clawfast 2.0.0 → 2.0.1

package/README.md

@@ -136,7 +136,7 @@ NVIDIA_BASE_URL=https://integrate.api.nvidia.com/v1
 Modelos usados pelo CLI (wiring via `.chat(...)`, chat-completions):
 
 - `mistralai/mistral-medium-3.5-128b`
-- `moonshotai/kimi-k2.6`
+- `openai/gpt-oss-120b`
 - `z-ai/glm-5.1`
 - `qwen/qwen3.5-397b-a17b`
 
@@ -172,7 +172,7 @@ A ordem de fallback do CLI e `CLI_MODEL_CHAIN` em
 [`../lib/ai/providers.ts`](../lib/ai/providers.ts):
 
 1. NVIDIA `mistralai/mistral-medium-3.5-128b`, se `NVIDIA_API_KEY` estiver configurada
-2. NVIDIA `moonshotai/kimi-k2.6`
+2. NVIDIA `openai/gpt-oss-120b`
 3. NVIDIA `z-ai/glm-5.1`
 4. NVIDIA `qwen/qwen3.5-397b-a17b`
 5. Kimi / DeepSeek por sessao web logada (proxies), se habilitados

package/dist/clawfast.cjs

@@ -426,6 +426,52 @@ ${line}
   }
   import_node_fs.default.writeFileSync(filePath, content, { encoding: "utf8", mode: 384 });
 }
+function fileDefines(filePath, key) {
+  try {
+    const content = import_node_fs.default.readFileSync(filePath, "utf8");
+    return new RegExp(`^${key}=`, "m").test(content);
+  } catch {
+    return false;
+  }
+}
+function swapNvidiaKey(key) {
+  const local = import_node_path.default.resolve(process.cwd(), ".env.local");
+  const target = fileDefines(local, "NVIDIA_API_KEY") ? local : clawfastEnvPath();
+  setEnvVar(target, "NVIDIA_API_KEY", key);
+  process.env.NVIDIA_API_KEY = key;
+  return target;
+}
+async function testNvidiaKey(key) {
+  const baseURL = process.env.NVIDIA_BASE_URL || "https://integrate.api.nvidia.com/v1";
+  try {
+    const res = await fetch(`${baseURL.replace(/\/$/, "")}/chat/completions`, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${key}`,
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({
+        model: "openai/gpt-oss-120b",
+        messages: [{ role: "user", content: "hi" }],
+        max_tokens: 1
+      })
+    });
+    if (res.ok) return { ok: true, status: res.status, detail: "OK" };
+    let detail = res.statusText || `HTTP ${res.status}`;
+    try {
+      const body = await res.json();
+      detail = body.detail || body.error?.message || body.title || detail;
+    } catch {
+    }
+    return { ok: false, status: res.status, detail };
+  } catch (err) {
+    return {
+      ok: false,
+      status: 0,
+      detail: err instanceof Error ? err.message : String(err)
+    };
+  }
+}
 function promptLine(question) {
   const rl = import_node_readline.default.createInterface({
     input: process.stdin,
@@ -502,7 +548,7 @@ var clawfastVersion, isDevVersion, isNewerVersion;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    clawfastVersion = () => true ? "2.0.0" : "0.0.0-dev";
+    clawfastVersion = () => true ? "2.0.1" : "0.0.0-dev";
     isDevVersion = () => clawfastVersion().includes("-dev");
     isNewerVersion = (a, b) => {
       const parse3 = (v) => v.split("-")[0].split(".").map((n) => Number.parseInt(n, 10) || 0);
@@ -869,14 +915,140 @@ var init_skills = __esm({
   }
 });
 
+// src/ui.ts
+var ui_exports = {};
+__export(ui_exports, {
+  C: () => C2,
+  agentHeader: () => agentHeader,
+  buildBanner: () => buildBanner,
+  shellPrompt: () => shellPrompt,
+  shortCwd: () => shortCwd,
+  ui: () => ui,
+  vlen: () => vlen
+});
+function shortCwd() {
+  const cwd = process.cwd();
+  const home = import_node_os2.default.homedir();
+  const rel = cwd.startsWith(home) ? "~" + cwd.slice(home.length) : cwd;
+  const norm = rel.replace(/\\/g, "/");
+  if (norm.length <= 30) return norm;
+  const parts = norm.split("/");
+  return parts.length > 3 ? `${parts[0]}/\u2026/${parts[parts.length - 1]}` : norm.slice(-30);
+}
+function asciiTitle(text2) {
+  const rows = 6;
+  const out3 = [];
+  for (let r = 0; r < rows; r++) {
+    out3.push(
+      [...text2].map((ch) => GLYPHS[ch] ? GLYPHS[ch][r] : "      ").join(" ")
+    );
+  }
+  return out3;
+}
+function buildBanner(_systemPromptChars, version3 = "1") {
+  const user = (import_node_os2.default.userInfo().username || "hacker").toLowerCase();
+  const host = (import_node_os2.default.hostname() || "localhost").split(".")[0].toLowerCase();
+  const art = asciiTitle("CLAWFAST");
+  const artW = vlen(art[0]);
+  const slogan = "Com o clawfast voc\xEA faz tudo";
+  const header = [
+    "",
+    ...art.map((line) => `${C2.greenB}${C2.bold}${line}${C2.reset}`),
+    "",
+    `${C2.cyanB}${C2.bold}${center(slogan, artW)}${C2.reset}`,
+    ""
+  ];
+  const info = [
+    { text: "" },
+    { text: `Bem-vindo de volta, ${user}!`, accent: true },
+    { text: "" },
+    { text: "clawfast usa a pasta SPRIT/ para criar" },
+    { text: "arquivos, scripts e tudo mais." },
+    { text: "" },
+    { text: `${user}@${host} \xB7 sem limites` },
+    { text: shortCwd() },
+    { text: "" }
+  ];
+  const title = `clawfast v${version3}`;
+  const topFill = "\u2500".repeat(Math.max(0, BOX_W - vlen(title) - 5));
+  const top = `${C2.green}\u256D\u2500 ${C2.greenB}${C2.bold}${title}${C2.reset}${C2.green} ${topFill}\u256E${C2.reset}`;
