimmed + this.buffer.slice(this.cursor);
+          this.cursor = trimmed.length;
+          this.ddSuppressed = false;
+          return null;
+        }
+        if (key.ctrl && key.name === "a") {
+          this.cursor = 0;
+          return null;
+        }
+        if (key.ctrl && key.name === "e") {
+          this.cursor = this.buffer.length;
+          return null;
+        }
+        if (str && !key.ctrl && !key.meta && str.charCodeAt(0) >= 32) {
+          this.buffer = this.buffer.slice(0, this.cursor) + str + this.buffer.slice(this.cursor);
+          this.cursor += str.length;
+          this.ddSuppressed = false;
+        }
+        return null;
+      }
+      deleteForward() {
+        if (this.cursor < this.buffer.length) {
+          this.buffer = this.buffer.slice(0, this.cursor) + this.buffer.slice(this.cursor + 1);
+          this.ddSuppressed = false;
+        }
+      }
+      historyPrev() {
+        if (this.history.length === 0) return;
+        if (this.histIdx === -1) {
+          this.draft = this.buffer;
+          this.histIdx = this.history.length - 1;
+        } else if (this.histIdx > 0) {
+          this.histIdx--;
+        }
+        this.buffer = this.history[this.histIdx];
+        this.cursor = this.buffer.length;
+      }
+      historyNext() {
+        if (this.histIdx === -1) return;
+        if (this.histIdx < this.history.length - 1) {
+          this.histIdx++;
+          this.buffer = this.history[this.histIdx];
+        } else {
+          this.histIdx = -1;
+          this.buffer = this.draft;
+        }
+        this.cursor = this.buffer.length;
+      }
+      // ── rendering ──────────────────────────────────────────────────────────────
+      // The slash-command "token" the cursor is sitting in — the run of
+      // non-whitespace chars around the cursor, when it begins with "/". Works at
+      // the start of the line OR in the middle of the text (e.g. "veja o /mod"),
+      // so the command dropdown opens wherever you type a slash. Returns the span
+      // [start, end) to replace and the query (the whole token) to filter by.
+      slashTokenAtCursor() {
+        const b = this.buffer;
+        let start = this.cursor;
+        while (start > 0 && !/\s/.test(b[start - 1])) start--;
+        if (b[start] !== "/") return null;
+        let end = this.cursor;
+        while (end < b.length && !/\s/.test(b[end])) end++;
+        const query = b.slice(start, end);
+        if (!/^\/\S*$/.test(query)) return null;
+        return { start, end, query };
+      }
+      // Replace the slash token under the cursor with `name` (used by Tab/Enter
+      // completion), leaving the surrounding text intact and the cursor right after
+      // the inserted command.
+      applyCommandInPlace(name25) {
+        const tok = this.slashTokenAtCursor();
+        if (!tok) return;
+        this.buffer = this.buffer.slice(0, tok.start) + name25 + this.buffer.slice(tok.end);
+        this.cursor = tok.start + name25.length;
+      }
+      dropdownItems() {
+        if (this.promptLabel !== null) return [];
+        if (this.ddSuppressed) return [];
+        const tok = this.slashTokenAtCursor();
+        if (!tok) return [];
+        const q = tok.query.toLowerCase();
+        return this.commands.filter((c) => c.name.toLowerCase().startsWith(q));
+      }
+      render() {
+        if (this.promptLabel !== null) {
+          this.renderCompact();
+          return;
+        }
+        const width = cols();
+        const user = (import_node_os5.default.userInfo().username || "hacker").toLowerCase();
+        const host = (import_node_os5.default.hostname() || "localhost").split(".")[0].toLowerCase();
+        const label = " \u2709  mensagem ";
+        const boxW = Math.min(54, Math.max(28, width - 2));
+        const topFill = "\u2500".repeat(Math.max(0, boxW - vlen(label) - 3));
+        const top = `${C4.green}\u256D\u2500${C4.greenB}${C4.bold}${label}${C4.reset}${C4.green}${topFill}\u256E${C4.reset}`;
+        const id = `${user}\u327F${host} \xB7 ${shortCwd()}`;
+        const idLine = `${C4.green}\u2502 ${C4.dim}${truncate4(id, boxW - 4)}${C4.reset}`;
+        const prefix = `${C4.green}\u2570\u2500${C4.greenB}${C4.bold}\u276F${C4.reset} `;
+        const prefixLen = 4;
+        const avail = Math.max(8, width - prefixLen - 1);
+        let start = 0;
