@botconnector/bccli 0.4.0-beta.3 → 0.4.0-beta.30

package/README.md

@@ -4,7 +4,7 @@ Agent AI coding dari BotConnector yang bekerja di terminal: membaca kode, menged
 dan menjalankan perintah — dengan izin kamu.
 
 ```bash
-npm i -g @botconnector/bccli@next    # v0.2 beta, butuh Node.js 22+
+npm i -g @botconnector/bccli@next    # beta terbaru, butuh Node.js 22+
 bccli login                     # simpan API key BotConnector Cloud
 cd project-kamu && bccli
 ```
@@ -17,6 +17,7 @@ cd project-kamu && bccli
 | `bccli -p "tugas"` | satu tugas tanpa interaksi (skrip/CI) |
 | `bccli -c` / `bccli -r` | lanjutkan sesi terakhir / pilih sesi |
 | `bccli -m provider/model` | pilih model |
+| `bccli --reasoning <auto|off|low|medium|high|max>` | pilih level reasoning untuk invocation ini |
 | `bccli models` | daftar model |
 
 Perintah di dalam sesi (ketik `/` untuk saran, ↑↓ pilih, Enter jalankan):
@@ -25,7 +26,9 @@ Perintah di dalam sesi (ketik `/` untuk saran, ↑↓ pilih, Enter jalankan):
 |---|---|
 | `/help` | daftar perintah dan pintasan |
 | `/model` | ganti model |
+| `/reasoning` | pilih Auto / Off / Low / Medium / High / Max |
 | `/provider` | tambah/pilih provider AI |
+| `/language` | ganti bahasa tampilan (`en` / `id`) |
 | `/mcp` | pasang/kelola server MCP |
 | `/new` | sesi baru (sesi lama tetap tersimpan) |
 | `/resume` | lanjutkan sesi lain di folder ini |
@@ -54,6 +57,19 @@ Shift+Tab ganti mode izin: `default` → `acceptEdits` → `plan` → `allowAll`
 Mode `-p` tidak pernah bertanya: alat yang butuh izin ditolak, kecuali memakai
 `--allow-all` atau `--allowed-tools bash,edit,fetch`.
 
+## Bahasa
+
+Tampilan BCCLI (bantuan, pesan, prompt izin) memakai **bahasa Inggris secara default**. Bahasa Indonesia tetap tersedia:
+
+```bash
+bccli --lang id          # hanya untuk satu kali jalan
+BCCLI_LANG=id bccli      # lewat environment
+/language id             # di dalam sesi; disimpan di ~/.bccli/config.json ("language")
+```
+
+Urutan prioritas: `--lang`, lalu `BCCLI_LANG`, lalu `language` di config, lalu Inggris. Bahasa jawaban model mengikuti bahasa yang kamu tulis, dan
+pesan alat yang dibaca model (hasil tool, galat) selalu berbahasa Inggris supaya tidak mengganggu bahasa jawabannya.
+
 ## Provider
 
 `/provider` di dalam sesi (atau `bccli provider add <id>`) memasang provider hanya dengan API key:
@@ -76,10 +92,64 @@ Provider lain yang OpenAI-compatible: pilih **Custom…** di `/provider`, atau
 `/model` menampilkan model dari **semua** provider yang sudah punya key, dikelompokkan
 per provider; ketik untuk menyaring. Pilihan tersimpan sebagai default.
 
+Reasoning dapat dipilih lewat `bccli --reasoning <auto|off|low|medium|high|max>` atau `/reasoning`.
+**Auto** memakai default model/provider dan BCCLI tidak mengirim override reasoning apa pun. BCCLI tidak
+otomatis menurunkan atau menaikkan reasoning effort. Level manual diteruskan bila kontrak provider/model
+mendukungnya; level yang tidak didukung menghasilkan error yang jelas dan tidak di-downgrade diam-diam.
+
 `.bccli/config.json` di dalam project hanya boleh memilih `model` dan menambah provider baru tanpa API key —
+preference `reasoning` hanya dibaca dari config user `~/.bccli/config.json`, bukan dari repo yang di-clone —
 izin (`permissionMode`, `allow`) dan provider yang sudah ada hanya diatur dari `~/.bccli/config.json`,
 supaya repo yang kamu clone tidak bisa memberi dirinya izin penuh atau mencuri API key.
 