+  const bottom = `${C2.green}\u2570${"\u2500".repeat(BOX_W - 2)}\u256F${C2.reset}`;
+  const cardLines = info.map(({ text: text2, accent }) => {
+    const color = accent ? `${C2.greenB}${C2.bold}` : C2.green;
+    const body = `${color}${padEndV(text2, INNER)}${C2.reset}`;
+    return `${C2.green}\u2502 ${C2.reset}${body}${C2.green} \u2502${C2.reset}`;
+  });
+  const card = [top, ...cardLines, bottom];
+  return "\n" + [...header, ...card].join("\n") + "\n";
+}
+function shellPrompt() {
+  const user = (import_node_os2.default.userInfo().username || "hacker").toLowerCase();
+  const host = (import_node_os2.default.hostname() || "localhost").split(".")[0].toLowerCase();
+  const W = 52;
+  const label = " \u2709  mensagem ";
+  const topFill = "\u2500".repeat(Math.max(0, W - vlen(label) - 3));
+  const top = `${C2.green}\u256D\u2500${C2.greenB}${C2.bold}${label}${C2.reset}${C2.green}${topFill}\u256E${C2.reset}`;
+  const id = `${user}\u327F${host} \xB7 ${shortCwd()}`;
+  const mid = `${C2.green}\u2502 ${C2.dim}${id}${C2.reset}`;
+  const bottom = `${C2.green}\u2570\u2500${C2.greenB}${C2.bold}\u276F${C2.reset} `;
+  return `
+${top}
+${mid}
+${bottom}`;
+}
+function agentHeader() {
+  return `${C2.magenta}\u256D\u2500 clawfast ${"\u2500".repeat(20)}${C2.reset}
+`;
+}
+var import_node_os2, ESC, C2, INNER, BOX_W, vlen, padEndV, center, GLYPHS, ui;
+var init_ui = __esm({
+  "src/ui.ts"() {
+    "use strict";
+    import_node_os2 = __toESM(require("node:os"));
+    ESC = "\x1B[";
+    C2 = {
+      reset: `${ESC}0m`,
+      bold: `${ESC}1m`,
+      dim: `${ESC}90m`,
+      green: `${ESC}32m`,
+      greenB: `${ESC}92m`,
+      cyan: `${ESC}36m`,
+      cyanB: `${ESC}96m`,
+      magenta: `${ESC}95m`,
+      yellow: `${ESC}93m`,
+      red: `${ESC}91m`
+    };
+    INNER = 42;
+    BOX_W = INNER + 4;
+    vlen = (s) => [...s.replace(/\x1b\[[0-9;]*m/g, "")].length;
+    padEndV = (s, w) => s + " ".repeat(Math.max(0, w - vlen(s)));
+    center = (s, w) => {
+      const pad = Math.max(0, w - vlen(s));
+      const left = Math.floor(pad / 2);
+      return " ".repeat(left) + s + " ".repeat(pad - left);
+    };
+    GLYPHS = {
+      C: [" \u2588\u2588\u2588\u2588\u2588", "\u2588\u2588    ", "\u2588\u2588    ", "\u2588\u2588    ", "\u2588\u2588    ", " \u2588\u2588\u2588\u2588\u2588"],
+      L: ["\u2588\u2588    ", "\u2588\u2588    ", "\u2588\u2588    ", "\u2588\u2588    ", "\u2588\u2588    ", "\u2588\u2588\u2588\u2588\u2588\u2588"],
+      A: [" \u2588\u2588\u2588\u2588 ", "\u2588\u2588  \u2588\u2588", "\u2588\u2588  \u2588\u2588", "\u2588\u2588\u2588\u2588\u2588\u2588", "\u2588\u2588  \u2588\u2588", "\u2588\u2588  \u2588\u2588"],
+      W: ["\u2588\u2588   \u2588\u2588", "\u2588\u2588   \u2588\u2588", "\u2588\u2588 \u2588 \u2588\u2588", "\u2588\u2588 \u2588 \u2588\u2588", "\u2588\u2588\u2588\u2588\u2588\u2588\u2588", " \u2588\u2588 \u2588\u2588 "],
+      F: ["\u2588\u2588\u2588\u2588\u2588\u2588", "\u2588\u2588    ", "\u2588\u2588\u2588\u2588\u2588 ", "\u2588\u2588    ", "\u2588\u2588    ", "\u2588\u2588    "],
+      S: [" \u2588\u2588\u2588\u2588\u2588", "\u2588\u2588    ", " \u2588\u2588\u2588\u2588 ", "    \u2588\u2588", "    \u2588\u2588", "\u2588\u2588\u2588\u2588\u2588 "],
+      T: ["\u2588\u2588\u2588\u2588\u2588\u2588", "  \u2588\u2588  ", "  \u2588\u2588  ", "  \u2588\u2588  ", "  \u2588\u2588  ", "  \u2588\u2588  "]
+    };
+    ui = { C: C2, buildBanner, shellPrompt, agentHeader };
+  }
+});
+
 // src/news.ts
-var import_node_fs4, import_node_path4, NEWS, latestNewsVersion, renderNews, stateFile, readState, writeState, consumePostUpdateLaunch;
+var import_node_fs4, import_node_path4, NEWS, latestNewsVersion, wrapText, renderNews, stateFile, readState, writeState, consumePostUpdateLaunch;
 var init_news = __esm({
   "src/news.ts"() {
     "use strict";
     import_node_fs4 = __toESM(require("node:fs"));
     import_node_path4 = __toESM(require("node:path"));
     init_config();
+    init_ui();
     NEWS = {
       "2.0.0": [
         'Modo ANALISE DE PROJETO (somente leitura): peca "analise/varredura/auditoria do meu projeto" e o clawfast troca sozinho para um auditor dedicado \u2014 sem /comando. Diga "modo normal" para sair.',
@@ -889,7 +1061,7 @@ var init_news = __esm({
       "1.0.3": [
         "Atualizacao: `clawfast update` atualiza o CLI e mostra as boas-vindas; aparece um aviso quando ha versao nova; /nov lista as novidades.",
         "Skills: /skillcreator cria ou cola uma skill (de qualquer tamanho), /skills lista e /skill delete remove. As skills viram conhecimento disponivel para TODOS os modelos.",
-        "Modelos na NVIDIA build: mistral-medium-3.5, kimi-k2.6, glm-5.1 e qwen3.5-397b \u2014 todos com function calling de verdade (as ferramentas disparam).",
+        "Modelos na NVIDIA build: mistral-medium-3.5, gpt-oss-120b, glm-5.1 e qwen3.5-397b \u2014 todos com function calling de verdade (as ferramentas disparam).",
         "Resiliencia a rate limit (429): cai para os outros modelos como contingencia e espera/retenta a cadeia automaticamente."