+        if (this.cursor > avail) start = this.cursor - avail;
+        const visible = this.buffer.slice(start, start + avail);
+        const caretCol = prefixLen + (this.cursor - start);
+        const promptLine2 = prefix + visible;
+        const lines = [top, idLine, promptLine2];
+        const items = this.dropdownItems();
+        if (items.length > 0) {
+          this.ddSel = Math.min(this.ddSel, items.length - 1);
+          const ddHint = "\u2191\u2193 navega \xB7 Enter roda \xB7 Tab completa";
+          const nameW = Math.max(...items.map((i) => vlen(i.name)));
+          const ddInner = Math.min(boxW, Math.max(24, width - 4));
+          lines.push(`${C4.dim}  \u256D${"\u2500".repeat(ddInner)}\u256E${C4.reset}`);
+          items.forEach((it, i) => {
+            const active2 = i === this.ddSel;
+            const marker25 = active2 ? `${C4.greenB}\u25B8 ` : `${C4.dim}  `;
+            const name25 = (active2 ? `${C4.greenB}${C4.bold}` : C4.cyan) + it.name;
+            const pad = " ".repeat(Math.max(1, nameW - vlen(it.name) + 2));
+            const descRoom = ddInner - 2 - nameW - 2;
+            const desc = `${C4.dim}${truncate4(it.desc, Math.max(4, descRoom))}`;
+            const body = `${marker25}${name25}${C4.reset}${pad}${desc}${C4.reset}`;
+            const padded = body + " ".repeat(Math.max(0, ddInner - 1 - vlen(body)));
+            lines.push(`${C4.dim}  \u2502${C4.reset}${padded}${C4.dim}\u2502${C4.reset}`);
+          });
+          lines.push(
+            `${C4.dim}  \u2570${"\u2500".repeat(ddInner)}\u256F  ${ddHint}${C4.reset}`
+          );
+        } else {
+          this.ddSel = 0;
+        }
+        this.inputLineIndex = 2;
+        this.paint(lines, caretCol);
+      }
+      /** Compact single-line labelled prompt ("nome ❯ …") for step-by-step capture. */
+      renderCompact() {
+        const width = cols();
+        const label = this.promptLabel ?? "";
+        const prefix = `${C4.cyan}${C4.bold}${label}${C4.reset} ${C4.greenB}${C4.bold}\u276F${C4.reset} `;
+        const prefixLen = vlen(`${label} \u276F `);
+        const avail = Math.max(8, width - prefixLen - 1);
+        let start = 0;
+        if (this.cursor > avail) start = this.cursor - avail;
+        const visible = this.buffer.slice(start, start + avail);
+        const caretCol = prefixLen + (this.cursor - start);
+        this.inputLineIndex = 0;
+        this.paint([prefix + visible], caretCol);
+      }
+      /** Repaint the whole block, then place the cursor on the active input line. */
+      paint(lines, caretCol) {
+        let s = "";
+        if (this.lastRows > 1) s += `\x1B[${this.lastRows - 1}A`;
+        s += "\r\x1B[0J";
+        s += lines.join("\r\n");
+        this.lastRows = lines.length;
+        const below = lines.length - 1 - this.inputLineIndex;
+        if (below > 0) s += `\x1B[${below}A`;
+        s += "\r";
+        if (caretCol > 0) s += `\x1B[${caretCol}C`;
+        out2(s);
+      }
+      /** Collapse the dropdown, keep the typed line, and drop to a fresh line below. */
+      finishLine() {
+        this.ddSuppressed = true;
+        this.render();
+        const below = this.lastRows - 1 - this.inputLineIndex;
+        if (below > 0) out2(`\x1B[${below}B`);
+        out2("\r\n");
+        this.lastRows = 0;
+      }
+      renderList(title, items, sel) {
+        const width = cols();
+        const labelW = Math.max(...items.map((i) => vlen(i.label)));
+        const inner = Math.min(
+          Math.max(28, width - 4),
+          Math.max(labelW + 8, title.length + 4)
+        );
+        const lines = [];
+        lines.push(`${C4.cyan}\u256D\u2500 ${C4.bold}${title}${C4.reset}`);
+        items.forEach((it, i) => {
+          const active2 = i === sel;
+          const marker25 = active2 ? `${C4.greenB}\u276F ` : `${C4.dim}  `;
+          const text2 = active2 ? `${C4.greenB}${C4.bold}${it.label}${C4.reset}` : `${C4.reset}${it.label}`;
+          const hint = it.hint ? `   ${C4.dim}${truncate4(it.hint, Math.max(6, inner - labelW - 6))}${C4.reset}` : "";
+          lines.push(`${C4.cyan}\u2502 ${C4.reset}${marker25}${text2}${C4.reset}${hint}`);
+        });
+        lines.push(
+          `${C4.cyan}\u2570\u2500${C4.reset} ${C4.dim}\u2191\u2193 navega \xB7 Enter seleciona \xB7 Esc cancela${C4.reset}`
+        );
+        this.paintBlock(lines);
+      }
+      /** Repaint a block and leave the cursor just below it (for list/menu modes). */