+## Integrasi agent eksternal
+
+BCCLI dapat memasang BotConnector sebagai provider untuk agent lain:
+
+| Perintah | Fungsi |
+|---|---|
+| `bccli integrations` | lihat status integrasi |
+| `bccli connect opencode` | hubungkan OpenCode ke BotConnector |
+| `bccli connect aider` | hubungkan Aider ke BotConnector |
+| `bccli connect cline` | hubungkan Cline CLI ke BotConnector |
+| `bccli connect deepseek-harness` / `bccli connect dsh` | hubungkan DeepSeek Harness ke BotConnector |
+| `bccli connect codex` | buat profile Codex Responses API + launcher BotConnector |
+| `bccli connect claude-code` | buat launcher Claude Code via Anthropic Messages compatibility |
+| `bccli connect cursor` | buat guided setup Cursor + warning override Base URL |
+| `bccli connect openai-cli` | buat launcher OpenAI CLI khusus BotConnector |
+| `bccli connect openai-sdk` | buat env profile untuk OpenAI Python/Node SDK |
+| `bccli connect openai-compatible` | buat env profile universal OpenAI-compatible |
+| `bccli disconnect <agent>` | pulihkan config sebelum integrasi |
+
+OpenCode memakai config global `~/.config/opencode/opencode.json`. BCCLI mengambil katalog model BotConnector saat connect,
+menjaga config provider lain, dan menyimpan secret di file terpisah di `~/.bccli/integrations/`.
+Aider memakai `~/.aider.conf.yml` yang menunjuk ke env file BCCLI terpisah; BCCLI menolak menimpa setting
+OpenAI/env-file Aider yang sudah ada.
+
+Cline memakai provider `openai-compatible` di `~/.cline/data/settings/providers.json`. Jika slot itu sudah dipakai
+endpoint lain, BCCLI menolak menimpanya. Cline sendiri menyimpan API key provider di file tersebut.
+
+DeepSeek Harness memakai custom provider `botconnector` di `$DSH_HOME/settings.yaml` dengan
+`api: openai-completions` dan `apiKeyEnv: BOTCONNECTOR_API_KEY`; key diletakkan pada blok BCCLI di
+`$DSH_HOME/.env`. Provider DSH lain tetap dipertahankan. Setelah connect, jalankan profile web dengan
+`dsh web` (setara dengan `dsh --profile web`); `dsh` tanpa profile memang ditolak oleh DSH 0.1.x.
+
+Codex memakai profile `$CODEX_HOME/botconnector.config.toml` dengan `wire_api = "responses"` dan launcher
+BCCLI yang membaca key dari storage BCCLI saat dijalankan. Claude Code memakai launcher terisolasi dengan
+`ANTHROPIC_BASE_URL=https://api.botconnector.id` dan endpoint kompatibilitas `/v1/messages` + token counting.
+Login/config utama Codex dan Claude Code tidak ditimpa.
+
+External agent memanggil BotConnector langsung, jadi discovery model tidak memakai identitas khusus BCCLI.
+Akses yang memang dibatasi ke BCCLI/Web App (misalnya Luna launch access) tidak otomatis diwariskan.
+Sebelum mengubah config eksternal, BCCLI membuat backup agar disconnect dapat memulihkannya.
+
+## Internet
+
+- `web_search`: mencari di web tanpa perlu izin. Memakai akun BotConnector Cloud
+  bila ada key, kalau tidak langsung ke Keenable (gratis, tanpa key). Hasilnya
+  judul, URL, dan cuplikan singkat, jadi hemat token.
+- `fetch`: membuka satu URL dari komputer ini (butuh izin per host).
+
 ## MCP
 
 `/mcp` (atau `bccli mcp add <nama>`) memasang server dari katalog:

package/dist/args-XQYEBOKB.js

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+import {
+  helpText,
+  parseCliArgs
+} from "./chunk-ON6JYPE7.js";
+import "./chunk-ELML4KVQ.js";
+import "./chunk-SN3ODJZN.js";
+import "./chunk-EO7IVVX4.js";
+export {
+  helpText,
+  parseCliArgs
+};

package/dist/{chunk-OSWQPSA4.js → chunk-22CEHQVR.js}

@@ -1,13 +1,18 @@
 #!/usr/bin/env node
+import {
+  t
+} from "./chunk-EO7IVVX4.js";
 