       ]
     };
@@ -905,14 +1077,50 @@ var init_news = __esm({
         return 0;
       })[0];
     };
+    wrapText = (text2, width) => {
+      const words = text2.split(/\s+/).filter(Boolean);
+      const lines = [];
+      let line = "";
+      for (const word of words) {
+        if (line && vlen(line) + 1 + vlen(word) > width) {
+          lines.push(line);
+          line = word;
+        } else {
+          line = line ? `${line} ${word}` : word;
+        }
+      }
+      if (line) lines.push(line);
+      return lines.length ? lines : [""];
+    };
     renderNews = (version3) => {
       const key = NEWS[version3] ? version3 : latestNewsVersion();
       if (!key || !NEWS[key]) {
-        return "Sem novidades registradas para esta versao.";
-      }
-      const lines = NEWS[key].map((item) => `  \u2022 ${item}`).join("\n");
-      return `Novidades da versao ${key}:
-${lines}`;
+        return `${C2.dim}Sem novidades registradas para esta versao.${C2.reset}`;
+      }
+      const cols2 = process.stdout.columns || 80;
+      const BOX = Math.min(Math.max(cols2 - 2, 48), 80);
+      const INNER2 = BOX - 4;
+      const BULLET = "\u2022 ";
+      const INDENT = " ".repeat(BULLET.length);
+      const title = `Novidades \xB7 v${key}`;
+      const topFill = "\u2500".repeat(Math.max(0, BOX - vlen(title) - 5));
+      const top = `${C2.green}\u256D\u2500 ${C2.greenB}${C2.bold}${title}${C2.reset}${C2.green} ${topFill}\u256E${C2.reset}`;
+      const bottom = `${C2.green}\u2570${"\u2500".repeat(BOX - 2)}\u256F${C2.reset}`;
+      const row = (content) => {
+        const pad = " ".repeat(Math.max(0, INNER2 - vlen(content)));
+        return `${C2.green}\u2502 ${C2.reset}${content}${pad}${C2.green} \u2502${C2.reset}`;
+      };
+      const body = [row("")];
+      NEWS[key].forEach((item, idx) => {
+        if (idx > 0) body.push(row(""));
+        const wrapped = wrapText(item, INNER2 - BULLET.length);
+        wrapped.forEach((line, i) => {
+          const prefix = i === 0 ? `${C2.cyanB}${BULLET}${C2.reset}` : INDENT;
+          body.push(row(`${prefix}${line}`));
+        });
+      });
+      body.push(row(""));
+      return [top, ...body, bottom].join("\n");
     };
     stateFile = () => import_node_path4.default.join(clawfastHome(), "state.json");
     readState = () => {
@@ -45557,25 +45765,29 @@ var init_providers = __esm({
       };
     };
     nvidiaPatchFetch = async (url2, init) => {
-      if (init?.body && typeof init.body === "string") {
+      const key = process.env.NVIDIA_API_KEY?.trim();
+      const headers = new Headers(init?.headers);
+      if (key) headers.set("Authorization", `Bearer ${key}`);
+      let nextInit = { ...init, headers };
+      if (typeof nextInit.body === "string") {
         try {
-          const parsed = JSON.parse(init.body);
+          const parsed = JSON.parse(nextInit.body);
           const patched = applyNvidiaMistralConfig(parsed);
           if (patched.changed) {
-            return globalThis.fetch(url2, {
-              ...init,
-              body: JSON.stringify(patched.body)
-            });
+            nextInit = { ...nextInit, body: JSON.stringify(patched.body) };
           }
         } catch {
         }
       }
-      return globalThis.fetch(url2, init);
+      return globalThis.fetch(url2, nextInit);
     };
     nvidia = createOpenAI({
       name: "nvidia",
       baseURL: process.env.NVIDIA_BASE_URL || "https://integrate.api.nvidia.com/v1",
-      apiKey: process.env.NVIDIA_API_KEY,
+      // Placeholder so the SDK never throws "missing API key" at request build time
+      // when the env is empty at load — nvidiaPatchFetch sets the real Authorization
+      // header from process.env on every request (see above).