+      paintBlock(lines) {
+        let s = "";
+        if (this.lastRows > 1) s += `\x1B[${this.lastRows - 1}A`;
+        s += "\r\x1B[0J";
+        s += lines.join("\r\n");
+        s += "\r";
+        out2(s);
+        this.lastRows = lines.length;
+      }
+      /** Move the cursor below a block of `rows` lines and clear it. */
+      collapseTo(rows) {
+        if (rows > 1) out2(`\x1B[${rows - 1}A`);
+        out2("\r\x1B[0J");
+        this.lastRows = 0;
+      }
+    };
+  }
+});
+
 // index.ts
 var index_exports = {};
 async function main() {
   const { createAgent: createAgent2 } = await Promise.resolve().then(() => (init_agent(), agent_exports));
-  const { buildBanner: buildBanner2, shellPrompt: shellPrompt2, agentHeader: agentHeader2, ui: ui2 } = await Promise.resolve().then(() => (init_ui(), ui_exports));
+  const { buildBanner: buildBanner2, agentHeader: agentHeader2, ui: ui2 } = await Promise.resolve().then(() => (init_ui(), ui_exports));
+  const { InteractiveInput: InteractiveInput2 } = await Promise.resolve().then(() => (init_interactive_input(), interactive_input_exports));
+  const C5 = ui2.C;
   if (!bootQuiet) {
-    process.stdout.write(
-      `${ui2.C.dim}  booting local sandbox + agent\u2026${ui2.C.reset}
-`
-    );
+    process.stdout.write(`${C5.dim}  booting local sandbox + agent\u2026${C5.reset}
+`);
   }
   const agent = await createAgent2();
   const sys = agent.getSystemPrompt();
@@ -70409,39 +71247,36 @@ async function main() {
   process.stdout.write(buildBanner2(sys.length, version3));
   const updateNotice = getUpdateNotice(version3);
   if (updateNotice) {
-    process.stdout.write(
-      `${ui2.C.yellow}\u2191 ${updateNotice}${ui2.C.reset}
-`
-    );
+    process.stdout.write(`${C5.yellow}\u2191 ${updateNotice}${C5.reset}
+`);
   }
   refreshUpdateCacheInBackground(version3);
   if (consumePostUpdateLaunch(version3)) {
     process.stdout.write(
-      `${ui2.C.greenB}Seja bem vindo ao submundo.${ui2.C.reset} ${ui2.C.dim}clawfast atualizado para ${version3} \u2014 rode ${ui2.C.reset}${ui2.C.cyan}/nov${ui2.C.reset}${ui2.C.dim} para ver as novidades.${ui2.C.reset}
+      `${C5.greenB}Seja bem vindo ao submundo.${C5.reset} ${C5.dim}clawfast atualizado para ${version3} \u2014 rode ${C5.reset}${C5.cyan}/nov${C5.reset}${C5.dim} para ver as novidades.${C5.reset}
 `
     );
   }
+  process.stdout.write(
+    `${C5.dim}digite ${C5.reset}${C5.cyan}/${C5.reset}${C5.dim} para ver os comandos \xB7 \u2191\u2193 hist\xF3rico \xB7 Ctrl+C interrompe${C5.reset}
+`
+  );
+  const COMMANDS = [
+    { name: "/model", desc: "trocar o modelo (seletor com setas)" },
+    { name: "/skills", desc: "listar as skills instaladas" },
+    { name: "/skillcreator", desc: "criar uma nova skill" },
+    { name: "/system", desc: "salvar o system prompt (HTML) na \xC1rea de Trabalho" },
+    { name: "/nov", desc: "novidades desta vers\xE3o" },
+    { name: "/exit", desc: "fechar o clawfast" }
+  ];
   const pasteInput = createPasteInput();
-  const rl = import_node_readline3.default.createInterface({
-    input: pasteInput.input,
-    output: process.stdout,
-    terminal: true
-  });
+  const inputUI = new InteractiveInput2(pasteInput, COMMANDS);
   let closing = false;
-  let commandQueue = Promise.resolve();
-  let awaitingModelSelection = false;
-  let skillCreator = null;
-  const prompt = () => {
-    rl.setPrompt(
-      skillCreator ? skillPrompt(skillCreator.phase) : awaitingModelSelection ? modelPrompt() : shellPrompt2()
-    );
-    rl.prompt();
-  };
+  let shuttingDown = false;
   let activeAbort = null;
   let turnActive = false;
   let exitArmed = false;
   let exitTimer = null;
-  let lastSigint = 0;
   const armExit = () => {
     exitArmed = true;
     if (exitTimer) clearTimeout(exitTimer);
@@ -70450,69 +71285,58 @@ async function main() {
       exitTimer = null;
     }, 2e3);
   };
-  const handleSigint = () => {
-    const now2 = Date.now();
-    if (now2 - lastSigint < 60) return;
-    lastSigint = now2;
-    if (closing) return;
-    if (exitArmed) {
-      if (exitTimer) clearTimeout(exitTimer);
-      exitTimer = null;
-      exitArmed = false;
-      closing = true;
-      activeAbort?.abort();
-      process.stdout.write(`
-${ui2.C.dim}fechando\u2026${ui2.C.reset}
-`);
-      rl.close();
-      return;
-    }
-    if (activeAbort && !activeAbort.signal.aborted) {
