@nemoobc/opencode-termux 1.19.1 → 1.20.4

package/config/plugins/strip-parameter.js

@@ -0,0 +1,55 @@
+// strip-parameter.js — opencode plugin (global: ~/.config/opencode/plugins/)
+// Membersihkan raw XML tool-call tags literal (mis. <parameter>, </function_calls>,
+// <parameter name="...">) dari output TEKS model SEBELUM dirender TUI, supaya
+// tag mentah tidak bocor ke layar.
+//
+// Mitigasi lokal atas issue opencode #24316 (bug "<parameter>" literal di TUI),
+// sejalan dengan pendekatan PR #27984 (strip dangling XML artifacts).
+//
+// CATATAN: Hook "experimental.text.complete" bersifat eksperimental & hanya
+// memodifikasi output teks. Plugin murni ESM tanpa dependensi eksternal.
+
+export const StripParameterPlugin = async (ctx) => {
+  try {
+    await ctx?.client?.app.log?.({
+      body: {
+        service: "strip-parameter",
+        level: "info",
+        message: "Plugin initialized — mensupresi raw XML tool-call tags dari output teks",
+      },
+    })
+  } catch {}
+
+  return {
+    "experimental.text.complete": async (_input, output) => {
+      const before = output.text
+      if (typeof before !== "string" || !before.includes("<")) return
+
+      let text = before
+
+      // 1) Hapus blok tool-call XML lengkap (tag + konten)
+      text = text.replace(/<function_calls>[\s\S]*?<\/function_calls>/g, "")
+      text = text.replace(/<tool_call>[\s\S]*?<\/tool_call>/g, "")
+      text = text.replace(/<invoke\b[^>]*>[\s\S]*?<\/invoke>/g, "")
+      text = text.replace(/<antml:function_calls>[\s\S]*?<\/antml:function_calls>/g, "")
+
+      // 2) Hapus pasangan <parameter ...>...</parameter> & <parameter>...</parameter>
+      text = text.replace(/<parameter\b[^>]*>[\s\S]*?<\/parameter>/g, "")
+
+      // 3) Hapus tag tool-call "dangling" (pembuka/penutup tanpa pasangan)
+      text = text.replace(/<\/?parameter\b[^>]*>/g, "")
+      text = text.replace(/<\/?invoke\b[^>]*>/g, "")
+      text = text.replace(/<\/?function_calls\b[^>]*>/g, "")
+      text = text.replace(/<\/?tool_call\b[^>]*>/g, "")
+      text = text.replace(/<\/?antml:\w+(?:\s[^>]*)?>/g, "")
+      text = text.replace(/<\|mask_start\|>[\s\S]*?<\|mask_end\|>/g, "")
+
+      // 4) Rapikan baris kosong berlebih & spasi sisa
+      text = text.replace(/[ \t]+\n/g, "\n").replace(/\n{3,}/g, "\n\n")
+
+      if (text !== before) output.text = text
+    },
+  }
+}
+
+export default StripParameterPlugin

package/install.mjs

@@ -11,33 +11,35 @@ import { execFileSync } from "child_process"
 import { Readable } from "stream"
 import { pipeline } from "stream/promises"
 import { fileURLToPath } from "url"
+import { alpinePkg } from "./lib/alpine.mjs"
+import { fetchWithRetry } from "./lib/net.mjs"
+import { expectedFromRegistry, verifySha512 } from "./lib/integrity.mjs"
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url))
 const pkgJson = JSON.parse(fs.readFileSync(path.join(__dirname, "package.json"), "utf8"))
 const ARCH = process.env.OCX_ARCH || "arm64"
 const FORCE = !!process.env.OCX_FORCE
 const IS_ANDROID = process.platform === "android"
+const T0 = Date.now()
+const log = m => console.log(`[opencode-termux] ${m}`)
 