+      apiKey: process.env.NVIDIA_API_KEY || "nvapi-clawfast-runtime",
       fetch: nvidiaPatchFetch
     });
     deepseek = createOpenAI({
@@ -45607,7 +45819,7 @@ var init_providers = __esm({
       "model-nvidia-mistral-medium-3.5": nvidia.chat(
         "mistralai/mistral-medium-3.5-128b"
       ),
-      "model-nvidia-kimi-k2.6": nvidia.chat("moonshotai/kimi-k2.6"),
+      "model-nvidia-gpt-oss-120b": nvidia.chat("openai/gpt-oss-120b"),
       "model-nvidia-glm-5.1": nvidia.chat("z-ai/glm-5.1"),
       "model-nvidia-qwen3.5-397b": nvidia.chat("qwen/qwen3.5-397b-a17b"),
       // Extra explicit keys for the CLI.
@@ -45645,8 +45857,8 @@ var init_providers = __esm({
       ...hasEnvValue("NVIDIA_API_KEY") ? [
         "model-nvidia-mistral-medium-3.5",
         // NVIDIA mistralai/mistral-medium-3.5-128b
-        "model-nvidia-kimi-k2.6",
-        // NVIDIA moonshotai/kimi-k2.6
+        "model-nvidia-gpt-oss-120b",
+        // NVIDIA openai/gpt-oss-120b
         "model-nvidia-glm-5.1",
         // NVIDIA z-ai/glm-5.1
         "model-nvidia-qwen3.5-397b"
@@ -45672,7 +45884,7 @@ var init_providers = __esm({
       "model-opus-4.6": "May 2025",
       "model-kimi-k2.6": "April 2024",
       "model-nvidia-mistral-medium-3.5": "Unknown",
-      "model-nvidia-kimi-k2.6": "April 2024",
+      "model-nvidia-gpt-oss-120b": "June 2024",
       "model-nvidia-glm-5.1": "Unknown",
       "model-nvidia-qwen3.5-397b": "Unknown",
       "model-deepseek-proxy": "July 2024",
@@ -45696,7 +45908,7 @@ var init_providers = __esm({
       "model-opus-4.6": "Anthropic Claude Opus 4.6",
       "model-kimi-k2.6": "Moonshot Kimi K2.6",
       "model-nvidia-mistral-medium-3.5": "NVIDIA - Mistral Medium 3.5",
-      "model-nvidia-kimi-k2.6": "NVIDIA - Moonshot Kimi K2.6",
+      "model-nvidia-gpt-oss-120b": "NVIDIA - OpenAI GPT-OSS 120B",
       "model-nvidia-glm-5.1": "NVIDIA - Z.ai GLM 5.1",
       "model-nvidia-qwen3.5-397b": "NVIDIA - Qwen3.5 397B A17B",
       "model-deepseek-proxy": "DeepSeek (sessao web logada / deepsproxy)",
@@ -68695,14 +68907,14 @@ function inferShellFlag(shell2) {
   }
   return "-c";
 }
-var import_node_child_process2, import_node_fs6, import_node_path5, import_node_os2, import_node_url, import_meta, LocalSandbox;
+var import_node_child_process2, import_node_fs6, import_node_path5, import_node_os3, import_node_url, import_meta, LocalSandbox;
 var init_local_sandbox = __esm({
   "src/local-sandbox.ts"() {
     "use strict";
     import_node_child_process2 = require("node:child_process");
     import_node_fs6 = require("node:fs");
     import_node_path5 = __toESM(require("node:path"));
-    import_node_os2 = __toESM(require("node:os"));
+    import_node_os3 = __toESM(require("node:os"));
     import_node_url = require("node:url");
     init_utils4();
     import_meta = {};
@@ -68827,7 +69039,7 @@ var init_local_sandbox = __esm({
           this.shellBin = shellOverride;
           this.shellFlag = process.env.CLI_SHELL_FLAG || inferShellFlag(shellOverride);
         } else {
-          const shell2 = getDefaultShell(import_node_os2.default.platform());
+          const shell2 = getDefaultShell(import_node_os3.default.platform());
           this.shellBin = shell2.shell;
           this.shellFlag = shell2.shellFlag;
         }
@@ -68905,23 +69117,23 @@ var init_local_sandbox = __esm({
         return "local";
       }
       getConnectionName() {
-        return `local:${import_node_os2.default.hostname()}`;
+        return `local:${import_node_os3.default.hostname()}`;
       }
       getUserId() {
         return "local";
       }
       isWindows() {
-        return import_node_os2.default.platform() === "win32" && !this.isBashLikeShell();
+        return import_node_os3.default.platform() === "win32" && !this.isBashLikeShell();
       }
       supportsPty() {
         return false;
       }
       getSandboxContext() {
-        const platform = `${import_node_os2.default.type()} ${import_node_os2.default.release()} (${import_node_os2.default.arch()})`;
+        const platform = `${import_node_os3.default.type()} ${import_node_os3.default.release()} (${import_node_os3.default.arch()})`;
         const shellInvocation = `${this.shellBin} ${this.shellFlag}`;
-        const windowsNotes = import_node_os2.default.platform() === "win32" ? this.getWindowsShellNotes() : "";
+        const windowsNotes = import_node_os3.default.platform() === "win32" ? this.getWindowsShellNotes() : "";
         const pentestToolingNotes = this.getLocalPentestToolingNotes();
-        return `You are executing commands directly on the user's local host (${platform}, hostname "${import_node_os2.default.hostname()}") in DANGEROUS MODE: there is NO sandbox isolation.