-      activeAbort.abort();
-      process.stdout.write(
-        `
-${ui2.C.dim}interrompido \u2014 Ctrl+C de novo para fechar${ui2.C.reset}
-`
-      );
-    } else {
-      process.stdout.write(
-        `
-${ui2.C.dim}Ctrl+C de novo para fechar${ui2.C.reset}
+  const shutdown = async () => {
+    if (shuttingDown) return;
+    shuttingDown = true;
+    closing = true;
+    pasteInput.dispose();
+    process.stdout.write("\nClosing sandbox...\n");
+    await agent.close();
+    process.exit(0);
+  };
+  const desktopDir = () => {
+    const home = import_node_os6.default.homedir();
+    const candidates = [
+      process.env.OneDrive ? import_node_path9.default.join(process.env.OneDrive, "Desktop") : null,
+      process.env.USERPROFILE ? import_node_path9.default.join(process.env.USERPROFILE, "Desktop") : null,
+      import_node_path9.default.join(home, "Desktop"),
+      import_node_path9.default.join(home, "\xC1rea de Trabalho"),
+      import_node_path9.default.join(home, "OneDrive", "Desktop")
+    ].filter((p) => Boolean(p));
+    return candidates.find((p) => (0, import_node_fs8.existsSync)(p)) ?? home;
+  };
+  const printFatal = (err) => {
+    process.stderr.write(
+      `
+[fatal] ${err instanceof Error ? err.stack || err.message : String(err)}
 `
-      );
-      if (!awaitingModelSelection) prompt();
-    }
-    armExit();
+    );
   };
-  process.removeAllListeners("SIGINT");
-  process.on("SIGINT", handleSigint);
-  rl.on("SIGINT", handleSigint);
+  let skillCreator = null;
   const printSkillList = () => {
     const skills = listSkills();
     if (skills.length === 0) {
       process.stdout.write(
         `
-${ui2.C.dim}nenhuma skill instalada. crie uma com /skillcreator${ui2.C.reset}
+${C5.dim}nenhuma skill instalada. crie uma com /skillcreator${C5.reset}
 `
       );
       return;
     }
     process.stdout.write(
       `
-${ui2.C.cyan}skills instaladas${ui2.C.reset} ${ui2.C.dim}(${skillsDir()})${ui2.C.reset}
+${C5.cyan}skills instaladas${C5.reset} ${C5.dim}(${skillsDir()})${C5.reset}
 `
     );
     for (const s of skills) {
-      const flags = s.always ? ` ${ui2.C.yellow}[sempre]${ui2.C.reset}` : "";
+      const flags = s.always ? ` ${C5.yellow}[sempre]${C5.reset}` : "";
       process.stdout.write(
-        `  ${ui2.C.green}${s.name}${ui2.C.reset}${flags} ${ui2.C.dim}\u2014${ui2.C.reset} ${s.description}
+        `  ${C5.green}${s.name}${C5.reset}${flags} ${C5.dim}\u2014${C5.reset} ${s.description}
 `
       );
     }
-    process.stdout.write(
-      `${ui2.C.dim}remover: /skill delete <nome>${ui2.C.reset}
-`
-    );
+    process.stdout.write(`${C5.dim}remover: /skill delete <nome>${C5.reset}
+`);
   };
   const handleSkillCommand = (input) => {
     if (input === "/skillcreator") {
@@ -70525,9 +71349,9 @@ ${ui2.C.cyan}skills instaladas${ui2.C.reset} ${ui2.C.dim}(${skillsDir()})${ui2.C
       };
       process.stdout.write(
         `
-${ui2.C.greenB}criar skill${ui2.C.reset} ${ui2.C.dim}(/cancelar para abortar)${ui2.C.reset}
-${ui2.C.dim}skills ficam disponiveis para TODOS os modelos; o conteudo completo so e carregado quando o pedido casa com a skill.${ui2.C.reset}
-${ui2.C.cyan}nome da skill?${ui2.C.reset} ${ui2.C.dim}(ex: xss-recon)${ui2.C.reset}
+${C5.greenB}criar skill${C5.reset} ${C5.dim}(/cancelar para abortar)${C5.reset}
+${C5.dim}skills ficam disponiveis para TODOS os modelos; o conteudo completo so e carregado quando o pedido casa com a skill.${C5.reset}
+${C5.cyan}nome da skill?${C5.reset} ${C5.dim}(ex: xss-recon)${C5.reset}
 `
       );
       return;
@@ -70545,29 +71369,27 @@ ${ui2.C.cyan}nome da skill?${ui2.C.reset} ${ui2.C.dim}(ex: xss-recon)${ui2.C.res
     }
     if (sub === "delete" || sub === "rm" || sub === "remove") {
       if (!arg) {
-        process.stdout.write(
-          `${ui2.C.yellow}uso: /skill delete <nome>${ui2.C.reset}
-`
-        );
+        process.stdout.write(`${C5.yellow}uso: /skill delete <nome>${C5.reset}
+`);
         return;
       }
       if (deleteSkill(arg)) {
         await agent.refreshSkills();
         process.stdout.write(
-          `${ui2.C.green}\u2713 skill '${slugify(arg)}' removida${ui2.C.reset}
+          `${C5.green}\u2713 skill '${slugify(arg)}' removida${C5.reset}
 `
         );
       } else {
         process.stdout.write(
-          `${ui2.C.yellow}skill '${arg}' nao encontrada${ui2.C.reset}
