@baiworcode/baiworcode 1.0.0-beta.1 → 1.0.0-beta.2

package/bin/baiwor.js

@@ -51,6 +51,7 @@ import { runModelMenu } from '../src/modelMenu.js';
 import { handleModelCommand } from '../src/modelAlias.js';
 import { askBaiworInput, COMMANDS } from '../src/prompt.js';
 import { login, logout, authStatus } from '../src/auth/index.js';
+import { hasActiveCredentials } from '../src/auth/resolve.js';
 import { BAWOR_LOGO } from '../src/assets/baworLogo.js';
 import { handleUserChat, resetConversation, conversationSession } from '../src/chat/index.js';
 import {
@@ -442,8 +443,9 @@ function showBanner() {
   console.log(' '.repeat(centerPadInTextLogo(layout, tagline)) + chalk.gray(tagline));
   console.log();
 
-  const readyText = '● Siap';
-  const readyBadge = chalk.green(readyText);
+  const siapDipakai = hasActiveCredentials(config);
+  const readyText = siapDipakai ? '● Siap' : '○ Belum siap';
+  const readyBadge = siapDipakai ? chalk.green(readyText) : chalk.yellow(readyText);
   // Lebar dalam kotak atas disamakan dengan garis tengah (targetWidth + 2) agar
   // ketiga batang sejajar walau panjang nomor versi berubah.
   const verLabel = `─ v${VERSION} `;
@@ -460,16 +462,18 @@ function showBanner() {
   console.log(midBar);
   console.log(padBox(chalk.whiteBright('Ruang Kerja & Status')));
   console.log(padBox(chalk.gray('› ') + 'Folder Aktif : ' + chalk.cyan(process.cwd())));
-  const modelInfo = config.activeModel !== 'Not configured'
-    ? chalk.hex('#F59E0B')(config.activeModel) + chalk.gray(` (${config.activeProvider})`)
-    : chalk.gray('Belum dikonfigurasi (/model)');
+  const modelInfo = !siapDipakai
+    ? chalk.gray('Belum siap — ketik /model')
+    : config.activeModel !== 'Not configured'
+      ? chalk.hex('#F59E0B')(config.activeModel) + chalk.gray(` (${config.activeProvider})`)
+      : chalk.gray('Belum dikonfigurasi (/model)');
   console.log(padBox(chalk.gray('› ') + 'Model Aktif  : ' + modelInfo));
   console.log(botBar);
   console.log();
 
-  // Onboarding singkat untuk pengguna baru: tanpa model aktif, percakapan
+  // Onboarding singkat untuk pengguna baru: tanpa kredensial siap, percakapan
   // pertama pasti gagal — arahkan ke /model atau /login SEBELUM mereka bingung.
-  if (config.activeModel === 'Not configured') {
+  if (!siapDipakai || config.activeModel === 'Not configured') {
     console.log(chalk.hex('#FBBF24').bold('  👋 Selamat datang di bAIwor Code! Ini langkah pertamamu:'));
     console.log(
       chalk.white('     1. Ketik ') +

package/package.json

@@ -1,60 +1,60 @@
-{
-  "name": "@baiworcode/baiworcode",
-  "version": "1.0.0-beta.1",
-  "description": "bAIwor Code [Alpha] — Terminal AI Coding Agent · Jiwa Punakawan, Pikiran AI, Guardian Banyumas (https://baiwor.my.id)",
-  "type": "module",
-  "main": "bin/baiwor.js",
-  "bin": {
-    "baiworcode": "bin/baiwor.js",
-    "baiwor": "bin/baiwor.js"
-  },
-  "files": [
-    "bin",
-    "src",
-    "scripts",
-    "README.md",
-    "LICENSE"
-  ],
-  "publishConfig": {
-    "access": "public",
-    "provenance": true
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/bAIwor/baiworcode.git"
-  },
-  "homepage": "https://baiwor.my.id",
-  "bugs": {
-    "url": "https://github.com/bAIwor/baiworcode/issues"
-  },
-  "scripts": {
-    "start": "node ./bin/baiwor.js",
-    "test": "node scripts/run-tests.mjs",
-    "audit:provider": "node scripts/audit-provider.mjs",
-    "check": "npm test",
-    "prepublishOnly": "npm test"
-  },
-  "keywords": [
-    "baiwor",
-    "punakawan",
-    "cli",
-    "ai-agent",
-    "coding-agent",
-    "terminal",
-    "openai-compatible",
-    "gemini",
-    "indonesia"
-  ],
-  "author": "Wijang",
-  "license": "MIT",
-  "engines": {
-    "node": ">=18"
-  },
-  "dependencies": {
-    "@clack/core": "^0.4.1",
-    "@clack/prompts": "^0.9.0",
-    "@insforge/instabox-sdk": "^0.5.3",
-    "chalk": "^5.4.1",
-    "commander": "^13.1.0"
-  }
-}
+{
+  "name": "@baiworcode/baiworcode",
+  "version": "1.0.0-beta.2",
+  "description": "bAIwor Code [Beta] — Terminal AI Coding Agent · Jiwa Punakawan, Pikiran AI, Guardian Banyumas (https://baiwor.my.id)",
+  "type": "module",
+  "main": "bin/baiwor.js",
+  "bin": {
+    "baiworcode": "bin/baiwor.js",
+    "baiwor": "bin/baiwor.js"
+  },
+  "files": [
+    "bin",
+    "src",
+    "scripts",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/bAIwor/baiworcode.git"
+  },
+  "homepage": "https://baiwor.my.id",
+  "bugs": {
+    "url": "https://github.com/bAIwor/baiworcode/issues"
+  },
+  "scripts": {
+    "start": "node ./bin/baiwor.js",
+    "test": "node scripts/run-tests.mjs",
+    "audit:provider": "node scripts/audit-provider.mjs",
+    "check": "npm test",
+    "prepublishOnly": "npm test"
+  },
+  "keywords": [
+    "baiwor",
+    "punakawan",
+    "cli",
+    "ai-agent",
+    "coding-agent",
+    "terminal",
+    "openai-compatible",
+    "gemini",
+    "indonesia"
+  ],
+  "author": "Wijang",
+  "license": "MIT",
+  "engines": {
+    "node": ">=18"
+  },
+  "dependencies": {
+    "@clack/core": "^0.4.1",
+    "@clack/prompts": "^0.9.0",
+    "@insforge/instabox-sdk": "^0.5.3",
+    "chalk": "^5.4.1",
+    "commander": "^13.1.0"
+  }
+}

