agen-vektor 0.3.13 → 0.3.14

package/README.md

@@ -50,7 +50,7 @@ incrementally with no flicker.
 ## Contents
 
 - [Features](#features) · [Installation](#installation) · [Quick start](#quick-start) · [Command line](#command-line) · [TUI commands](#tui-commands)
-- [Provider configuration](#provider-configuration) · [Themes](#themes) · [Security model](#security-model) · [Architecture](#architecture) · [Development](#development)
+- [Provider configuration](#provider-configuration) · [Themes](#themes) · [Security model](#security-model) · [Privacy](#privacy) · [Architecture](#architecture) · [Development](#development)
 - [Testing](#testing) · [Troubleshooting](#troubleshooting) · [Roadmap](#roadmap) · [License](#license)
 
 ## Features
@@ -307,6 +307,23 @@ Every shell command is classified:
 
 `--yolo` auto-approves ASK-level actions but still prompts for DANGEROUS and refuses BLOCKED ones. API keys are never printed to the terminal, logs, diffs, or session history.
 
+## Privacy
+
+**VectorHead collects nothing.** No telemetry, no analytics, no crash reporting, no usage tracking — there is no code in the app that could phone home. Every network destination in the source is auditable:
+
+| Destination | When |
+|---|---|
+| Your configured AI provider (OpenAI, Anthropic, Gemini, OpenRouter, Ollama, custom) | Only when you chat — with **your own** API key |
+| `vector-tui.methatech.eu.org` (VectorHead Free gateway) | Only if you pick the free tier; the shared provider key stays server-side, users never see it |
+| Brave / Exa / Serper | Only when you use the web-search tool with your own key |
+| Raw model catalog (public JSON) | To populate the free-tier model list |
+
+**Stored locally** (all in `~/.vector/`): `config.json` (preferences, no secrets), `credentials.json` (only keys *you* enter, file mode 0600), sessions, memory, logs. Nothing else is written anywhere.
+
+**No device identity.** The app does not generate a device id or send any tracking header (the old anonymous `device-id` + `X-Vector-Device` pair was fully removed in 0.3.14).
+
+**The agent guards itself against secrets** — its own file tools refuse to read or write `.env`, private keys, `credentials.json`, kubeconfig, and similar files (override only via explicit `VECTOR_ALLOW_SENSITIVE=1`), so a prompt cannot accidentally exfiltrate them.
+
 ## Architecture
 
 ```

package/dist/agent/agent.js

@@ -64,14 +64,13 @@ class Agent {
     permissions;
     cwd;
     constructor(opts) {
-        // Free tier (vectorhead-free): define the provider entry, expose the
-        // anonymous device id for the {env:} header template, and default a
+        // Free tier (vectorhead-free): define the provider entry and default a
         // FIRST RUN (no config.json yet) to the free tier so onboarding is
         // "install & pick a model" with zero keys. Existing configs keep their
-        // active provider; only the free ENTRY is (re)defined.
+        // active provider; only the free ENTRY is (re)defined. No per-device
+        // identity: the gateway requires none (X-Vector-Device removed 2026-09-05).
         const firstRun = !opts.config && (0, free_tier_1.isFirstRun)(fs.existsSync((0, paths_1.getConfigPath)()));
         const seeded = (0, config_1.effectiveConfig)(opts.config);
-        (0, free_tier_1.exportDeviceIdEnv)();
         if ((0, free_tier_1.ensureFreeProvider)(seeded)) {
             try {
                 (0, config_1.saveConfig)(seeded);

package/dist/config/free-tier.js

@@ -9,65 +9,25 @@
  *
  * Design:
  * - `vectorhead-free` is an OpenCode-style entry in config.providers with an
- *   INLINE placeholder key. The gateway identifies users by the anonymous
- *   device id sent via the X-Vector-Device header, so no real key exists —
+ *   INLINE placeholder key. The gateway holds the real provider key as a
+ *   server-side secret and does NOT require any per-device or per-user
+ *   identity from the client (per-device quota was removed 2026-09-05 —
+ *   X-Vector-Device is no longer sent), so no real key exists client-side —
  *   the inline placeholder simply satisfies "custom providers need a key"
  *   checks without storing anything secret on the user's disk.
- * - The device id lives in ~/.vector/device-id (NOT config.json, so config
- *   stays copyable between machines; a copied device id would merge two
- *   users into one quota bucket). Header templating "{env:VECTOR_DEVICE_ID}"
- *   resolves at request time via providerHeaders().
  * - First run (no config.json): the agent starts on this provider so a new
  *   user can chat immediately — pick BYOK later via /connect. An EXISTING
  *   config is never touched except to (re)define the free provider entry.
  */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.FREE_DEFAULT_MODEL = exports.FREE_PROVIDER_ID = exports.CATALOG_TTL_MS = exports.FREE_CATALOG_URL = exports.FREE_GATEWAY_CATALOG_URL = exports.FREE_GATEWAY_URL = void 0;
 exports.resetFreeCatalogCache = resetFreeCatalogCache;
 exports.freeTierEnabled = freeTierEnabled;