+          `${C5.yellow}skill '${arg}' nao encontrada${C5.reset}
 `
         );
       }
       return;
     }
     process.stdout.write(
-      `${ui2.C.yellow}subcomando desconhecido: ${sub}${ui2.C.reset}
-${ui2.C.dim}use: /skillcreator | /skills | /skill delete <nome>${ui2.C.reset}
+      `${C5.yellow}subcomando desconhecido: ${sub}${C5.reset}
+${C5.dim}use: /skillcreator | /skills | /skill delete <nome>${C5.reset}
 `
     );
   };
@@ -70575,7 +71397,7 @@ ${ui2.C.dim}use: /skillcreator | /skills | /skill delete <nome>${ui2.C.reset}
     const text2 = sc.bodyLines.join("\n");
     const lines = text2 ? text2.split("\n").length : 0;
     process.stdout.write(
-      `${ui2.C.dim}  capturado: ${lines} linhas, ${text2.length} chars \u2014 continue colando, /fim para salvar, /desfazer para remover o ultimo, /cancelar para abortar${ui2.C.reset}
+      `${C5.dim}  capturado: ${lines} linhas, ${text2.length} chars \u2014 continue colando, /fim para salvar, /desfazer para remover o ultimo, /cancelar para abortar${C5.reset}
 `
     );
   };
@@ -70584,11 +71406,9 @@ ${ui2.C.dim}use: /skillcreator | /skills | /skill delete <nome>${ui2.C.reset}
     if (!sc) return;
     if (input === "/cancelar" || input === "/cancel") {
       skillCreator = null;
-      process.stdout.write(
-        `
-${ui2.C.dim}criacao de skill cancelada${ui2.C.reset}
-`
-      );
+      process.stdout.write(`
+${C5.dim}criacao de skill cancelada${C5.reset}
+`);
       return;
     }
     switch (sc.phase) {
@@ -70596,7 +71416,7 @@ ${ui2.C.dim}criacao de skill cancelada${ui2.C.reset}
         const slug = slugify(input);
         if (!slug) {
           process.stdout.write(
-            `${ui2.C.yellow}nome invalido \u2014 tente de novo${ui2.C.reset}
+            `${C5.yellow}nome invalido \u2014 tente de novo${C5.reset}
 `
           );
           return;
@@ -70604,22 +71424,20 @@ ${ui2.C.dim}criacao de skill cancelada${ui2.C.reset}
         sc.name = slug;
         if (listSkills().some((s) => s.name === slug)) {
           process.stdout.write(
-            `${ui2.C.yellow}ja existe uma skill '${slug}' \u2014 sera sobrescrita${ui2.C.reset}
+            `${C5.yellow}ja existe uma skill '${slug}' \u2014 sera sobrescrita${C5.reset}
 `
           );
         }
         sc.phase = "desc";
-        process.stdout.write(
-          `${ui2.C.cyan}descricao curta (1 linha)?${ui2.C.reset}
-`
-        );
+        process.stdout.write(`${C5.cyan}descricao curta (1 linha)?${C5.reset}
+`);
         return;
       }
       case "desc": {
         sc.description = input;
         sc.phase = "triggers";
         process.stdout.write(
-          `${ui2.C.cyan}palavras-gatilho?${ui2.C.reset} ${ui2.C.dim}(separadas por virgula; Enter usa o proprio nome)${ui2.C.reset}
+          `${C5.cyan}palavras-gatilho?${C5.reset} ${C5.dim}(separadas por virgula; Enter usa o proprio nome)${C5.reset}
 `
         );
         return;
@@ -70631,7 +71449,7 @@ ${ui2.C.dim}criacao de skill cancelada${ui2.C.reset}
           sc.phase = "body";
           sc.bodyLines.push(line.replace(/\r$/, ""));
           process.stdout.write(
-            `${ui2.C.yellow}isso parece a skill, nao gatilhos \u2014 capturei como conteudo.${ui2.C.reset}
+            `${C5.yellow}isso parece a skill, nao gatilhos \u2014 capturei como conteudo.${C5.reset}
 `
           );
           printBodyTally(sc);
@@ -70640,7 +71458,7 @@ ${ui2.C.dim}criacao de skill cancelada${ui2.C.reset}
         sc.triggers = input ? input.split(",").map((t) => t.trim()).filter(Boolean) : [];
         sc.phase = "body";
         process.stdout.write(
-          `${ui2.C.cyan}cole ou escreva a skill agora${ui2.C.reset} ${ui2.C.dim}(qualquer tamanho). termine com uma linha contendo so /fim${ui2.C.reset}
+          `${C5.cyan}cole ou escreva a skill agora${C5.reset} ${C5.dim}(qualquer tamanho). termine com uma linha contendo so /fim${C5.reset}
 `
         );
         return;
@@ -70650,7 +71468,7 @@ ${ui2.C.dim}criacao de skill cancelada${ui2.C.reset}
           const body = sc.bodyLines.join("\n").trim();
           if (!body) {
             process.stdout.write(
-              `${ui2.C.yellow}corpo vazio \u2014 cole algum conteudo ou /cancelar${ui2.C.reset}
+              `${C5.yellow}corpo vazio \u2014 cole algum conteudo ou /cancelar${C5.reset}
 `
             );
             return;
@@ -70665,22 +71483,20 @@ ${ui2.C.dim}criacao de skill cancelada${ui2.C.reset}