 // Versi upstream: env > package.json > otomatis ambil terbaru dari registry
 let V = process.env.OCX_UPSTREAM || pkgJson.opencodeUpstream
 if (!V) {
   const latest = await (await fetch("https://registry.npmjs.org/opencode-ai/latest")).json()
   V = latest.version
-  console.log(`[opencode-termux] upstream opencode-ai terbaru: ${V}`)
+  log(`upstream opencode-ai terbaru: ${V}`)
 }
-const GLOBAL_HINT =
-  process.platform === "win32" ? "" : ""
-
 if (!IS_ANDROID && !FORCE) {
-  console.log("[opencode-termux] Bukan Termux/Android — instalasi dilewati (pakai opencode-ai resmi).")
+  log("Bukan Termux/Android — instalasi dilewati (pakai opencode-ai resmi).")
   process.exit(0)
 }
 
 const A = ARCH === "x64" ? "x86_64" : "aarch64"
 
 async function dl(url, dest) {
-  console.log(`[opencode-termux] download ${url.split("/").pop()}`)
-  const res = await fetch(url)
+  log(`download ${url.split("/").pop()}`)
+  const res = await fetchWithRetry(fetch, url, {}, 3, m => log(m))
   if (!res.ok) throw new Error(`HTTP ${res.status} — ${url}`)
   await pipeline(Readable.fromWeb(res.body), fs.createWriteStream(dest))
 }
@@ -54,87 +56,132 @@ const untar = (tgz, dest, members = []) => {
 const work = path.join(__dirname, ".build")
 fs.rmSync(work, { recursive: true, force: true })
 fs.mkdirSync(work, { recursive: true })
-const AV = "v3.21", AL = "3.21.3"
-
-// 1) binary opencode (musl) dari npm resmi
-await dl(`https://registry.npmjs.org/opencode-linux-${ARCH}-musl/-/opencode-linux-${ARCH}-musl-${V}.tgz`, `${work}/oc.tgz`)
-untar(`${work}/oc.tgz`, `${work}/oc`)
 
-// 2) libgcc + libstdc++
-const apkDir = `${work}/apk`; fs.mkdirSync(apkDir, { recursive: true })
-for (const f of [`libgcc-14.2.0-r4.apk`, `libstdc%2B%2B-14.2.0-r4.apk`]) {
-  await dl(`https://dl-cdn.alpinelinux.org/alpine/${AV}/main/${A}/${f}`, `${apkDir}/${f}`)
-  untar(`${apkDir}/${f}`, apkDir)
+async function fetchLatestAlpineVersion() {
+  try {
+    const res = await fetchWithRetry(fetch, "https://dl-cdn.alpinelinux.org/alpine/latest-stable/", {}, 3)
+    if (!res.ok) throw new Error(`HTTP ${res.status}`)
+    const text = await res.text()
+    const match = text.match(/href="(v\d+\.\d+)"/)
+    if (match) return match[1]
+  } catch {}
+  return "v3.21"
 }
 
-// 3) rakit vendor/
-const vendor = path.join(__dirname, "vendor")
-fs.rmSync(vendor, { recursive: true, force: true }); fs.mkdirSync(vendor)
-const cp = (dir, name) => fs.copyFileSync(path.join(dir, name), path.join(vendor, name))
-if (A === "aarch64") {
-  // loader hasil build khusus: resolv.conf & hosts menunjuk ke prefix Termux
-  cp(path.join(__dirname, "prebuilt"), "ld-musl-aarch64-termux.so")
-  fs.renameSync(path.join(vendor, "ld-musl-aarch64-termux.so"), path.join(vendor, "ld-musl.so"))
-} else {
-  const mini = `${work}/ap`; await dl(
-    `https://dl-cdn.alpinelinux.org/alpine/${AV}/releases/${A}/alpine-minirootfs-${AL}-${A}.tar.gz`, `${work}/ap.tgz`)
-  untar(`${work}/ap.tgz`, mini, ["lib"])
-  cp(`${mini}/lib`, `ld-musl-${A}.so.1`); fs.renameSync(path.join(vendor, `ld-musl-${A}.so.1`), path.join(vendor, "ld-musl.so"))
+async function fetchAlpineReleaseVersion(version) {
+  try {
+    const res = await fetchWithRetry(fetch, `https://dl-cdn.alpinelinux.org/alpine/${version}/releases/${A}/`, {}, 3)
+    if (!res.ok) throw new Error(`HTTP ${res.status}`)
+    const text = await res.text()
+    const match = text.match(new RegExp(`alpine-minirootfs-(\\d+\\.\\d+\\.\\d+)-${A}\\.tar\\.gz`))
+    if (match) return match[1]
+  } catch {}
+  return "3.21.3"
 }
-cp(`${work}/oc/package/bin`, "opencode")
-cp(`${apkDir}/usr/lib`, "libstdc++.so.6"); cp(`${apkDir}/usr/lib`, "libstdc++.so.6.0.33"); cp(`${apkDir}/usr/lib`, "libgcc_s.so.1")
-for (const f of fs.readdirSync(vendor)) fs.chmodSync(path.join(vendor, f), 0o755)
 