package/src/auth/resolve.js

@@ -34,6 +34,41 @@ export function findMissingEnvRefs(value) {
   return [...new Set(missing)];
 }
 
+/**
+ * Cek sinkron (tanpa jaringan) apakah provider aktif punya kredensial yang
+ * siap dipakai. Dipakai banner agar tidak menampilkan "Siap" pada pengguna
+ * baru yang belum mengisi API key.
+ *
+ * @param {Object} [config]
+ * @returns {boolean}
+ */
+export function hasActiveCredentials(config = getConfig()) {
+  try {
+    if (config.activeType === 'agy' || (config.activeProvider || '').toLowerCase().includes('antigravity')) {
+      // Ketersediaan CLI agy baru bisa dipastikan saat login; jangan blokir.
+      return true;
+    }
+    if (config.activeType === 'oauth') {
+      const prov = Object.values(PROVIDERS).find(
+        (p) => p.name.toLowerCase() === (config.activeProvider || '').toLowerCase()
+      );
+      if (!prov) return false;
+      const token = config.oauth?.[prov.id];
+      return Boolean(token && (token.accessToken || token.apiKey));
+    }
+    if (config.activeType === 'custom') {
+      const cp = (config.customProviders || []).find(
+        (c) => (c?.name || '').toLowerCase() === (config.activeProvider || '').toLowerCase()
+      );
+      if (!cp || typeof cp.apiKey !== 'string' || !cp.apiKey.trim()) return false;
+      return findMissingEnvRefs(cp.apiKey).length === 0;
+    }
+    return false;
+  } catch {
+    return false;
+  }
+}
+
 /**
  * Menghubungkan kredensial provider aktif (Custom API Key atau OAuth Bearer Token)
  * Disiapkan untuk eksekusi chat streaming pada Tahap 3A.

package/src/branding.js

@@ -1,26 +1,26 @@
-/**
- * Identitas resmi bAIwor Code.
- *
- * Semua nama, versi, tautan, dan User-Agent dikumpulkan di satu tempat supaya
- * branding baiwor.my.id konsisten di seluruh aplikasi. Sebelumnya versi dan
- * User-Agent ditulis ulang di banyak berkas, sehingga satu perubahan versi
- * berisiko meninggalkan sisa yang basi.
- */
-
-export const APP_NAME = 'bAIwor Code';
-export const APP_SLUG = 'baiworcode';
-export const VERSION = '1.0.0-beta.1';
-
-/** Situs resmi & kanal bonus token/credit. */
-export const WEBSITE = 'https://baiwor.my.id';
-export const BONUS_WEBSITE = 'https://agentik.my.id';
-
-/** User-Agent untuk panggilan API (OpenAI-compatible & OAuth). */
-export const USER_AGENT = `${APP_NAME.replace(/\s+/g, '-')}/${VERSION}`;
-export const CLI_USER_AGENT = `bAIwor-cli/${VERSION}`;
-
-/** Tagline resmi (filosofi Punakawan Banyumasan). */
-export const TAGLINE = 'Saka Bawor dadi bAIwor — Jiwa Punakawan, Pikiran AI, Guardian Banyumas';
-
-/** Nama badan hukum di balik bAIwor Code (tampil di banner & pesan keluar). */
-export const COMPANY = 'PT. bAIwor Agentic Indonesia';
+/**
+ * Identitas resmi bAIwor Code.
+ *
+ * Semua nama, versi, tautan, dan User-Agent dikumpulkan di satu tempat supaya
+ * branding baiwor.my.id konsisten di seluruh aplikasi. Sebelumnya versi dan
+ * User-Agent ditulis ulang di banyak berkas, sehingga satu perubahan versi
+ * berisiko meninggalkan sisa yang basi.
+ */
+
+export const APP_NAME = 'bAIwor Code';
+export const APP_SLUG = 'baiworcode';
+export const VERSION = '1.0.0-beta.2';
+
+/** Situs resmi & kanal bonus token/credit. */
+export const WEBSITE = 'https://baiwor.my.id';
+export const BONUS_WEBSITE = 'https://agentik.my.id';
+
+/** User-Agent untuk panggilan API (OpenAI-compatible & OAuth). */
+export const USER_AGENT = `${APP_NAME.replace(/\s+/g, '-')}/${VERSION}`;
+export const CLI_USER_AGENT = `bAIwor-cli/${VERSION}`;
+
+/** Tagline resmi (filosofi Punakawan Banyumasan). */
+export const TAGLINE = 'Saka Bawor dadi bAIwor — Jiwa Punakawan, Pikiran AI, Guardian Banyumas';
+
+/** Nama badan hukum di balik bAIwor Code (tampil di banner & pesan keluar). */
+export const COMPANY = 'PT. bAIwor Agentic Indonesia';