           await agent.refreshSkills();
           process.stdout.write(
             `
-${ui2.C.green}\u2713 skill '${res.skill.name}' ${res.overwritten ? "atualizada" : "criada"}${ui2.C.reset} ${ui2.C.dim}(${res.file})${ui2.C.reset}
-${ui2.C.dim}ja disponivel para todos os modelos nesta sessao.${ui2.C.reset}
+${C5.green}\u2713 skill '${res.skill.name}' ${res.overwritten ? "atualizada" : "criada"}${C5.reset} ${C5.dim}(${res.file})${C5.reset}
+${C5.dim}ja disponivel para todos os modelos nesta sessao.${C5.reset}
 `
           );
           return;
         }
         if (input === "/desfazer" || input === "/undo") {
           if (sc.bodyLines.length === 0) {
-            process.stdout.write(
-              `${ui2.C.dim}nada para desfazer${ui2.C.reset}
-`
-            );
+            process.stdout.write(`${C5.dim}nada para desfazer${C5.reset}
+`);
           } else {
             sc.bodyLines.pop();
             process.stdout.write(
-              `${ui2.C.yellow}ultimo trecho removido.${ui2.C.reset}
+              `${C5.yellow}ultimo trecho removido.${C5.reset}
 `
             );
             printBodyTally(sc);
@@ -70693,206 +71509,197 @@ ${ui2.C.dim}ja disponivel para todos os modelos nesta sessao.${ui2.C.reset}
       }
     }
   };
+  const printModelResult = (result) => {
+    process.stdout.write(
+      `${result.ok ? `${C5.green}\u2713` : `${C5.red}\u2717`} ${result.message}${C5.reset}
+`
+    );
+  };
+  const openModelSelector = async () => {
+    const state = agent.getModelSelection();
+    const items = [
+      {
+        label: "Auto \u2014 cadeia de fallback autom\xE1tica",
+        hint: "tenta os modelos em ordem"
+      },
+      ...state.chain.map((c) => ({ label: c.label, hint: c.key }))
+    ];
+    const activeIdx = state.mode === "auto" ? 0 : Math.max(
+      0,
+      1 + state.chain.findIndex((c) => c.key === state.activeModelKey)
+    );
+    const choice2 = await inputUI.select("selecionar modelo", items, activeIdx);
+    if (choice2 === null) {
+      process.stdout.write(`${C5.dim}sele\xE7\xE3o de modelo cancelada${C5.reset}
+`);
+      return;
+    }
+    const arg = choice2 === 0 ? "auto" : state.chain[choice2 - 1].key;
+    try {
+      printModelResult(await agent.setModelSelection(arg));
+    } catch (err) {
+      printFatal(err);
+    }
+  };
   const handleLine = async (line) => {
     if (closing) return;
     const input = line.trim();
     if (skillCreator) {
       await handleSkillCreatorLine(line, input);
-      if (!closing) prompt();
       return;
     }
     if (input === "/exit" || input === "/quit") {
       closing = true;
-      rl.close();
       return;
     }
     if (input === "/skillcreator" || input === "/skill" || input === "/skills") {
       handleSkillCommand(input);
-      if (!closing) prompt();
       return;
     }
     if (input.startsWith("/skill ") || input.startsWith("/skills ")) {
       await handleSkillSubcommand(input);
-      if (!closing) prompt();
       return;
     }
-    if (awaitingModelSelection) {
-      if (!input || input === "cancelar" || input === "cancel" || input === "sair" || input === "q") {
-        awaitingModelSelection = false;
-        process.stdout.write(
-          `
-${ui2.C.dim}selecao de modelo cancelada${ui2.C.reset}
-`
-        );
-        if (!closing) prompt();
-        return;
-      }
+    if (input === "/model" || input === "/models") {
+      await openModelSelector();
+      return;
+    }
+    if (input.startsWith("/model ") || input.startsWith("/models ")) {
       const arg = input.replace(/^\/models?\s*/, "");
       try {
-        const result = await agent.setModelSelection(arg);
-        process.stdout.write(formatModelSelection(result));
-        awaitingModelSelection = !result.ok;
+        printModelResult(await agent.setModelSelection(arg));
       } catch (err) {
-        process.stderr.write(
-          `
-[fatal] ${err instanceof Error ? err.stack || err.message : String(err)}
-`
-        );
-        awaitingModelSelection = false;
+        printFatal(err);
       }
-      if (!closing) prompt();
-      return;
-    }
-    if (!input) {
-      prompt();
       return;
     }
-    if (input === "/model" || input === "/models" || input.startsWith("/model ") || input.startsWith("/models ")) {
-      const arg = input.replace(/^\/models?\s*/, "");
+    if (input === "/system") {
+      const sysText = agent.getSystemPrompt();