-// 4) siapkan DNS config di prefix Termux (bisa ditulis TANPA root)
-function ensureEtc() {
-  try {
-    const PREFIX = process.env.TERMUX_PREFIX || "/data/data/com.termux/files/usr"
-    const etc = path.join(PREFIX, "etc")
-    fs.mkdirSync(etc, { recursive: true })
-    const rc = path.join(etc, "resolv.conf")
-    if (!fs.existsSync(rc)) fs.writeFileSync(rc, "nameserver 1.1.1.1\nnameserver 8.8.8.8\n")
-    const hh = path.join(etc, "hosts")
-    if (!fs.existsSync(hh)) fs.writeFileSync(hh, "127.0.0.1 localhost\n")
-  } catch (e) {
-    if (!FORCE && IS_ANDROID) throw e
+try {
+  const AV = process.env.OCX_ALPINE_VERSION || await fetchLatestAlpineVersion()
+  const AL = await fetchAlpineReleaseVersion(AV)
+  log(`Alpine version: ${AV} (release ${AL})`)
+
+  // Resolusi dinamis paket Alpine dari CDN (lihat lib/alpine.mjs)
+  const pkg = name => alpinePkg(fetch, `https://dl-cdn.alpinelinux.org/alpine/${AV}/main/${A}`, name)
+
+  // 1) binary opencode (musl) dari npm resmi — diverifikasi sha512 registry
+  const ocTgz = `opencode-linux-${ARCH}-musl-${V}.tgz`
+  await dl(`https://registry.npmjs.org/opencode-linux-${ARCH}-musl/-/${ocTgz}`, `${work}/oc.tgz`)
+  log("verifikasi integritas sha512…")
+  const pk = await (await fetchWithRetry(fetch, `https://registry.npmjs.org/opencode-linux-${ARCH}-musl`, {}, 3)).json()
+  verifySha512(`${work}/oc.tgz`, expectedFromRegistry(pk, V))
+  untar(`${work}/oc.tgz`, `${work}/oc`)
+
+  // 2) libgcc + libstdc++ (versi terbaru yang tersedia di CDN)
+  const apkDir = `${work}/apk`; fs.mkdirSync(apkDir, { recursive: true })
+  for (const name of ["libgcc", "libstdc%2B%2B"]) {
+    const f = await pkg(name)
+    await dl(`https://dl-cdn.alpinelinux.org/alpine/${AV}/main/${A}/${f}`, `${apkDir}/${f}`)
+    untar(`${apkDir}/${f}`, apkDir)
   }
-}
-ensureEtc()
 