-exports.ensureDeviceId = ensureDeviceId;
-exports.exportDeviceIdEnv = exportDeviceIdEnv;
 exports.freeProviderDef = freeProviderDef;
 exports.ensureFreeProvider = ensureFreeProvider;
 exports.isFirstRun = isFirstRun;
 exports.fetchFreeCatalog = fetchFreeCatalog;
 exports.applyFreeCatalog = applyFreeCatalog;
-const fs = __importStar(require("node:fs"));
-const crypto = __importStar(require("node:crypto"));
-const paths_1 = require("../utils/paths");
 /** Public gateway base URL (custom Cloudflare domain — stable, no ports). */
 exports.FREE_GATEWAY_URL = 'https://vector-tui.methatech.eu.org/v1';
 /**
@@ -100,37 +60,6 @@ function freeTierEnabled() {
 exports.FREE_PROVIDER_ID = 'vectorhead-free';
 /** Default free model (cheap, gateway allowlist-friendly). */
 exports.FREE_DEFAULT_MODEL = 'deepseek-ai/DeepSeek-V4-Flash';
-/** File holding the anonymous per-device id. */
-function devicePath() {
-    return process.env.VECTOR_DEVICE_FILE || ((0, paths_1.getVectorDir)() + '/device-id');
-}
-/** Device id for the anonymous free tier: create on first use, reuse after. */
-function ensureDeviceId() {
-    try {
-        const p = devicePath();
-        if (fs.existsSync(p)) {
-            const existing = fs.readFileSync(p, 'utf8').trim();
-            if (/^[a-f0-9][a-f0-9-]{7,63}$/.test(existing))
-                return existing;
-        }
-        const fresh = crypto.randomUUID();
-        fs.writeFileSync(p, fresh + '\n', { mode: 0o600 });
-        return fresh;
-    }
-    catch {
-        // Read-only fs etc. — fall back to an ephemeral id for this session.
-        return crypto.randomUUID();
-    }
-}
-/** Export the current device id into the env for {env:} header templates. */
-function exportDeviceIdEnv() {
-    try {
-        process.env.VECTOR_DEVICE_ID = ensureDeviceId();
-    }
-    catch {
-        /* never block startup on this */
-    }
-}
 /** The providers-map entry for the free tier (idempotent — same shape always). */
 function freeProviderDef() {
     // When a catalog has been fetched in this process, the gateway URL and
@@ -149,10 +78,10 @@ function freeProviderDef() {
         name: 'VectorHead Free',
         options: {
             baseURL: (cat && typeof cat.gateway === 'string' && cat.gateway ? cat.gateway : exports.FREE_GATEWAY_URL),
-            // Placeholder ONLY — the gateway keys users by X-Vector-Device, not
-            // by a secret. Inline (not {env:}) so no env var is ever required.
+            // Placeholder ONLY — the gateway holds the real provider key as a
+            // server-side secret and accepts anonymous requests. Inline (not
+            // {env:}) so no env var is ever required.
             apiKey: 'vectorhead-free-anonymous',
-            headers: { 'X-Vector-Device': '{env:VECTOR_DEVICE_ID}' },
         },
         model: exports.FREE_DEFAULT_MODEL,
         models: Object.keys(models).length > 0 ? models : {

package/dist/tui/app.js

@@ -1642,7 +1642,11 @@ class App {
                 // line instead of a raw HTTP error — the dot still turns red above.
                 let errorContent = `⚠️ ${err.message}`;
                 if (exhausted && this.agent.config.provider === free_tier_1.FREE_PROVIDER_ID) {
-                    errorContent = '⚠️ Kuota VectorHead Free untuk perangkat ini sudah habis — coba lagi besok, atau pakai API key sendiri via /connect (BYOK).';
+                    // TIDAK ada kuota perangkat di tier free (dihapus dari gateway).
+                    // Error quota di sini = cooldown key GATEWAY (akun bersama), bukan
+                    // kesalahan user — jangan menuduh kuota habis.
+                    errorContent =
+                        '⚠️ Key gateway VectorHead Free sedang cooldown sebentar (dipakai akun bersama) — coba lagi beberapa menit, atau ganti model via /model, atau pakai API key sendiri via /connect (BYOK).';
                 }
                 this.messages.push({ kind: 'error', content: errorContent, ts: Date.now() });
                 this.scrollToLatest();
@@ -2704,8 +2708,7 @@ class App {
         if (c.provider === 'ollama')
             return true;
         // Named custom provider: an INLINE key in its definition (OpenCode
-        // options.apiKey) makes it usable as-is — the free tier ships exactly
-        // that (placeholder key + X-Vector-Device auth), so picking "VectorHead
+        // options.apiKey) makes it usable as-is — the free tier ships exactly                // that (placeholder key, no device identity), so picking "VectorHead
         // Free" in /connect must light the header up immediately.
         if ((0, providers_1.isCustomProvider)(c, c.provider))
             return !!(0, providers_1.providerApiKey)(c, c.provider);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agen-vektor",
-  "version": "0.3.13",
+  "version": "0.3.14",
   "description": "VectorHead (agen-vektor) — AI Coding Agent CLI/TUI for Linux & Termux. Multi-provider, tool calling, session, permission system.",
   "type": "commonjs",
   "bin": {