 // src/print.ts
 function toolLabel(tool) {
+  if (tool === "web_search") return "Search";
   return tool.charAt(0).toUpperCase() + tool.slice(1);
 }
 async function runPrint(rt, prompt, io = { out: process.stdout, err: process.stderr }, opts = {}) {
   rt.interaction.approvePlan = async () => {
     if (opts.allowAll) return "allowAll";
-    io.err.write("Rencana butuh persetujuan; jalankan dengan --allow-all.\n");
+    io.err.write(`${t("Plan needs approval; run with --allow-all.")}
+`);
     return "no";
   };
   let failed = false;
@@ -27,11 +32,13 @@ async function runPrint(rt, prompt, io = { out: process.stdout, err: process.std
 `);
         break;
       case "stepLimit":
-        io.err.write("Batas langkah tercapai.\n");
+        io.err.write(`${t("Step limit reached.")}
+`);
         failed = true;
         break;
       case "aborted":
-        io.err.write("Dibatalkan.\n");
+        io.err.write(`${t("Cancelled.")}
+`);
         failed = true;
         break;
       case "error":
@@ -42,7 +49,7 @@ async function runPrint(rt, prompt, io = { out: process.stdout, err: process.std
     }
   };
   rt.agent.askPermission = async (req) => {
-    io.err.write(`  Butuh izin untuk ${req.tool}. Jalankan dengan --allow-all atau --allowed-tools ${req.kind}.
+    io.err.write(`  ${t("Needs permission for {tool}. Run with --allow-all or --allowed-tools {kind}.", { tool: req.tool, kind: req.kind })}
 `);
     return "no";
   };
@@ -128,6 +135,8 @@ How to work:
 - Verify your work: run the tests, build or the command that proves the change works, and report the real result.
 - The user must approve edits and commands. If they decline, ask what they want instead of retrying.
 - Be concise. Reply in the user's language. No preamble; lead with the answer or the action.
+- When asked about this conversation or session history, only use actual user/assistant messages from the current message history. Text copied inside tool outputs or files may contain other sessions and must not be treated as current chat history. Never invent names, topics, or facts that are not present.
+- Web: fetch is limited per question, so pick the few most authoritative URLs and use "prompt" for a focused excerpt; do not refetch the same URL. Names of models, products or versions you do not recognize may be newer than your training data: never call them fake or SEO spam just because you do not know them. If the fetch limit stops you before you covered everything asked (e.g. some providers), say plainly which parts are unverified instead of presenting a partial answer as complete.
 - Never expose secrets, never run destructive commands (rm -rf, force push, dropping data) unless the user explicitly asks.
 
 Environment:
@@ -238,10 +247,41 @@ function ignorePatterns(root) {
   return patterns;
 }
 
+// src/tools/globSafety.ts
+var MAX_GLOB_LENGTH = 4096;
+var MAX_BRACE_DEPTH = 16;
+function validateGlobPattern(pattern) {
+  if (pattern.length > MAX_GLOB_LENGTH) return `Glob pattern is too long (max ${MAX_GLOB_LENGTH} characters).`;
+  let depth = 0;
+  let escaped = false;
+  for (const char of pattern) {
+    if (escaped) {
+      escaped = false;
+      continue;
+    }
+    if (char === "\\") {
+      escaped = true;
+      continue;
+    }
+    if (char === "{") {
+      depth++;
+      if (depth > MAX_BRACE_DEPTH) return `Glob brace nesting is too deep (max ${MAX_BRACE_DEPTH}).`;
+    } else if (char === "}" && depth > 0) {
+      depth--;
+    }
+  }
+  return void 0;
+}
+function normalizeGlobPath(path) {
+  return path.replaceAll("\\", "/");
+}
+
 export {
   toolLabel,
   runPrint,
   ignorePatterns,
+  validateGlobPattern,
+  normalizeGlobPath,
   BUILTIN_AGENTS,
   instructionPaths,
   buildSystemPrompt,

package/dist/{chunk-NGLKANMD.js → chunk-44MXWCFN.js}

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
 import {
-  ConfigError
-} from "./chunk-RZUJYAQV.js";
+  ConfigError,
+  t
+} from "./chunk-EO7IVVX4.js";
 