-// 5) smoke test (LD_PRELOAD termux-exec dibuang: tidak kompatibel dengan musl)
-console.log("[opencode-termux] smoke test…")
-const { LD_PRELOAD, LD_PRELOAD_32BIT, ...cleanEnv } = process.env
-execFileSync(path.join(vendor, "ld-musl.so"),
-  [path.join(vendor, "opencode"), "--version"],
-  { stdio: "inherit", env: { ...cleanEnv, LD_LIBRARY_PATH: vendor } })
+  // 3) rakit vendor/
+  const vendor = path.join(__dirname, "vendor")
+  fs.rmSync(vendor, { recursive: true, force: true }); fs.mkdirSync(vendor)
+  const cp = (dir, name) => fs.copyFileSync(path.join(dir, name), path.join(vendor, name))
+  if (A === "aarch64") {
+    // loader hasil build khusus: resolv.conf & hosts menunjuk ke prefix Termux
+    cp(path.join(__dirname, "prebuilt"), "ld-musl-aarch64-termux.so")
+    fs.renameSync(path.join(vendor, "ld-musl-aarch64-termux.so"), path.join(vendor, "ld-musl.so"))
+  } else {
+    const mini = `${work}/ap`; await dl(
+      `https://dl-cdn.alpinelinux.org/alpine/${AV}/releases/${A}/alpine-minirootfs-${AL}-${A}.tar.gz`, `${work}/ap.tgz`)
+    untar(`${work}/ap.tgz`, mini, ["lib"])
+    cp(`${mini}/lib`, `ld-musl-${A}.so.1`); fs.renameSync(path.join(vendor, `ld-musl-${A}.so.1`), path.join(vendor, "ld-musl.so"))
+  }
+  cp(`${work}/oc/package/bin`, "opencode")
+  cp(`${apkDir}/usr/lib`, "libstdc++.so.6"); cp(`${apkDir}/usr/lib`, "libstdc++.so.6.0.33"); cp(`${apkDir}/usr/lib`, "libgcc_s.so.1")
+  for (const f of fs.readdirSync(vendor)) fs.chmodSync(path.join(vendor, f), 0o755)
 
-// 6) auto-install agents, commands & config opencode (tanpa menimpa milik user)
-try {
-  const HOME = process.env.HOME || "/data/data/com.termux/files/home"
-  const OC = path.join(HOME, ".config", "opencode")
-  for (const [srcDir, dstName] of [["agents", "agent"], ["commands", "command"]]) {
-    const src = path.join(__dirname, srcDir)
-    if (!fs.existsSync(src)) continue
-    const dst = path.join(OC, dstName)
-    fs.mkdirSync(dst, { recursive: true })
-    for (const f of fs.readdirSync(src)) {
-      fs.copyFileSync(path.join(src, f), path.join(dst, f))
-      console.log(`[opencode-termux] ✅ terpasang: ${dstName}/${f}`)
+  // 4) siapkan DNS config di prefix Termux (bisa ditulis TANPA root)
+  function ensureEtc() {
+    try {
+      const PREFIX = process.env.TERMUX_PREFIX || "/data/data/com.termux/files/usr"
+      const etc = path.join(PREFIX, "etc")
+      fs.mkdirSync(etc, { recursive: true })
+      const rc = path.join(etc, "resolv.conf")
+      if (!fs.existsSync(rc)) fs.writeFileSync(rc, "nameserver 1.1.1.1\nnameserver 8.8.8.8\n")
+      const hh = path.join(etc, "hosts")
+      if (!fs.existsSync(hh)) fs.writeFileSync(hh, "127.0.0.1 localhost\n")
+    } catch (e) {
+      if (!FORCE && IS_ANDROID) throw e
+      log("peringatan: setup resolv.conf dilewati (" + e.message.split("\n")[0] + ")")
     }
   }
-  const cfgSrc = path.join(__dirname, "config", "opencode.json")
-  const cfgDst = path.join(OC, "opencode.json")
-  if (!fs.existsSync(cfgDst)) {
-    fs.copyFileSync(cfgSrc, cfgDst)
-    console.log("[opencode-termux] ✅ config default terpasang (model gratis)")
+  ensureEtc()
+
+  // 5) smoke test (LD_PRELOAD termux-exec dibuang: tidak kompatibel dengan musl)
+  if (process.env.OCX_SKIP_SMOKE === "1") {
+    log("smoke test dilewati (OCX_SKIP_SMOKE=1 — mode cross-build)")
   } else {
-    console.log("[opencode-termux] config user sudah ada — tidak disentuh")
+    log("smoke test…")
+    const { LD_PRELOAD, LD_PRELOAD_32BIT, ...cleanEnv } = process.env
+    execFileSync(path.join(vendor, "ld-musl.so"),
+      [path.join(vendor, "opencode"), "--version"],
+      { stdio: "inherit", env: { ...cleanEnv, LD_LIBRARY_PATH: vendor } })
+  }
+
+  // 6) auto-install agents, commands & config opencode (tanpa menimpa milik user)
+  try {
+    const HOME = process.env.HOME || "/data/data/com.termux/files/home"
+    const OC = path.join(HOME, ".config", "opencode")
+    for (const [srcDir, dstName] of [["agents", "agent"], ["commands", "command"]]) {
+      const src = path.join(__dirname, srcDir)
+      if (!fs.existsSync(src)) continue
+      const dst = path.join(OC, dstName)
+      fs.mkdirSync(dst, { recursive: true })
+      for (const f of fs.readdirSync(src)) {
+        fs.copyFileSync(path.join(src, f), path.join(dst, f))
+        log(`✅ terpasang: ${dstName}/${f}`)
+      }
+    }
+    const cfgSrc = path.join(__dirname, "config", "opencode.json")
+    const cfgDst = path.join(OC, "opencode.json")
+    if (!fs.existsSync(cfgDst)) {
+      fs.copyFileSync(cfgSrc, cfgDst)
+      log("✅ config default terpasang (model gratis)")
+    } else {
+      log("config user sudah ada — tidak disentuh")
+    }
+  } catch (e) {
+    log("auto-install agent dilewati:", e.message)
   }
 } catch (e) {
-  console.log("[opencode-termux] auto-install agent dilewati:", e.message)
+  console.error("[opencode-termux] ❌ instalasi gagal:", e.message)
+  process.exitCode = 1
+  throw e
+} finally {
+  fs.rmSync(work, { recursive: true, force: true })
 }
 
