terminal-smart-cli 0.97.12 → 0.97.14

package/lib/api.js

@@ -9,7 +9,10 @@ class ApiError extends Error {
 
 // ── RESILIÊNCIA a queda de gateway (backend + CDC de IA) ─────────────────────
 // Status HTTP transitórios (vale re-tentar). 402/401/4xx-de-lógica NÃO entram.
-function isRetryableStatus(s) { return s === 408 || s === 425 || s === 429 || s === 500 || s === 502 || s === 503 || s === 504; }
+function isRetryableStatus(s) {
+  return s === 408 || s === 425 || s === 429 || s === 500 || s === 502 || s === 503 || s === 504
+    || (s >= 520 && s <= 527); // Cloudflare/origin transitórios, incluindo timeout 524
+}
 // Re-tenta fn com backoff exponencial + jitter. NUNCA re-tenta erros de lógica
 // (sem crédito, auth, contexto, 4xx não-transitório). onRetry avisa a UI.
 async function withRetry(fn, { tries = 3, baseMs = 500, onRetry = null, connOnly = false } = {}) {
@@ -26,7 +29,11 @@ async function withRetry(fn, { tries = 3, baseMs = 500, onRetry = null, connOnly
       const fatal = code === 'no_credits' || code === 'auth' || code === 'context'
         || st === 401 || st === 402 || st === 403 || st === 404 || st === 409 || st === 422
         || (st >= 400 && st < 500 && !isRetryableStatus(st));
-      if (fatal || !retryable || attempt === tries) throw e;
+      // A 524 already consumed the proxy's long origin timeout. One retry is
+      // enough; repeated 524s should return control so the model router can
+      // switch provider instead of freezing a mission for many minutes.
+      const slowGatewayTimeoutExhausted = st === 524 && attempt >= 2;
+      if (fatal || !retryable || attempt === tries || slowGatewayTimeoutExhausted) throw e;
       const wait = Math.round(baseMs * Math.pow(2.5, attempt - 1) * (0.75 + Math.random() * 0.5));
       if (onRetry) { try { onRetry({ attempt, tries, waitMs: wait, reason: code || ('http_' + st) }); } catch (_) {} }
       await new Promise(r => setTimeout(r, wait));