+        return `You are executing commands directly on the user's local host (${platform}, hostname "${import_node_os3.default.hostname()}") in DANGEROUS MODE: there is NO sandbox isolation.
 Commands are invoked via \`${shellInvocation}\`. The working directory is "${this.workdir}".
 Be careful: file system, network and process operations all affect the real host system.
 A real human user is present at this terminal. When a command prompts for input \u2014 a password, a y/n confirmation, an interactive installer, a REPL prompt (python, mysql, ftp), an ssh/sudo prompt, etc. \u2014 the user types the answer and it is forwarded to the command's stdin. So you MAY run commands that prompt for input; just run the command and the user will respond when asked. Prefer non-interactive flags (like --yes) when they exist and are convenient, but interactive prompts are fully supported. Only full-screen / raw-mode TUI programs (vim, top, htop, less without \`| cat\`) are unsupported, since there is no PTY \u2014 avoid those and use line-oriented alternatives.
@@ -69010,7 +69222,7 @@ EDITING SCRIPTS:
       // alive — `taskkill /T` tears down the whole tree so Ctrl+C truly stops it.
       killChildTree(child) {
         const pid = child.pid;
-        if (pid && import_node_os2.default.platform() === "win32") {
+        if (pid && import_node_os3.default.platform() === "win32") {
           try {
             (0, import_node_child_process2.spawn)("taskkill", ["/PID", String(pid), "/T", "/F"], {
               windowsHide: true
@@ -69065,7 +69277,7 @@ WINDOWS SHELL NOTES:
 - For HTTP, prefer \`curl.exe\` if available; for DNS use \`nslookup\`.`;
       }
       getLocalPentestToolingNotes() {
-        if (import_node_os2.default.platform() === "win32") {
+        if (import_node_os3.default.platform() === "win32") {
           return `
 
 LOCAL PENTEST TOOLING:
@@ -69184,10 +69396,10 @@ function createRenderer() {
     reasoning(delta) {
       sep3("reasoning");
       if (!reasoningHeaderShown) {
-        out(`${C2.dim}pensando: `);
+        out(`${C3.dim}pensando: `);
         reasoningHeaderShown = true;
       }
-      out(`${C2.dim}${delta}${C2.reset}`);
+      out(`${C3.dim}${delta}${C3.reset}`);
     },
     toolCall(toolName, input) {
       sep3("tool");
@@ -69199,23 +69411,23 @@ function createRenderer() {
       const note = summarizeResult(toolName, output);
       if (note) {
         sep3("tool");
-        out(`${C2.dim}   ok ${note}${C2.reset}
+        out(`${C3.dim}   ok ${note}${C3.reset}
 `);
       }
     },
     info(msg) {
       sep3("info");
-      out(`${C2.dim}${msg}${C2.reset}
+      out(`${C3.dim}${msg}${C3.reset}
 `);
     },
     fallback(msg) {
       sep3("info");
-      out(`${C2.yellow}-> ${msg}${C2.reset}
+      out(`${C3.yellow}-> ${msg}${C3.reset}
 `);
     },
     error(msg) {
       sep3("info");
-      out(`${C2.red}x ${msg}${C2.reset}
+      out(`${C3.red}x ${msg}${C3.reset}
 `);
     },
     endTurn() {
@@ -69233,31 +69445,31 @@ function formatToolCall(toolName, input) {
   switch (toolName) {
     case "run_terminal_cmd": {
       const cmd = String(i.command ?? "").trim();
-      const bg = i.is_background ? `${C2.dim} (background)${C2.reset}` : "";
-      return `${C2.cyan}executando${C2.reset} ${C2.bold}$ ${truncate3(cmd, 400)}${C2.reset}${bg}`;
+      const bg = i.is_background ? `${C3.dim} (background)${C3.reset}` : "";
+      return `${C3.cyan}executando${C3.reset} ${C3.bold}$ ${truncate3(cmd, 400)}${C3.reset}${bg}`;
     }
     case "file": {
       const path10 = String(i.path ?? "");
-      const brief = i.brief ? `${C2.dim} - ${truncate3(String(i.brief))}${C2.reset}` : "";
+      const brief = i.brief ? `${C3.dim} - ${truncate3(String(i.brief))}${C3.reset}` : "";
       const map2 = {
-        write: `${C2.green}criando arquivo${C2.reset}`,
-        edit: `${C2.yellow}editando arquivo${C2.reset}`,
-        append: `${C2.green}anexando arquivo${C2.reset}`,
-        read: `${C2.blue}lendo arquivo${C2.reset}`,
-        view: `${C2.blue}visualizando arquivo${C2.reset}`
+        write: `${C3.green}criando arquivo${C3.reset}`,
+        edit: `${C3.yellow}editando arquivo${C3.reset}`,
+        append: `${C3.green}anexando arquivo${C3.reset}`,
+        read: `${C3.blue}lendo arquivo${C3.reset}`,
+        view: `${C3.blue}visualizando arquivo${C3.reset}`
       };
       const action = typeof i.action === "string" ? i.action : "";
-      const label = map2[action] ?? (action ? `${C2.blue}arquivo (${action})${C2.reset}` : `${C2.blue}preparando operacao de arquivo${C2.reset}`);
-      const target = path10 ? ` ${C2.bold}${path10}${C2.reset}` : "";
+      const label = map2[action] ?? (action ? `${C3.blue}arquivo (${action})${C3.reset}` : `${C3.blue}preparando operacao de arquivo${C3.reset}`);