-fs.rmSync(work, { recursive: true, force: true })
-console.log(`[opencode-termux] ✅ siap!
+console.log(`[opencode-termux] ✅ siap dalam ${((Date.now() - T0) / 1000).toFixed(1)}s
 • global : jalankan 'opencode-termux'
 • lokal  : 'npx opencode-termux' dari folder project ini`)

package/lib/alpine.mjs

@@ -0,0 +1,30 @@
+/**
+ * Resolver paket Alpine dari CDN — anti-404 saat Alpine memperbarui paket
+ * dalam satu branch. Fallback ke versi terakhir yang diketahui hidup.
+ */
+export const cmpVer = (a, b) => {
+  const pa = a.split(/[.\-r]/).filter(Boolean).map(Number)
+  const pb = b.split(/[.\-r]/).filter(Boolean).map(Number)
+  for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
+    if ((pa[i] || 0) !== (pb[i] || 0)) return (pa[i] || 0) - (pb[i] || 0)
+  }
+  return 0
+}
+
+export async function alpinePkg(fetchFn, cdnBase, nameEncoded, fallback = "14.2.0-r4") {
+  let latest = null
+  try {
+    const res = await fetchFn(`${cdnBase}/`)
+    const idx = await res.text()
+    const re = new RegExp(`${nameEncoded}-([0-9][0-9a-zA-Z.+]*)-r([0-9]+)\\.apk`, "g")
+    for (const m of idx.matchAll(re)) {
+      const v = `${m[1]}-r${m[2]}`
+      if (!latest || cmpVer(v, latest.v) > 0) latest = { file: m[0], v }
+    }
+  } catch {}
+  if (!latest) {
+    console.warn(`[opencode-termux] listing CDN gagal — fallback ${nameEncoded}-${fallback}.apk`)
+    latest = { file: `${nameEncoded}-${fallback}.apk`, v: fallback }
+  }
+  return latest.file
+}