package/lib/audit-packs.js

@@ -0,0 +1,56 @@
+'use strict';
+const fs = require('fs');
+const path = require('path');
+
+const PACKS = Object.freeze({
+  web: Object.freeze({
+    id: 'web', label: 'Web/App',
+    prompt: 'Se a interface for criada ou alterada, prove em navegador real: desktop e mobile sem overflow, fluxo principal completo, validacao de entrada, persistencia apos reload, console/rede sem erros e screenshots. Prefira navegador ja instalado com playwright-core, sem baixar binario. Mantenha um script reproduzivel e AUTOCONTIDO chamado audit:browser (ou audit:web/audit:e2e): ele deve iniciar o servidor quando necessario, aguardar a URL, testar e encerrar somente o processo que iniciou em bloco finally. Rode-o antes de concluir.',
+  }),
+  office: Object.freeze({
+    id: 'office', label: 'Office/Arquivos',
+    prompt: 'Edite o arquivo original por padrao; crie copia somente se o usuario pedir. Preserve backup e formato. Em XLSX, agrupe celulas e formulas do mesmo arquivo em UMA chamada editar_planilha. Em DOCX, agrupe todas as mudancas em UMA chamada atomica editar_documento: use substituicoes para texto e alteracoes_tabela com rotulo/valor para celulas de tabela; nunca envie varias chamadas paralelas para o mesmo DOCX. Reabra com o leitor nativo do formato e prove conteudo, estrutura, formulas/tabelas/slides relevantes e caminho final. Hash ou existencia do arquivo nao provam conteudo. Nunca declare uma alteracao bloqueada ou falha como concluida.',
+  }),
+  productivity: Object.freeze({
+    id: 'productivity', label: 'E-mail/Drive',
+    prompt: 'Cheque o status da integracao antes de agir. Para leitura, registre ids e filtros usados. Para mutacao, confirme alvo e estado final pela API. Nunca infira destinatario ausente. Crie rascunho por padrao quando o pedido nao autorizar explicitamente envio; envio, exclusao e movimentacao exigem os gates normais.',
+  }),
+  vps: Object.freeze({
+    id: 'vps', label: 'VPS/Infra',
+    prompt: 'Antes de mudar, registre status, configuracao e porta afetados; preserve snapshot/backup. Aplique mudanca minima. Depois prove config valida, servico ativo, porta/HTTP esperado e logs sem regressao. Nao use exclusao ampla nem reinicio indiscriminado.',
+  }),
+  generic: Object.freeze({
+    id: 'generic', label: 'Geral',
+    prompt: 'Defina criterios executaveis antes de concluir. Prove o fluxo principal e pelo menos uma falha relevante; registre comandos, codigos de saida e artefatos. Nao aceite narrativa como substituto de evidencia.',
+  }),
+});
+
+function _has(cwd, name) { try { return fs.existsSync(path.join(cwd || process.cwd(), name)); } catch (_) { return false; } }
+
+function selectAuditPack(taskText, cwd) {
+  const t = String(taskText || '').toLocaleLowerCase();
+  if (/\b(?:gmail|outlook|hotmail|e-?mail|drive|google docs|google sheets|workspace|onedrive|calend[aá]rio|agenda)\b/i.test(t)) return PACKS.productivity;
+  if (/\b(?:vps|servidor|ssh|deploy|docker|nginx|traefik|systemd|firewall|porta|produ[cç][aã]o)\b/i.test(t)) return PACKS.vps;
+  if (/\b(?:excel|xlsx|planilha|word|docx|powerpoint|pptx|apresenta[cç][aã]o|pdf)\b/i.test(t)) return PACKS.office;
+  if (/\b(?:site|p[aá]gina|web|frontend|front-end|interface|navegador|dashboard|painel|html|css|jogo)\b/i.test(t)
+      || _has(cwd, 'index.html') || _has(cwd, 'vite.config.js') || _has(cwd, 'next.config.js')) return PACKS.web;
+  return PACKS.generic;
+}
+
+function promptBlock(pack, lang = 'pt') {
+  if (!pack) return '';
+  const title = lang === 'en' ? 'MANDATORY AUDIT PACK' : 'PACOTE DE AUDITORIA OBRIGATORIO';
+  return `\n\n${title} [${pack.id} — ${pack.label}]: ${pack.prompt}`;
+}
+
+function deriveCriteria(cwd, pack) {
+  if (!pack || pack.id !== 'web') return [];
+  let pkg = null;
+  try { pkg = JSON.parse(fs.readFileSync(path.join(cwd, 'package.json'), 'utf8')); } catch (_) {}
+  const scripts = (pkg && pkg.scripts) || {};
+  const names = ['audit:browser', 'audit:web', 'audit:e2e'];
+  const picked = names.find(n => scripts[n]);
+  return picked ? [{ type: 'command', cmd: `npm run ${picked}`, exit: 0, timeout_s: 300, label: `auditoria real (${picked})` }] : [];
+}
+
+module.exports = { PACKS, selectAuditPack, promptBlock, deriveCriteria };

