agen-vektor 0.3.20 → 0.3.22

package/README.md

@@ -359,6 +359,7 @@ Every shell command is classified:
 | `vector-tui.methatech.eu.org` (VectorHead Free gateway) | Only if you pick the free tier; the shared provider key stays server-side, users never see it |
 | Brave / Exa / Serper | Only when you use the web-search tool with your own key |
 | `vector-tui.methatech.eu.org/v1/web-search` | Web search when you have NO search key of your own — the query is relayed by the gateway; your own key, when set, always takes precedence and bypasses the relay |
+| `vector-tui.methatech.eu.org/v1/e2b/run` | `e2b_run` tool — run a command in a disposable cloud sandbox (E2B VM) when the local machine is too weak/restricted; relayed by the gateway, no E2B key needed client-side |
 | Raw model catalog (public JSON) | To populate the free-tier model list |
 
 **Stored locally** (all in `~/.vector/`): `config.json` (preferences, no secrets), `credentials.json` (only keys *you* enter, file mode 0600), sessions, memory, logs. Nothing else is written anywhere.
@@ -408,7 +409,7 @@ npm run build
 - **"model not found" on the free tier** — the free catalog rotates; run `/model` to pick from the live list.
 - **"Rate limited (429) / cooling down"** — VectorHead retries automatically with backoff, and the free gateway cools down briefly instead of burning the shared key. Switch to another free model via `/model` and retry.
 - **Nothing happens on `vector` in Termux** — make sure your terminal is a TTY and TERM is set (e.g. `export TERM=xterm-256color`). If glyphs look broken (█ everywhere, torn logo), ASCII safe mode is already default-on; desktop users can opt back in with `VECTOR_ASCII=0`.
-- **Runs out of iterations** — raise `maxIterations` in `~/.vector/config.json` or refine the request.
+- **Runs out of iterations** — open `/settings` in the TUI and press `+`/`-` (or PgUp/PgDn, or type a number) to raise `maxIterations` — persisted to `~/.vector/config.json` — or refine the request.
 
 ## Roadmap
 

package/dist/agent/agent.js

@@ -8,6 +8,7 @@ const search_1 = require("../tools/search");
 const shell_1 = require("../tools/shell");
 const git_1 = require("../tools/git");
 const web_1 = require("../tools/web");
+const e2b_1 = require("../tools/e2b");
 const extras_1 = require("../tools/extras");
 const apply_patch_1 = require("../tools/apply-patch");
 const permissions_1 = require("../security/permissions");
@@ -59,6 +60,9 @@ class Agent {
             (0, shell_1.createShellTool)(),
             (0, git_1.createGitTool)(),
             ...(0, web_1.createWebTools)(),
+            // E2B cloud sandbox (via gateway relay): e2b_run / e2b_status —
+            // eksekusi di VM cloud utk perangkat lemah, zero-config (key di gateway).
+            ...(0, e2b_1.createE2bTools)(),
             // Freebuff-style extras: glob, read_subtree, task_completed,
             // suggest_followups, render_ui.
             ...(0, extras_1.createExtrasTools)(),