package/lib/alpine.ts

@@ -0,0 +1,39 @@
+/**
+ * Resolver paket Alpine dari CDN — anti-404 saat Alpine memperbarui paket
+ * dalam satu branch. Fallback ke versi terakhir yang diketahui hidup.
+ */
+export function cmpVer(a: string, b: string): number {
+  const pa = a.split(/[.\-r]/).filter(Boolean).map(Number)
+  const pb = b.split(/[.\-r]/).filter(Boolean).map(Number)
+  for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
+    if ((pa[i] || 0) !== (pb[i] || 0)) return (pa[i] || 0) - (pb[i] || 0)
+  }
+  return 0
+}
+
+export interface FetchFn {
+  (url: string, options?: RequestInit): Promise<{ text: () => Promise<string> }>
+}
+
+export async function alpinePkg(
+  fetchFn: FetchFn,
+  cdnBase: string,
+  nameEncoded: string,
+  fallback = "14.2.0-r4"
+): Promise<string> {
+  let latest: { file: string; v: string } | null = null
+  try {
+    const res = await fetchFn(`${cdnBase}/`)
+    const idx = await res.text()
+    const re = new RegExp(`${nameEncoded}-([0-9][0-9a-zA-Z.+]*)-r([0-9]+)\\.apk`, "g")
+    for (const m of idx.matchAll(re)) {
+      const v = `${m[1]}-r${m[2]}`
+      if (!latest || cmpVer(v, latest.v) > 0) latest = { file: m[0], v }
+    }
+  } catch {}
+  if (!latest) {
+    console.warn(`[opencode-termux] listing CDN gagal — fallback ${nameEncoded}-${fallback}.apk`)
+    latest = { file: `${nameEncoded}-${fallback}.apk`, v: fallback }
+  }
+  return latest.file
+}

package/lib/integrity.mjs

@@ -0,0 +1,24 @@
+/**
+ * Verifikasi integritas file terhadap hash sha512 format registry npm
+ * ("sha512-<base64>"). Mencegah tarball korup/termanipulasi saat transit.
+ */
+import crypto from "crypto"
+import fs from "fs"
+
+export const expectedFromRegistry = (packument, version) => {
+  const dist = packument?.versions?.[version]?.dist
+  return dist?.integrity?.startsWith("sha512-") ? dist.integrity.slice(7) : null
+}
+
+export function verifySha512(filePath, expectedB64) {
+  if (!expectedB64) throw new Error("tidak ada hash acuan (integrity) dari registry")
+  const h = crypto.createHash("sha512")
+  h.update(fs.readFileSync(filePath))
+  const got = h.digest("base64")
+  const a = Buffer.from(got)
+  const b = Buffer.from(expectedB64)
+  if (a.length !== b.length || !crypto.timingSafeEqual(a, b)) {
+    throw new Error(`integritas gagal: file ≠ sha512 registry (${filePath})`)
+  }
+  return true
+}

package/lib/integrity.ts

@@ -0,0 +1,28 @@
+/**
+ * Verifikasi integritas file terhadap hash sha512 format registry npm
+ * ("sha512-<base64>"). Mencegah tarball korup/termanipulasi saat transit.
+ */
+import crypto from "crypto"
+import fs from "fs"
+
+export interface Packument {
+  versions?: Record<string, { dist?: { integrity?: string } }>
+}
+
+export function expectedFromRegistry(packument: Packument, version: string): string | null {
+  const dist = packument?.versions?.[version]?.dist
+  return dist?.integrity?.startsWith("sha512-") ? dist.integrity.slice(7) : null
+}
+
+export function verifySha512(filePath: string, expectedB64: string): true {
+  if (!expectedB64) throw new Error("tidak ada hash acuan (integrity) dari registry")
+  const h = crypto.createHash("sha512")
+  h.update(fs.readFileSync(filePath))
+  const got = h.digest("base64")
+  const a = Buffer.from(got)
+  const b = Buffer.from(expectedB64)
+  if (a.length !== b.length || !crypto.timingSafeEqual(a, b)) {
+    throw new Error(`integritas gagal: file ≠ sha512 registry (${filePath})`)
+  }
+  return true
+}