+      const target = path10 ? ` ${C3.bold}${path10}${C3.reset}` : "";
       return `${label}${target}${brief}`;
     }
     case "todo_write":
-      return `${C2.magenta}atualizando lista de tarefas${C2.reset}`;
+      return `${C3.magenta}atualizando lista de tarefas${C3.reset}`;
     default:
-      return `${C2.cyan}${toolName}${C2.reset} ${C2.dim}${truncate3(
+      return `${C3.cyan}${toolName}${C3.reset} ${C3.dim}${truncate3(
         JSON.stringify(i),
         200
-      )}${C2.reset}`;
+      )}${C3.reset}`;
   }
 }
 function summarizeResult(toolName, output) {
@@ -69271,11 +69483,11 @@ function summarizeResult(toolName, output) {
   if (toolName === "todo_write") return "tarefas salvas";
   return null;
 }
-var C2, out, truncate3;
+var C3, out, truncate3;
 var init_render = __esm({
   "src/render.ts"() {
     "use strict";
-    C2 = {
+    C3 = {
       reset: "\x1B[0m",
       dim: "\x1B[90m",
       red: "\x1B[31m",
@@ -69413,11 +69625,11 @@ async function ensureProxyReady(id, log2) {
     message: `${def.label}: o proxy n\xE3o respondeu em 90s. Tente de novo, ou rode 'npm run login' em ${dir}.`
   };
 }
-var import_node_os3, import_node_path6, import_node_fs7, import_node_child_process3, DEFS, PROXY_MODEL_KEYS, proxyIdForModelKey, proxiesRoot, dirFor, healthUrl, baseUrl, wait, started, exitHooksInstalled, quoteArg, asShellCommand, run, hasCommand;
+var import_node_os4, import_node_path6, import_node_fs7, import_node_child_process3, DEFS, PROXY_MODEL_KEYS, proxyIdForModelKey, proxiesRoot, dirFor, healthUrl, baseUrl, wait, started, exitHooksInstalled, quoteArg, asShellCommand, run, hasCommand;
 var init_proxy_manager2 = __esm({
   "src/proxy-manager.ts"() {
     "use strict";
-    import_node_os3 = __toESM(require("node:os"));
+    import_node_os4 = __toESM(require("node:os"));
     import_node_path6 = __toESM(require("node:path"));
     import_node_fs7 = require("node:fs");
     import_node_child_process3 = require("node:child_process");
@@ -69453,7 +69665,7 @@ var init_proxy_manager2 = __esm({
       return null;
     };
     proxiesRoot = () => import_node_path6.default.join(
-      process.env.CLAWFAST_HOME?.trim() || import_node_path6.default.join(import_node_os3.default.homedir(), ".clawfast"),
+      process.env.CLAWFAST_HOME?.trim() || import_node_path6.default.join(import_node_os4.default.homedir(), ".clawfast"),
       "proxies"
     );
     dirFor = (def) => process.env[def.dirEnv]?.trim() || import_node_path6.default.join(proxiesRoot(), def.folder);
@@ -69915,7 +70127,7 @@ async function createAgent() {
         reason: "faltando NVIDIA_API_KEY em .env.local (https://build.nvidia.com/)",
         models: [
           "model-nvidia-mistral-medium-3.5",
-          "model-nvidia-kimi-k2.6",
+          "model-nvidia-gpt-oss-120b",
           "model-nvidia-glm-5.1",
           "model-nvidia-qwen3.5-397b"
         ].map((key) => ({ key, label: labelFor(key) }))
@@ -70490,7 +70702,7 @@ Regras:
     ];
     MODEL_LABELS = {
       "model-nvidia-mistral-medium-3.5": "NVIDIA - mistralai/mistral-medium-3.5-128b",
-      "model-nvidia-kimi-k2.6": "NVIDIA - moonshotai/kimi-k2.6",
+      "model-nvidia-gpt-oss-120b": "NVIDIA - openai/gpt-oss-120b",
       "model-nvidia-glm-5.1": "NVIDIA - z-ai/glm-5.1",
       "model-nvidia-qwen3.5-397b": "NVIDIA - qwen/qwen3.5-397b-a17b",
       "model-openai-chat-latest": "OpenAI - chat-latest",
@@ -70659,130 +70871,6 @@ ${section}` : "";
   }
 });
 
-// src/ui.ts
-var ui_exports = {};
-__export(ui_exports, {
-  agentHeader: () => agentHeader,
-  buildBanner: () => buildBanner,
-  shellPrompt: () => shellPrompt,
-  shortCwd: () => shortCwd,
-  ui: () => ui,
-  vlen: () => vlen
-});
-function shortCwd() {
-  const cwd = process.cwd();
-  const home = import_node_os4.default.homedir();
-  const rel = cwd.startsWith(home) ? "~" + cwd.slice(home.length) : cwd;
-  const norm = rel.replace(/\\/g, "/");
-  if (norm.length <= 30) return norm;
-  const parts = norm.split("/");
-  return parts.length > 3 ? `${parts[0]}/\u2026/${parts[parts.length - 1]}` : norm.slice(-30);
-}
-function asciiTitle(text2) {
-  const rows = 6;
-  const out3 = [];
-  for (let r = 0; r < rows; r++) {
-    out3.push(
-      [...text2].map((ch) => GLYPHS[ch] ? GLYPHS[ch][r] : "      ").join(" ")
-    );
-  }
-  return out3;
-}
-function buildBanner(_systemPromptChars, version3 = "1") {
-  const user = (import_node_os4.default.userInfo().username || "hacker").toLowerCase();
-  const host = (import_node_os4.default.hostname() || "localhost").split(".")[0].toLowerCase();
-  const art = asciiTitle("CLAWFAST");
-  const artW = vlen(art[0]);
-  const slogan = "Com o clawfast voc\xEA faz tudo";
-  const header = [