+      const audit = agent.getSystemPromptAudit();
+      const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").replace("T", "_").slice(0, 19);
+      const filePath = import_node_path9.default.join(
+        desktopDir(),
+        `clawfast-system-prompt_${stamp}.html`
+      );
+      const meta3 = `clawfast v${clawfastVersion()} \u2014 system prompt \xB7 gerado em ${(/* @__PURE__ */ new Date()).toLocaleString()} \xB7 ${audit.chars.toLocaleString()} chars \xB7 fonte ${audit.source} \xB7 verificado ${audit.requiredMarkersVerified ? "sim" : "nao"}`;
+      const b64 = Buffer.from(sysText, "utf8").toString("base64");
+      const html = `<!doctype html><html lang="pt-br"><head><meta charset="utf-8"><title>clawfast \u2014 system prompt</title><style>body{background:#0b0f0b;color:#bfffbf;font:14px/1.55 ui-monospace,Consolas,Menlo,monospace;margin:0;padding:28px}h1{color:#7CFC00;font-size:18px;margin:0 0 6px}.meta{color:#6f9a6f;margin:0 0 18px;font-size:12px}pre{white-space:pre-wrap;word-wrap:break-word;margin:0}</style></head><body><h1>clawfast \u2014 system prompt</h1><div class="meta">${meta3}</div><pre id="c"></pre><script>document.getElementById("c").textContent=decodeURIComponent(escape(atob("${b64}")));</script></body></html>`;
       try {
-        const result = await agent.setModelSelection(arg || "list");
-        awaitingModelSelection = !arg && result.ok;
+        await (0, import_promises2.writeFile)(filePath, html, "utf8");
         process.stdout.write(
-          formatModelSelection(result, { choosing: awaitingModelSelection })
+          `${C5.green}\u2713 system prompt salvo${C5.reset} ${C5.dim}(${sysText.length.toLocaleString()} caracteres \u2014 abra no navegador)${C5.reset}
+${C5.cyan}${filePath}${C5.reset}
+`
         );
       } catch (err) {
-        process.stderr.write(
-          `
-[fatal] ${err instanceof Error ? err.stack || err.message : String(err)}
+        process.stdout.write(
+          `${C5.red}\u2717 n\xE3o consegui salvar o arquivo:${C5.reset} ${err instanceof Error ? err.message : String(err)}
 `
         );
-        awaitingModelSelection = false;
       }
-      if (!closing) prompt();
       return;
     }
-    if (input === "/system") {
-      const sys2 = agent.getSystemPrompt();
-      const audit = agent.getSystemPromptAudit();
-      process.stdout.write(
-        `\x1B[90m\u2500\u2500\u2500\u2500 system prompt (${sys2.length.toLocaleString()} caracteres) \u2500\u2500\u2500\u2500\x1B[0m
-`
-      );
+    if (input === "/nov" || input === "/novidades") {
       process.stdout.write(
-        `\x1B[90mfonte: ${audit.source} | verificado: ${audit.requiredMarkersVerified ? "sim" : "nao"} | chars: ${audit.chars.toLocaleString()}${audit.dumpPath ? ` | dump: ${audit.dumpPath}` : ""}\x1B[0m
+        `
+${C5.cyan}${renderNews(clawfastVersion())}${C5.reset}
 `
       );
-      process.stdout.write(sys2 + "\n");
-      process.stdout.write(`\x1B[90m\u2500\u2500\u2500\u2500 fim do system prompt \u2500\u2500\u2500\u2500\x1B[0m
-`);
-      if (!closing) prompt();
-      return;
-    }
-    if (input === "/nov" || input === "/novidades") {
-      process.stdout.write(`
-${ui2.C.cyan}${renderNews(clawfastVersion())}${ui2.C.reset}
-`);
-      if (!closing) prompt();
       return;
     }
+    if (!input) return;
     process.stdout.write("\n" + agentHeader2());
     activeAbort = new AbortController();
     turnActive = true;
-    rl.resume();
+    inputUI.beginTurn(
+      (l) => {
+        if (agent.isRunningCommand()) agent.sendStdin(l);
+      },
+      () => {
+        if (exitArmed) {
+          closing = true;
+          activeAbort?.abort();
+          return;
+        }
+        if (activeAbort && !activeAbort.signal.aborted) {
+          activeAbort.abort();
+          process.stdout.write(
+            `
+${C5.dim}interrompido \u2014 Ctrl+C de novo para fechar${C5.reset}
+`
+          );
+        }
+        armExit();
+      }
+    );
     try {
       await agent.send(input, activeAbort.signal);
     } catch (err) {
-      process.stderr.write(
-        `
-[fatal] ${err instanceof Error ? err.stack || err.message : String(err)}
-`
-      );
+      printFatal(err);
     } finally {
+      inputUI.endTurn();
       activeAbort = null;
       turnActive = false;
     }
-    if (!closing) prompt();
   };
-  prompt();
-  rl.on("line", (rawLine) => {