package/lib/net.mjs

@@ -0,0 +1,30 @@
+/**
+ * Utilitas jaringan: fetch dengan retry + backoff eksponensial.
+ * fetchFn dapat disuntik untuk unit test.
+ */
+const RETRYABLE_ERRORS = new Set(["ENOTFOUND", "ECONNRESET", "ETIMEDOUT", "ENETUNREACH", "EAI_AGAIN"])
+
+export async function fetchWithRetry(fetchFn, url, opts = {}, retries = 3, log = () => {}) {
+  let lastErr
+  for (let attempt = 1; attempt <= retries; attempt++) {
+    try {
+      const res = await fetchFn(url, opts)
+      // 429/5xx → layak dicoba ulang; 4xx lain → gagal permanen
+      if (!res.ok && res.status < 500 && res.status !== 429) return res
+      if (res.ok) return res
+      lastErr = new Error(`HTTP ${res.status} — ${url}`)
+    } catch (e) {
+      lastErr = e
+      const code = e?.cause?.code || e?.code
+      if (code && !RETRYABLE_ERRORS.has(code)) {
+        throw e
+      }
+    }
+    if (attempt < retries) {
+      const wait = Math.min(1000 * 2 ** (attempt - 1), 8000)
+      log(`gagal (${attempt}/${retries}) — ulang dalam ${wait}ms`)
+      await new Promise(r => setTimeout(r, wait))
+    }
+  }
+  throw lastErr
+}

package/lib/net.ts

@@ -0,0 +1,51 @@
+/**
+ * Utilitas jaringan: fetch dengan retry + backoff eksponensial.
+ * fetchFn dapat disuntik untuk unit test.
+ */
+
+interface ResponseLike {
+  ok: boolean
+  status: number
+  body: ReadableStream<Uint8Array> | null
+  text(): Promise<string>
+  json<T = unknown>(): Promise<T>
+}
+
+interface ErrorWithCode extends Error {
+  code?: string
+  cause?: { code?: string }
+}
+
+const RETRYABLE_ERRORS = new Set(["ENOTFOUND", "ECONNRESET", "ETIMEDOUT", "ENETUNREACH", "EAI_AGAIN"])
+
+export type FetchFn = (url: string, options?: RequestInit) => Promise<ResponseLike | Response>
+
+export async function fetchWithRetry(
+  fetchFn: FetchFn,
+  url: string,
+  opts: RequestInit = {},
+  retries = 3,
+  log: (msg: string) => void = () => {}
+): Promise<ResponseLike | Response> {
+  let lastErr: unknown
+  for (let attempt = 1; attempt <= retries; attempt++) {
+    try {
+      const res = await fetchFn(url, opts)
+      if (!res.ok && res.status < 500 && res.status !== 429) return res
+      if (res.ok) return res
+      lastErr = new Error(`HTTP ${res.status} — ${url}`)
+    } catch (e) {
+      lastErr = e
+      const code = (e as ErrorWithCode).cause?.code || (e as ErrorWithCode).code
+      if (code && !RETRYABLE_ERRORS.has(code)) {
+        throw e
+      }
+    }
+    if (attempt < retries) {
+      const wait = Math.min(1000 * 2 ** (attempt - 1), 8000)
+      log(`gagal (${attempt}/${retries}) — ulang dalam ${wait}ms`)
+      await new Promise(r => setTimeout(r, wait))
+    }
+  }
+  throw lastErr
+}

package/package.json

@@ -1,12 +1,18 @@
 {
   "name": "@nemoobc/opencode-termux",
-  "version": "1.19.1",
+  "version": "1.20.4",
   "description": "opencode CLI native untuk Termux/Android tanpa proot — membundel loader musl + binary opencode resmi (upstream opencode-ai)",
+  "type": "module",
   "bin": {
-    "opencode-termux": "./bin/opencode.js"
+    "opencode-termux": "./bin/opencode-termux.js"
   },
   "scripts": {
-    "postinstall": "node install.mjs"
+    "postinstall": "node install.mjs",
+    "test": "node test/run.mjs",
+    "test:e2e": "node test/run.mjs --e2e",
+    "lint": "echo 'No linter configured'",
+    "typecheck": "tsc --noEmit",
+    "build": "tsc"
   },
   "keywords": [
     "opencode",
@@ -22,13 +28,20 @@
   "files": [
     "bin",
     "install.mjs",
+    "lib",
     "prebuilt",
+    "LICENSE",
     "README.md",
     "agents",
     "commands",
     "config"
   ],
-  "opencodeUpstream": "1.18.21",
+  "devDependencies": {
+    "@types/node": "^26.4.0",
+    "typescript": "^5.9.3",
+    "tsx": "^4.19.0"
+  },
+  "opencodeUpstream": "1.18.23",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/nemoobc/opencode-termux.git"