package/lib/evolution-telemetry.js

@@ -0,0 +1,45 @@
+'use strict';
+
+const crypto = require('crypto');
+const core = require('./core');
+
+function sanitizePattern(value) {
+  return String(core.redactSecrets(value || ''))
+    .replace(/[\u0000-\u001f\u007f]/g, ' ')
+    .replace(/\b(?:nvapi-|AIza)[A-Za-z0-9._-]{12,}/gi, '<secret>')
+    .replace(/\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/gi, '<email>')
+    .replace(/https?:\/\/[^\s"']+/gi, '<url>')
+    .replace(/\b(?:\d{1,3}\.){3}\d{1,3}\b/g, '<ip>')
+    .replace(/[A-Za-z]:\\[^\s"']+/g, '<path>')
+    .replace(/\/(?:home|root|opt|var|tmp|Users|mnt)\/[^\s"']+/g, '<path>')
+    .replace(/\b[0-9a-f]{32,}\b/gi, '<id>')
+    .replace(/\b[0-9a-f]{8}-[0-9a-f-]{27,}\b/gi, '<id>')
+    .replace(/\b\d{5,}\b/g, '#')
+    .replace(/\s+/g, ' ').trim().slice(0, 300);
+}
+
+function buildEvents(toolErrors = [], actions = [], context = {}) {
+  const recoveredTools = new Set((actions || []).map(action => action && action.name).filter(Boolean));
+  const seen = new Set(); const events = [];
+  for (const error of (Array.isArray(toolErrors) ? toolErrors : []).slice(-50)) {
+    const tool = String(error.tool || 'unknown').slice(0, 80);
+    const errorClass = String(error.errorClass || error.class || 'unknown').slice(0, 80);
+    const pattern = sanitizePattern(error.evidence || error.message || '');
+    const stage = String(error.stage || 'execution').slice(0, 40);
+    const fingerprint = crypto.createHash('sha256').update([tool, errorClass, stage, pattern].join('|')).digest('hex');
+    if (seen.has(fingerprint)) continue;
+    seen.add(fingerprint);
+    events.push({ tool, errorClass, pattern, stage, fingerprint,
+      retryable: error.retryable === true, recovered: recoveredTools.has(tool),
+      surface: context.surface || 'cli', appVersion: context.appVersion || 'unknown', model: context.model || 'unknown' });
+    if (events.length >= 20) break;
+  }
+  return events;
+}
+
+function enabled(config = {}, env = process.env) {
+  if (String(env.TS_DIAGNOSTICS || '').toLowerCase() === '0' || String(env.TS_DIAGNOSTICS || '').toLowerCase() === 'off') return false;
+  return config.diagnosticsEnabled !== false;
+}
+
+module.exports = { sanitizePattern, buildEvents, enabled };

package/lib/i18n.js

@@ -78,6 +78,7 @@ const STR = {
         ['ts quem', 'conta conectada'],
         ['ts conta exportar', 'baixa seus dados sem senhas, tokens ou chaves privadas'],
         ['ts conta abrir', 'abre Minha Conta para privacidade e exclusão segura'],
+        ['ts diagnosticos status', 'controla telemetria sanitizada de erros (ativar/desativar)'],
         ['ts doctor', 'diagnóstico do ambiente (Node, login, gateway, versão, deps opcionais)'],
         ['ts privacidade', 'mostra o endereço da Política de Privacidade'],
         ['ts tema', 'paleta do terminal (7 temas; a cor indica o ESTADO)'],
@@ -247,6 +248,7 @@ const STR = {
         ['ts quem', 'connected account'],
         ['ts account export', 'download your data without passwords, tokens or private keys'],
         ['ts account open', 'open Account for privacy controls and safe deletion'],
+        ['ts diagnostics status', 'controls sanitized error telemetry (on/off)'],
         ['ts privacy', 'shows the Privacy Policy address'],
         ['ts tema', 'terminal palette (7 themes; color means STATE)'],
         ['ts idioma pt|en', 'language (default pt-BR)'],