-    "",
-    ...art.map((line) => `${C3.greenB}${C3.bold}${line}${C3.reset}`),
-    "",
-    `${C3.cyanB}${C3.bold}${center(slogan, artW)}${C3.reset}`,
-    ""
-  ];
-  const info = [
-    { text: "" },
-    { text: `Bem-vindo de volta, ${user}!`, accent: true },
-    { text: "" },
-    { text: "clawfast usa a pasta SPRIT/ para criar" },
-    { text: "arquivos, scripts e tudo mais." },
-    { text: "" },
-    { text: `${user}@${host} \xB7 sem limites` },
-    { text: shortCwd() },
-    { text: "" }
-  ];
-  const title = `clawfast v${version3}`;
-  const topFill = "\u2500".repeat(Math.max(0, BOX_W - vlen(title) - 5));
-  const top = `${C3.green}\u256D\u2500 ${C3.greenB}${C3.bold}${title}${C3.reset}${C3.green} ${topFill}\u256E${C3.reset}`;
-  const bottom = `${C3.green}\u2570${"\u2500".repeat(BOX_W - 2)}\u256F${C3.reset}`;
-  const cardLines = info.map(({ text: text2, accent }) => {
-    const color = accent ? `${C3.greenB}${C3.bold}` : C3.green;
-    const body = `${color}${padEndV(text2, INNER)}${C3.reset}`;
-    return `${C3.green}\u2502 ${C3.reset}${body}${C3.green} \u2502${C3.reset}`;
-  });
-  const card = [top, ...cardLines, bottom];
-  return "\n" + [...header, ...card].join("\n") + "\n";
-}
-function shellPrompt() {
-  const user = (import_node_os4.default.userInfo().username || "hacker").toLowerCase();
-  const host = (import_node_os4.default.hostname() || "localhost").split(".")[0].toLowerCase();
-  const W = 52;
-  const label = " \u2709  mensagem ";
-  const topFill = "\u2500".repeat(Math.max(0, W - vlen(label) - 3));
-  const top = `${C3.green}\u256D\u2500${C3.greenB}${C3.bold}${label}${C3.reset}${C3.green}${topFill}\u256E${C3.reset}`;
-  const id = `${user}\u327F${host} \xB7 ${shortCwd()}`;
-  const mid = `${C3.green}\u2502 ${C3.dim}${id}${C3.reset}`;
-  const bottom = `${C3.green}\u2570\u2500${C3.greenB}${C3.bold}\u276F${C3.reset} `;
-  return `
-${top}
-${mid}
-${bottom}`;
-}
-function agentHeader() {
-  return `${C3.magenta}\u256D\u2500 clawfast ${"\u2500".repeat(20)}${C3.reset}
-`;
-}
-var import_node_os4, ESC, C3, INNER, BOX_W, vlen, padEndV, center, GLYPHS, ui;
-var init_ui = __esm({
-  "src/ui.ts"() {
-    "use strict";
-    import_node_os4 = __toESM(require("node:os"));
-    ESC = "\x1B[";
-    C3 = {
-      reset: `${ESC}0m`,
-      bold: `${ESC}1m`,
-      dim: `${ESC}90m`,
-      green: `${ESC}32m`,
-      greenB: `${ESC}92m`,
-      cyan: `${ESC}36m`,
-      cyanB: `${ESC}96m`,
-      magenta: `${ESC}95m`,
-      yellow: `${ESC}93m`,
-      red: `${ESC}91m`
-    };
-    INNER = 42;
-    BOX_W = INNER + 4;
-    vlen = (s) => [...s.replace(/\x1b\[[0-9;]*m/g, "")].length;
-    padEndV = (s, w) => s + " ".repeat(Math.max(0, w - vlen(s)));
-    center = (s, w) => {
-      const pad = Math.max(0, w - vlen(s));
-      const left = Math.floor(pad / 2);
-      return " ".repeat(left) + s + " ".repeat(pad - left);
-    };
-    GLYPHS = {
-      C: [" \u2588\u2588\u2588\u2588\u2588", "\u2588\u2588    ", "\u2588\u2588    ", "\u2588\u2588    ", "\u2588\u2588    ", " \u2588\u2588\u2588\u2588\u2588"],
-      L: ["\u2588\u2588    ", "\u2588\u2588    ", "\u2588\u2588    ", "\u2588\u2588    ", "\u2588\u2588    ", "\u2588\u2588\u2588\u2588\u2588\u2588"],
-      A: [" \u2588\u2588\u2588\u2588 ", "\u2588\u2588  \u2588\u2588", "\u2588\u2588  \u2588\u2588", "\u2588\u2588\u2588\u2588\u2588\u2588", "\u2588\u2588  \u2588\u2588", "\u2588\u2588  \u2588\u2588"],
-      W: ["\u2588\u2588   \u2588\u2588", "\u2588\u2588   \u2588\u2588", "\u2588\u2588 \u2588 \u2588\u2588", "\u2588\u2588 \u2588 \u2588\u2588", "\u2588\u2588\u2588\u2588\u2588\u2588\u2588", " \u2588\u2588 \u2588\u2588 "],
-      F: ["\u2588\u2588\u2588\u2588\u2588\u2588", "\u2588\u2588    ", "\u2588\u2588\u2588\u2588\u2588 ", "\u2588\u2588    ", "\u2588\u2588    ", "\u2588\u2588    "],
-      S: [" \u2588\u2588\u2588\u2588\u2588", "\u2588\u2588    ", " \u2588\u2588\u2588\u2588 ", "    \u2588\u2588", "    \u2588\u2588", "\u2588\u2588\u2588\u2588\u2588 "],
-      T: ["\u2588\u2588\u2588\u2588\u2588\u2588", "  \u2588\u2588  ", "  \u2588\u2588  ", "  \u2588\u2588  ", "  \u2588\u2588  ", "  \u2588\u2588  "]
-    };
-    ui = { C: C3, buildBanner, shellPrompt, agentHeader };
-  }
-});
-
 // src/interactive-input.ts
 var interactive_input_exports = {};
 __export(interactive_input_exports, {
@@ -70822,6 +70910,9 @@ var init_interactive_input = __esm({
         // instead of the full message box + dropdown — used for the /skillcreator
         // step-by-step capture so each phase shows what it's asking for.
         this.promptLabel = null;
+        // When true, the submitted value is NOT recorded in ↑ history (used for the
+        // /api key prompt so a pasted secret can't be recalled with the up arrow).