package/prebuilt/README.md

@@ -0,0 +1,77 @@
+# Prebuilt musl Loader Rebuild Guide
+
+File `ld-musl-aarch64-termux.so` adalah custom musl loader yang dipatch agar:
+- Membaca `/etc/resolv.conf` dan `/etc/hosts` dari `$PREFIX/etc/` (Termux prefix)
+- Bukan dari `/etc/` (butuh root)
+
+## Cara Rebuild
+
+### Prasyarat
+- Linux host (bisa WSL, VM, atau CI)
+- Docker terinstall
+- `aarch64-linux-musl` toolchain
+
+### Langkah Build
+
+```bash
+# 1. Clone musl repo (versi yang kompatibel dengan Alpine 3.21)
+git clone https://git.musl-libc.org/git/musl
+cd musl
+git checkout v1.2.5  # atau tag yang dipakai Alpine 3.21
+
+# 2. Patch src/internal/dynlink.c untuk ganti path resolv.conf & hosts
+# Cari baris yang define RESOLV_CONF dan HOSTS_PATH, ganti ke:
+# #define RESOLV_CONF "/data/data/com.termux/files/usr/etc/resolv.conf"
+# #define HOSTS_PATH  "/data/data/com.termux/files/usr/etc/hosts"
+
+# 3. Build dengan cross-compiler aarch64
+./configure --prefix=/out --target=aarch64-linux-musl --disable-shared
+make -j$(nproc)
+make install
+
+# 4. Ambil ld-musl-aarch64.so.1 dari /out/lib/
+# Rename ke ld-musl-aarch64-termux.so
+cp /out/lib/ld-musl-aarch64.so.1 ../prebuilt/ld-musl-aarch64-termux.so
+chmod +x ../prebuilt/ld-musl-aarch64-termux.so
+```
+
+### Alternatif: Build via Docker (lebih bersih)
+
+```dockerfile
+# Dockerfile.build-musl
+FROM alpine:3.21 AS builder
+RUN apk add --no-cache build-base linux-headers git
+WORKDIR /musl
+RUN git clone https://git.musl-libc.org/git/musl . && git checkout v1.2.5
+# Apply patch di sini (sed atau patch file)
+RUN sed -i 's|/etc/resolv.conf|/data/data/com.termux/files/usr/etc/resolv.conf|g' src/internal/dynlink.c
+RUN sed -i 's|/etc/hosts|/data/data/com.termux/files/usr/etc/hosts|g' src/internal/dynlink.c
+RUN ./configure --prefix=/out --target=aarch64-linux-musl --disable-shared && make -j$(nproc) && make install
+
+FROM scratch
+COPY --from=builder /out/lib/ld-musl-aarch64.so.1 /ld-musl-aarch64-termux.so
+```
+
+```bash
+docker build -f Dockerfile.build-musl -t musl-builder .
+docker create --name temp musl-builder
+docker cp temp:/ld-musl-aarch64-termux.so ./prebuilt/ld-musl-aarch64-termux.so
+docker rm temp
+```
+
+### Verifikasi
+
+```bash
+# Cek ELF
+file prebuilt/ld-musl-aarch64-termux.so
+# Output: ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked
+
+# Cek string patch
+strings prebuilt/ld-musl-aarch64-termux.so | grep -E 'resolv.conf|hosts'
+# Harus muncul path Termux prefix
+```
+
+### Catatan
+- Loader ini **hanya untuk ARM64 (aarch64)**. Untuk x64, install.mjs otomatis ambil dari Alpine minirootfs.
+- Jika Alpine naik versi major (mis. 3.22), mungkin perlu rebuild ulang loader agar kompatibel.
+- Simpan binary hasil build ke `prebuilt/ld-musl-aarch64-termux.so` dan commit.