package/lib/image-job.js

@@ -0,0 +1,31 @@
+'use strict';
+
+function imageJobError(message, code) {
+  const error = new Error(message);
+  error.code = code;
+  return error;
+}
+
+async function waitForImageJob(jobId, options = {}) {
+  const request = options.request;
+  if (typeof request !== 'function') throw new TypeError('request é obrigatório');
+  const sleep = options.sleep || (ms => new Promise(resolve => setTimeout(resolve, ms)));
+  const intervalMs = Math.max(0, Number(options.intervalMs) || 2000);
+  const maxAttempts = Math.max(1, Number(options.maxAttempts) || 180);
+  const id = String(jobId || '').trim();
+  if (!id) throw imageJobError('Job de imagem inválido.', 'image_job_invalid');
+
+  for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+    if (attempt > 1) await sleep(intervalMs);
+    const job = await request('/api/ia/image/jobs/' + encodeURIComponent(id));
+    if (job && job.status === 'completed' && job.url) return job;
+    if (job && job.status === 'failed') throw imageJobError(job.message || 'Falha ao gerar imagem Premium.', 'image_job_failed');
+    if (job && !['processing', 'queued'].includes(job.status)) {
+      throw imageJobError(job.message || `Estado inesperado da geração: ${job.status || 'vazio'}.`, 'image_job_protocol');
+    }
+    if (typeof options.onProgress === 'function') options.onProgress({ attempt, maxAttempts, job });
+  }
+  throw imageJobError('A imagem continua sendo processada. Consulte a conversa no Terminal Smart para acompanhar.', 'image_job_timeout');
+}
+
+module.exports = { waitForImageJob, imageJobError };

package/lib/intelligence-core.js

@@ -9,7 +9,9 @@
 const crypto = require('crypto');
 
 const INTELLIGENCE_CONTRACT = 1;
-const PRICE_REVISION = '2026-08-06';
+// Keep this machine-readable. Human/provider notes belong in commit history;
+// catalogFreshness appends an ISO time before parsing this value.
+const PRICE_REVISION = '2026-08-11';
 