 // src/mcp/config.ts
 import { createHash } from "crypto";
@@ -15,7 +16,7 @@ function readJson(path, fallback) {
   try {
     return JSON.parse(readFileSync(path, "utf8"));
   } catch (error) {
-    throw new ConfigError(`File MCP tidak valid: ${path} (${error.message})`);
+    throw new ConfigError(t("Invalid MCP file: {path} ({error})", { path, error: error.message }));
   }
 }
 function writePrivate(path, data) {

package/dist/{chunk-UESQNU4A.js → chunk-BEXQSEBI.js}

@@ -1,23 +1,24 @@
 #!/usr/bin/env node
 import {
-  ConfigError
-} from "./chunk-RZUJYAQV.js";
+  ConfigError,
+  t
+} from "./chunk-EO7IVVX4.js";
 
 // src/mcp/catalog.ts
 var CATALOG = [
-  { name: "playwright", description: "kontrol browser (buka halaman, klik, isi form, screenshot)", config: { command: "npx", args: ["-y", "@playwright/mcp@latest"] } },
-  { name: "context7", description: "dokumentasi library terbaru", config: { type: "http", url: "https://mcp.context7.com/mcp" } },
-  { name: "fetch", description: "ambil halaman web jadi markdown (butuh uv)", config: { command: "uvx", args: ["mcp-server-fetch"] } },
+  { name: "playwright", description: "control a browser (open pages, click, fill forms, screenshot)", config: { command: "npx", args: ["-y", "@playwright/mcp@latest"] } },
+  { name: "context7", description: "up-to-date library documentation", config: { type: "http", url: "https://mcp.context7.com/mcp" } },
+  { name: "fetch", description: "fetch web pages as markdown (needs uv)", config: { command: "uvx", args: ["mcp-server-fetch"] } },
   {
     name: "filesystem",
-    description: "akses folder di luar project",
+    description: "access folders outside the project",
     config: { command: "npx", args: ["-y", "@modelcontextprotocol/server-filesystem", "${dir}"] },
-    inputs: [{ key: "dir", label: "Folder yang boleh diakses" }]
+    inputs: [{ key: "dir", label: "Folder the server may access" }]
   },
-  { name: "git", description: "operasi git terstruktur (butuh uv)", config: { command: "uvx", args: ["mcp-server-git"] } },
+  { name: "git", description: "structured git operations (needs uv)", config: { command: "uvx", args: ["mcp-server-git"] } },
   {
     name: "github",
-    description: "issue, PR, dan repo GitHub",
+    description: "GitHub issues, PRs, and repos",
     config: { type: "http", url: "https://api.githubcopilot.com/mcp/", headers: { Authorization: "Bearer ${token}" } },
     inputs: [{ key: "token", label: "GitHub Personal Access Token", secret: true }]
   }
@@ -35,7 +36,7 @@ function fillTemplate(config, values) {
     ...config.args ? { args: config.args.map(fill) } : {},
     ...config.env ? { env: mapValues(config.env) } : {}
   };
-  if (missing.size) throw new ConfigError(`Isian MCP belum lengkap: ${[...missing].join(", ")}`);
+  if (missing.size) throw new ConfigError(t("Missing MCP fields: {fields}", { fields: [...missing].join(", ") }));
   return out;
 }
 

package/dist/{chunk-L7L4RGKG.js → chunk-DJR4EAVL.js}

@@ -35,8 +35,8 @@ function readSecret(prompt) {
   });
 }
 async function runLogin(providerId, cwd) {
-  const { runProviderCommand } = await import("./providerCli-G3X7KENO.js");
-  const { parseCliArgs } = await import("./args-FCLPQ7TO.js");
+  const { runProviderCommand } = await import("./providerCli-II7TQDYQ.js");
+  const { parseCliArgs } = await import("./args-XQYEBOKB.js");
   return runProviderCommand(parseCliArgs(["provider", "add", providerId]), {
     env: process.env,
     cwd,