+        this.promptSecret = false;
         this.inputLineIndex = 2;
         import_node_readline3.default.emitKeypressEvents(paste.input);
         paste.input.on("keypress", (str, key) => {
@@ -70835,6 +70926,7 @@ var init_interactive_input = __esm({
        */
       prompt(opts = {}) {
         this.promptLabel = opts.label ?? null;
+        this.promptSecret = opts.secret ?? false;
         const initial = this.promptLabel === null && this.pendingInitial ? this.pendingInitial : "";
         this.pendingInitial = null;
         this.buffer = initial;
@@ -70961,7 +71053,7 @@ var init_interactive_input = __esm({
               this.cursor = name25.length;
             }
             const value = this.paste.expand(this.buffer);
-            if (value.trim()) this.history.push(value);
+            if (value.trim() && !this.promptSecret) this.history.push(value);
             this.finishLine();
             return { result: { type: "line", value } };
           }
@@ -71263,6 +71355,7 @@ async function main() {
   );
   const COMMANDS = [
     { name: "/model", desc: "trocar o modelo (seletor com setas)" },
+    { name: "/api", desc: "trocar a chave NVIDIA (testa e ativa na hora)" },
     { name: "/skills", desc: "listar as skills instaladas" },
     { name: "/skillcreator", desc: "criar uma nova skill" },
     { name: "/system", desc: "salvar o system prompt (HTML) na \xC1rea de Trabalho" },
@@ -71541,6 +71634,58 @@ ${C5.dim}ja disponivel para todos os modelos nesta sessao.${C5.reset}
       printFatal(err);
     }
   };
+  const handleApiSwap = async (inlineKey) => {
+    let raw = inlineKey;
+    if (!raw) {
+      process.stdout.write(
+        `${C5.dim}Cole a nova chave NVIDIA (cria em ${C5.reset}${C5.cyan}https://build.nvidia.com/${C5.reset}${C5.dim}). Enter vazio ou Ctrl+C cancela.${C5.reset}
+`
+      );
+      const res = await inputUI.prompt({
+        label: "nova NVIDIA API key",
+        secret: true
+      });
+      if (res.type !== "line" || !res.value.trim()) {
+        process.stdout.write(`${C5.dim}troca de chave cancelada${C5.reset}
+`);
+        return;
+      }
+      raw = res.value;
+    }
+    const key = raw.replace(/\s+/g, "").match(/nvapi-[A-Za-z0-9_-]+/)?.[0] ?? "";
+    if (!key) {
+      process.stdout.write(
+        `${C5.red}\u2717 n\xE3o encontrei uma chave NVIDIA no que foi colado${C5.reset} ${C5.dim}(esperado um token "nvapi-\u2026"; cole a chave completa).${C5.reset}
+`
+      );
+      return;
+    }
+    process.stdout.write(`${C5.dim}testando a chave na NVIDIA\u2026${C5.reset}
+`);
+    const test = await testNvidiaKey(key);
+    if (!test.ok) {
+      if (test.status === 401 || test.status === 403) {
+        process.stdout.write(
+          `${C5.red}\u2717 a NVIDIA recusou a chave (${test.status}): ${test.detail}${C5.reset}
+${C5.dim}chave N\xC3O salva \u2014 confira se copiou inteira e se a conta tem acesso de infer\xEAncia.${C5.reset}
+`
+        );
+        return;
+      }
+      process.stdout.write(
+        `${C5.yellow}\u26A0 n\xE3o consegui validar (${test.status || "rede"}): ${test.detail}${C5.reset}
+${C5.dim}salvando mesmo assim \u2014 o pr\xF3ximo pedido vai usar a chave nova.${C5.reset}
+`
+      );
+    }
+    const file2 = swapNvidiaKey(key);
+    const masked = `${key.slice(0, 9)}\u2026${key.slice(-4)} (${key.length} chars)`;
+    process.stdout.write(
+      `${C5.green}\u2713 chave NVIDIA trocada e ativa${C5.reset} ${C5.dim}${masked}${C5.reset}
+${C5.dim}salva em ${C5.reset}${C5.cyan}${file2}${C5.reset}
+`
+    );
+  };
   const handleLine = async (line) => {
     if (closing) return;
     const input = line.trim();
@@ -71599,12 +71744,15 @@ ${C5.cyan}${filePath}${C5.reset}
       }
       return;
     }
+    if (input === "/api" || input.startsWith("/api ")) {
+      await handleApiSwap(input.replace(/^\/api\s*/, "").trim());
+      return;
+    }
     if (input === "/nov" || input === "/novidades") {
-      process.stdout.write(
-        `
-${C5.cyan}${renderNews(clawfastVersion())}${C5.reset}
-`
-      );
+      process.stdout.write(`
+${renderNews(clawfastVersion())}
+
+`);
       return;
     }
     if (!input) return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clawfast",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "description": "CLAWFAST — agente de pentest no terminal. Com o clawfast você faz tudo.",
   "bin": {
     "clawfast": "dist/clawfast.cjs"