 const MODEL_CATALOG = Object.freeze({
   smart: {
@@ -28,7 +30,7 @@ const MODEL_CATALOG = Object.freeze({
   },
   'deepseek-v4-pro': {
     upstreamId: 'deepseek/deepseek-v4-pro',
-    provider: 'deepseek', contextWindow: 1048576, price: { input: 0.435, output: 0.87, cachedInput: 0.003625 },
+    provider: 'deepseek', contextWindow: 1048576, price: { input: 0.63168, output: 1.26336, cachedInput: 0.063168 },
     capabilities: ['tools', 'code', 'planning', 'review', 'long-context'], toolReliability: 0.95, quality: 0.93,
   },
   'gemini-2.5-flash-lite': {
@@ -63,7 +65,7 @@ const MODEL_CATALOG = Object.freeze({
   },
   'glm-5.2': {
     upstreamId: 'z-ai/glm-5.2',
-    provider: 'zai', contextWindow: 200000, price: { input: 0.7644, output: 2.4024, cachedInput: 0.15288 },
+    provider: 'zai', contextWindow: 1048576, price: { input: 0.76, output: 2.42, cachedInput: 0.152 },
     capabilities: ['tools', 'planning', 'code', 'long-context'], toolReliability: 0.88, quality: 0.89,
   },
   'mimo-v2.5': {
@@ -83,19 +85,24 @@ const MODEL_CATALOG = Object.freeze({
   },
   'gpt-5.6-terra': {
     upstreamId: 'openai/gpt-5.6-terra',
-    provider: 'openai', contextWindow: 1000000, price: { input: 2.50, output: 15.00, cachedInput: 0.25 },
+    provider: 'openai', contextWindow: 1050000, price: { input: 1.00, output: 6.00, cachedInput: 0.10 },
     capabilities: ['tools', 'code', 'planning', 'review', 'long-context'], toolReliability: 0.96, quality: 0.95,
   },
   'gpt-5.6-luna': {
     upstreamId: 'openai/gpt-5.6-luna',
-    provider: 'openai', contextWindow: 1000000, price: { input: 1.00, output: 6.00, cachedInput: 0.10 },
-    capabilities: ['tools', 'code', 'planning', 'execution', 'summarization', 'review', 'long-context'], toolReliability: 0.93, quality: 0.89,
+    provider: 'openai', contextWindow: 1050000, price: { input: 0.10, output: 0.60, cachedInput: 0.01 },
+    capabilities: ['tools', 'code', 'planning', 'execution', 'summarization', 'review', 'vision', 'long-context'], toolReliability: 0.93, quality: 0.89,
   },
   'claude-sonnet-5': {
     upstreamId: 'anthropic/claude-sonnet-5',
     provider: 'anthropic', contextWindow: 1000000, price: { input: 2.00, output: 10.00, cachedInput: 0.20 },
     capabilities: ['tools', 'code', 'planning', 'review', 'long-context'], toolReliability: 0.97, quality: 0.96,
   },
+  'claude-opus-5': {
+    upstreamId: 'anthropic/claude-opus-5',
+    provider: 'anthropic', contextWindow: 1000000, price: { input: 5.00, output: 25.00, cachedInput: 0.50 },
+    capabilities: ['tools', 'vision', 'code', 'planning', 'review', 'long-context'], toolReliability: 0.98, quality: 0.99,
+  },
   'claude-sonnet-4-6': {
     upstreamId: 'anthropic/claude-sonnet-4.6',
     provider: 'anthropic', contextWindow: 1000000, price: { input: 3.00, output: 15.00, cachedInput: 0.30 },
@@ -126,8 +133,33 @@ const MODEL_CATALOG = Object.freeze({
   },
   'laguna-s-2.1': {
     upstreamId: 'poolside/laguna-s-2.1',
-    provider: 'openrouter', contextWindow: 1048576, price: { input: 0.10, output: 0.20, cachedInput: 0.01 },
-    capabilities: ['code', 'review', 'long-context'], toolReliability: 0.25, quality: 0.75,
+    provider: 'openrouter', contextWindow: 1048576, price: { input: 0.09, output: 0.18, cachedInput: 0.009 },
+    capabilities: ['tools', 'code', 'review', 'long-context'], toolReliability: 0.80, quality: 0.78,
+  },
+  'qwen3.8-max': {
+    upstreamId: 'qwen/qwen3.8-max',
+    provider: 'openrouter', contextWindow: 1000000, price: { input: 2.00, output: 6.00, cachedInput: 0.20 },
+    capabilities: ['tools', 'vision', 'code', 'planning', 'review', 'long-context'], toolReliability: 0.91, quality: 0.93,
+  },
+  'gemini-3.6-flash': {
+    upstreamId: 'google/gemini-3.6-flash',
+    provider: 'openrouter', contextWindow: 1048576, price: { input: 1.50, output: 7.50, cachedInput: 0.15 },