-    const line = pasteInput.expand(rawLine);
+  process.removeAllListeners("SIGINT");
+  process.on("SIGINT", () => {
     if (turnActive) {
-      if (agent.isRunningCommand()) {
-        agent.sendStdin(line);
-      }
+      activeAbort?.abort();
       return;
     }
-    rl.pause();
-    commandQueue = commandQueue.then(() => handleLine(line)).catch((err) => {
-      process.stderr.write(
-        `
-[fatal] ${err instanceof Error ? err.stack || err.message : String(err)}
-`
-      );
-    }).finally(() => {
-      if (!closing) rl.resume();
-    });
-  });
-  rl.on("close", async () => {
-    closing = true;
-    pasteInput.dispose();
-    await commandQueue.catch(() => void 0);
-    process.stdout.write("\nClosing sandbox...\n");
-    await agent.close();
-    process.exit(0);
+    void shutdown();
   });
   process.on("exit", () => pasteInput.dispose());
-}
-function modelPrompt() {
-  return "\n\x1B[96m\x1B[1mmodelo\x1B[0m\x1B[92m\x1B[1m>\x1B[0m ";
-}
-function skillPrompt(phase) {
-  const label = phase === "name" ? "nome" : phase === "desc" ? "descricao" : phase === "triggers" ? "gatilhos" : "skill";
-  return `\x1B[96m\x1B[1m${label}\x1B[0m\x1B[92m\x1B[1m>\x1B[0m `;
-}
-function formatModelSelection(result, options = {}) {
-  const { C: C4 } = {
-    C: {
-      reset: "\x1B[0m",
-      bold: "\x1B[1m",
-      dim: "\x1B[90m",
-      green: "\x1B[32m",
-      cyan: "\x1B[36m",
-      yellow: "\x1B[33m",
-      red: "\x1B[31m"
+  const currentSkillLabel = () => {
+    if (!skillCreator) return void 0;
+    switch (skillCreator.phase) {
+      case "name":
+        return "nome";
+      case "desc":
+        return "descri\xE7\xE3o";
+      case "triggers":
+        return "gatilhos";
+      default:
+        return "skill";
     }
   };
-  const statusColor = result.ok ? C4.green : C4.red;
-  const lines = [
-    `${statusColor}${result.ok ? "ok" : "erro"}${C4.reset} ${result.message}`,
-    `${C4.dim}modo atual:${C4.reset} ${result.selection.mode === "auto" ? `${C4.yellow}auto / fallback${C4.reset}` : `${C4.green}fixo${C4.reset}`}`,
-    "",
-    `${C4.cyan}${C4.bold}Modelos disponiveis${C4.reset}`
-  ];
-  for (const choice2 of result.selection.chain) {
-    const isActive = choice2.key === result.selection.activeModelKey;
-    const marker25 = isActive ? result.selection.mode === "fixed" ? "*" : ">" : " ";
-    lines.push(
-      `${marker25} ${choice2.index}. ${choice2.label} ${C4.dim}(${choice2.key})${C4.reset}`
-    );
-  }
-  if (result.selection.unavailable.length > 0) {
-    lines.push("", `${C4.yellow}${C4.bold}Indisponiveis${C4.reset}`);
-    for (const group of result.selection.unavailable) {
-      lines.push(`${group.provider}: ${C4.dim}${group.reason}${C4.reset}`);
-      for (const model of group.models) {
-        lines.push(`  - ${model.label} ${C4.dim}(${model.key})${C4.reset}`);
+  while (!closing) {
+    const skillLabel = currentSkillLabel();
+    const res = await inputUI.prompt(skillLabel ? { label: skillLabel } : {});
+    if (closing) break;
+    if (res.type === "eof") {
+      closing = true;
+      break;
+    }
+    if (res.type === "sigint") {
+      if (exitArmed) {
+        closing = true;
+        break;
       }
+      process.stdout.write(`${C5.dim}Ctrl+C de novo para fechar${C5.reset}
+`);
+      armExit();
+      continue;
+    }
+    if (!skillCreator && !res.value.trim()) continue;
+    exitArmed = false;
+    try {
+      await handleLine(res.value);
+    } catch (err) {
+      printFatal(err);
     }
   }
-  lines.push(
-    "",
-    options.choosing ? `${C4.dim}Digite o numero, nome do modelo, auto para fallback, ou cancelar.${C4.reset}` : `${C4.dim}Use /model <numero> para fixar, /model auto para voltar ao fallback automatico.${C4.reset}`
-  );
-  return `
-${lines.join("\n")}
-`;
+  await shutdown();
 }
-var import_node_readline3, deepseekEnabled, configuredModelProviders;
+var import_node_os6, import_node_path9, import_node_fs8, import_promises2, deepseekEnabled, configuredModelProviders;
 var init_index = __esm({
   "index.ts"() {
     "use strict";
-    import_node_readline3 = __toESM(require("node:readline"));
+    import_node_os6 = __toESM(require("node:os"));
+    import_node_path9 = __toESM(require("node:path"));
+    import_node_fs8 = require("node:fs");
+    import_promises2 = require("node:fs/promises");
     init_paste_input();
     init_boot_ui();
     init_config();