package/src/tools/sandbox.js

@@ -222,8 +222,7 @@ export function isPathAllowed(targetPath, workspace = process.cwd()) {
   if (isSubPath(workspace, resolved)) return true;
   if (isSubPath(os.tmpdir(), resolved)) return true;
 
-  const lower = resolved.toLowerCase();
-  return SYSTEM_ALLOWED_PREFIXES.some((prefix) => lower === prefix || lower.startsWith(prefix));
+  return SYSTEM_ALLOWED_PREFIXES.some((prefix) => isSubPath(prefix, resolved));
 }
 
 /**
@@ -305,7 +304,7 @@ function isOutsideWorkspace(candidate, workspace) {
 
   const lower = path.win32.resolve(candidate).toLowerCase();
   const isSystem = WIN32_SYSTEM_PREFIXES.some(
-    (prefix) => lower === prefix || lower.startsWith(prefix)
+    (prefix) => lower === prefix || lower.startsWith(prefix + '\\')
   );
   if (isSystem) return false;
 

package/src/tools/todoTool.js

@@ -219,6 +219,42 @@ function summarize(items) {
   return summary;
 }
 
+/**
+ * Menormalkan bentuk `todos` yang dikirim model. Model kadang membungkus daftar
+ * (`{ "item": [...] }`), mengirim satu objek tugas, atau memakai peta id→tugas,
+ * dan mengirim `merge` sebagai string. Bentuk-bentuk ini diartikan alih-alih
+ * langsung ditolak, tanpa melonggarkan validasi isi tiap tugas.
+ *
+ * @param {unknown} todos
+ * @returns {Array|null} null bila tidak bisa diartikan sebagai daftar tugas.
+ */
+export function coerceTodosInput(todos) {
+  if (Array.isArray(todos)) return todos;
+  if (!todos || typeof todos !== 'object') return null;
+
+  for (const key of ['item', 'items', 'todos', 'list', 'data', 'tasks']) {
+    if (Array.isArray(todos[key])) return todos[key];
+  }
+
+  if (typeof todos.content === 'string' || typeof todos.id === 'string') return [todos];
+
+  const values = Object.values(todos);
+  if (
+    values.length > 0 &&
+    values.every(
+      (v) => v && typeof v === 'object' && (typeof v.content === 'string' || typeof v.id === 'string')
+    )
+  ) {
+    return values;
+  }
+  return null;
+}
+
+/** `merge` bisa datang sebagai boolean atau string "true"/"1". */
+function coerceMerge(merge) {
+  return merge === true || merge === 'true' || merge === 1 || merge === '1';
+}
+
 /**
  * Handler tool `todo_list`.
  *
@@ -240,12 +276,16 @@ export async function handleTodoList({ todos, merge = false } = {}) {
     };
   }
 
-  if (!Array.isArray(todos)) {
-    return { success: false, output: `Error: "todos" harus berupa array, diterima ${typeof todos}.` };
+  const daftar = coerceTodosInput(todos);
+  if (!daftar) {
+    return {
+      success: false,
+      output: `Error: "todos" harus berupa array tugas, diterima ${typeof todos}. Kirim daftar seperti [{"id":"1","content":"...","status":"pending"}].`,
+    };
   }
 
   try {
-    const items = todoStore.write(todos, Boolean(merge));
+    const items = todoStore.write(daftar, coerceMerge(merge));
     return {
       success: true,
       output: JSON.stringify(

package/src/update.js

@@ -33,7 +33,7 @@ export async function runUpdate(options = {}) {
 
   if (!isGit) {
     console.log(theme.warning('  ⚠️  Instalasi bAIwor Code ini tidak dijalankan dari repositori Git.'));
-    console.log(theme.muted('      Gunakan `npm update -g baiworcode` untuk pembaruan paket npm.\n'));
+    console.log(theme.muted('      Gunakan `npm update -g @baiworcode/baiworcode` untuk pembaruan paket npm.\n'));
     return { updated: false, message: 'Non-git installation' };
   }