+    capabilities: ['tools', 'vision', 'classification', 'planning', 'review', 'long-context'], toolReliability: 0.92, quality: 0.92,
+  },
+  'muse-spark-1.2': {
+    upstreamId: 'meta/muse-spark-1.2',
+    provider: 'meta', contextWindow: 1048576, price: { input: 1.25, output: 4.25, cachedInput: 0.125 },
+    capabilities: ['tools', 'vision', 'code', 'planning', 'review', 'long-context'], toolReliability: 0.95, quality: 0.95,
+  },
+  'muse-glimmer-30b': {
+    upstreamId: 'meta/muse-glimmer-30b',
+    provider: 'openrouter', contextWindow: 131072, price: { input: 0.35, output: 1.50, cachedInput: 0.035 },
+    capabilities: ['tools', 'vision', 'planning', 'review'], toolReliability: 0.88, quality: 0.86,
+  },
+  'solar-pro4': {
+    upstreamId: 'upstage/solar-pro4',
+    provider: 'openrouter', contextWindow: 524288, price: { input: 0.03, output: 0.12, cachedInput: 0.003 },
+    capabilities: ['tools', 'code', 'review', 'long-context'], toolReliability: 0.82, quality: 0.78,
   },
   'gpt-oss-120b': {
     upstreamId: 'openai/gpt-oss-120b',
@@ -165,11 +197,11 @@ const AGENT_ROLES = Object.freeze({
   }),
   executor: Object.freeze({
     prompt: 'Execute somente a etapa recebida com as ferramentas autorizadas. Não declare sucesso sem resultado verificável.',
-    models: Object.freeze({ free: ['deepseek-v4-flash'], basic: ['deepseek-v4-flash', 'deepseek-v4-pro'], pro: ['deepseek-v4-flash', 'deepseek-v4-pro', 'claude-haiku-4-5'] }),
+    models: Object.freeze({ free: ['deepseek-v4-flash'], basic: ['deepseek-v4-flash', 'deepseek-v4-pro'], pro: ['deepseek-v4-flash', 'deepseek-v4-pro', 'glm-5.2', 'claude-haiku-4-5'] }),
   }),
   inspector: Object.freeze({
     prompt: 'Inspecione em modo somente leitura e compare evidências com os critérios de aceite. Não altere nada e não elogie por cortesia.',
-    models: Object.freeze({ free: ['gemini-2.5-flash-lite'], basic: ['gemini-2.5-flash', 'gpt-4o-mini'], pro: ['claude-haiku-4-5', 'gemini-2.5-flash', 'gpt-5.6-luna'] }),
+    models: Object.freeze({ free: ['gemini-2.5-flash-lite'], basic: ['gemini-2.5-flash', 'gpt-4o-mini'], pro: ['gpt-5.6-luna', 'claude-haiku-4-5', 'gemini-2.5-flash'] }),
   }),
   corrector: Object.freeze({
     prompt: 'Corrija apenas falhas confirmadas pelo inspetor, preserve o que funciona e repita as provas afetadas. Não amplie o escopo.',
@@ -177,7 +209,7 @@ const AGENT_ROLES = Object.freeze({
   }),
   vision: Object.freeze({
     prompt: 'Extraia fatos observáveis da imagem e separe leitura, inferência e incerteza. Não invente texto ilegível.',
-    models: Object.freeze({ free: ['smart'], basic: ['gemini-2.5-flash'], pro: ['gemini-2.5-flash', 'claude-haiku-4-5'] }),
+    models: Object.freeze({ free: ['smart'], basic: ['gemini-2.5-flash'], pro: ['gpt-5.6-luna', 'gemini-2.5-flash', 'claude-haiku-4-5'] }),
   }),
   document: Object.freeze({
     prompt: 'Produza conteúdo estruturado e use o motor nativo do formato solicitado. Preserve editabilidade e valide o arquivo gerado.',
@@ -205,13 +237,18 @@ function clamp(n, min, max) {
 
 function normalizeModelId(model) {
   const raw = String(model || 'smart').trim();
-  const lower = raw.toLowerCase();
+  // O prefixo e uma instrucao de transporte do CDC, nao parte da identidade/preco.
+  // Sem remove-lo, todo modelo OpenRouter caia no preco `_default`: Luna era
+  // sobrecobrado e Opus subcobrado, com risco direto de margem negativa.
+  const transportFree = raw.replace(/^openrouter:/i, '');
+  const lower = transportFree.toLowerCase();
   if (MODEL_CATALOG[raw]) return raw;
+  if (MODEL_CATALOG[transportFree]) return transportFree;
   if (MODEL_CATALOG[lower]) return lower;
   if (MODEL_ALIASES[lower]) return MODEL_ALIASES[lower];
   const upstream = Object.entries(MODEL_CATALOG)
     .find(([, info]) => String(info.upstreamId || '').toLowerCase() === lower);
-  return upstream ? upstream[0] : raw;
+  return upstream ? upstream[0] : transportFree;
 }
 
 function modelInfo(model, now) {