package/dist/tools/e2b.js

@@ -0,0 +1,144 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createE2bTools = createE2bTools;
+const credentials_1 = require("../config/credentials");
+const free_tier_1 = require("../config/free-tier");
+const GW_BASE = free_tier_1.FREE_GATEWAY_URL.replace(/\/v1$/, '');
+// Poll interval env-overridable (test memakai VECTOR_E2B_POLL_MS=10).
+const POLL_INTERVAL_MS = Math.max(10, Number(process.env.VECTOR_E2B_POLL_MS) || 3_000);
+const POLL_MAX_MS = 320_000; // > E2B_MAX_TIMEOUT_MS worker (300s) + margin
+const OUT_CAP = 20_000;
+async function postRun(command, timeoutMs) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), 30_000);
+    try {
+        const res = await fetch(GW_BASE + '/v1/e2b/run', {
+            method: 'POST',
+            signal: controller.signal,
+            headers: { 'Content-Type': 'application/json', 'User-Agent': 'VectorHead-AI-Agent/0.1' },
+            body: JSON.stringify({ command, timeout_ms: timeoutMs }),
+        });
+        const data = (await res.json().catch(() => null));
+        return { res, data };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+async function fetchStatus(id) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), 20_000);
+    try {
+        const res = await fetch(GW_BASE + '/v1/e2b/status?id=' + encodeURIComponent(id), {
+            signal: controller.signal,
+            headers: { 'User-Agent': 'VectorHead-AI-Agent/0.1' },
+        });
+        const data = (await res.json().catch(() => null));
+        return { res, data };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+function formatResult(s) {
+    const exit = s.exitCode === null || s.exitCode === undefined ? '?' : s.exitCode;
+    let out = `exit ${exit}`;
+    if (s.stdout)
+        out += '\n' + s.stdout.slice(0, OUT_CAP);
+    if (s.stderr)
+        out += (s.stdout ? '\n[stderr]\n' : '') + s.stderr.slice(0, Math.min(OUT_CAP, 10_000));
+    return out;
+}
+async function pollUntilDone(id) {
+    const deadline = Date.now() + POLL_MAX_MS;
+    let last = null;
+    while (Date.now() < deadline) {
+        await new Promise((r) => setTimeout(r, POLL_INTERVAL_MS));
+        const { res, data } = await fetchStatus(id);
+        if (!res.ok || !data)
+            continue; // gesit — coba lagi sampai deadline
+        last = data;
+        if (data.status === 'done' || data.status === 'error')
+            return data;
+    }
+    return last;
+}
+function createE2bTools() {
+    return [
+        {
+            definition: {
+                name: 'e2b_run',
+                description: 'Run a shell command inside a disposable cloud sandbox (E2B VM via the VectorHead gateway relay) and wait for the result. Use when the local machine is too weak/restricted for a task — builds, installs, or tests that do not fit locally. Network is available in the sandbox. Returns exit code + stdout/stderr (this tool blocks until the command finishes; timeout default 120s, max 300s). Destructive commands (mkfs, fork bombs, pipe-to-shell) are rejected by the relay policy.',
+                parameters: {
+                    type: 'object',
+                    properties: {
+                        command: { type: 'string', description: 'The shell command to run in the sandbox (bash -lc; use && to chain)' },
+                        timeout_ms: { type: 'number', description: 'Timeout in ms (default 120000, max 300000)' },
+                    },
+                    required: ['command'],
+                },
+            },
+            async execute(args, ctx) {
+                const command = String(args.command || '').trim();
+                if (!command)
+                    return { output: 'ERROR: provide a "command"' };
+                const timeoutMs = Math.min(300_000, Math.max(5_000, Number(args.timeout_ms) || 120_000));
+                ctx.onActivity?.('e2b', `sandbox: ${command.slice(0, 80)}`);
+                const { res, data } = await postRun(command, timeoutMs);
+                if (!res.ok || !data || !data.id) {
+                    const why = data?.error ? ` — ${(0, credentials_1.redact)(data.error)}` : '';
+                    return { output: `ERROR: e2b relay HTTP ${res.status}${why}`, summary: 'e2b relay error' };
+                }
+                const done = await pollUntilDone(data.id);
+                if (!done) {
+                    return {
+                        output: `ERROR: e2b job ${data.id} belum selesai dan polling kehabisan waktu — cek manual: curl '${GW_BASE}/v1/e2b/status?id=${data.id}'`,
+                        summary: 'e2b polling timeout',
+                        data: { id: data.id },
+                    };
+                }
+                if (done.status === 'error') {
+                    return {
+                        output: `ERROR: e2b job failed${done.error ? ': ' + (0, credentials_1.redact)(done.error) : ''}`,
+                        summary: 'e2b job error',
+                        data: { id: data.id },
+                    };
+                }
+                const out = formatResult(done);
+                return {
+                    output: out,
+                    summary: `e2b sandbox → exit ${done.exitCode ?? '?'}`,
+                    data: { id: data.id, exitCode: done.exitCode, stdout: done.stdout, stderr: done.stderr },
+                };
+            },
+        },
+        {
+            definition: {
+                name: 'e2b_status',
+                description: 'Check the result of an E2B sandbox job by id (from e2b_run): status (running|done|error), exit code, stdout/stderr. Only needed when you kept an id and want the latest state without polling yourself.',
+                parameters: {
+                    type: 'object',
+                    properties: {
+                        id: { type: 'string', description: 'Job id returned by e2b_run' },
+                    },
+                    required: ['id'],
+                },
+            },
+            async execute(args) {
+                const id = String(args.id || '').trim();
+                if (!/^[A-Za-z0-9-]{8,80}$/.test(id))
+                    return { output: 'ERROR: invalid job id' };
+                const { res, data } = await fetchStatus(id);
+                if (!res.ok || !data) {
+                    const why = data?.error ? ` — ${(0, credentials_1.redact)(data.error)}` : '';
+                    return { output: `ERROR: e2b status HTTP ${res.status}${why}`, summary: 'e2b status error' };
+                }
+                return {
+                    output: data.status === 'done' || data.status === 'error' ? formatResult(data) : `status: ${data.status}`,
+                    summary: `e2b job ${id}: ${data.status}`,
+                    data,
+                };
+            },
+        },
+    ];
+}

package/dist/tui/app.js

@@ -2373,7 +2373,6 @@ class App {
             case 'help':
             case 'commands':
             case 'status':
-            case 'settings':
                 if (ev.name === 'escape' || ev.name === 'enter' || ev.name === 'ctrl_c' || (ev.name === 'char' && ev.char === '?')) {
                     this.modal = { type: 'none' };
                 }
@@ -2392,6 +2391,74 @@ class App {
                     this.followBottom = this.scroll >= Math.max(0, all.length - this.chatHeight());
                 }
                 break;
+            case 'settings':
+                // /settings is mostly read-only, but Max iterations is LIVE-EDITABLE:
+                // hitting the iteration limit mid-task used to require manual
+                // ~/.vector/config.json surgery. +/- (and up/down) step the budget,
+                // 0 and number keys type an exact value, Enter/commit keeps the
+                // dialog open (backspace too — stray presses must not vaporize it),
+                // Esc still closes. Changes persist via saveConfig immediately.
+                {
+                    const cfg = this.agent.config;
+                    const step = (d) => {
+                        const next = Math.min(200, Math.max(1, cfg.maxIterations + d));
+                        if (next === cfg.maxIterations)
+                            return;
+                        cfg.maxIterations = next;
+                        try {
+                            (0, config_1.saveConfig)(cfg);
+                        }
+                        catch {
+                            /* read-only home — in-memory value still applies this session */
+                        }
+                        this.addSystem(`Max iterations: ${next}.`);
+                    };
+                    if (ev.name === 'escape') {
+                        this.modal = { type: 'none' };
+                    }
+                    else if (ev.name === 'enter' || ev.name === 'ctrl_c') {
+                        this.addSystem(`Max iterations: ${cfg.maxIterations} (tersimpan di ~/.vector/config.json).`);
+                    }
+                    else if (ev.name === 'up' || ev.name === 'char' && ev.char === '+') {
+                        step(+1);
+                    }
+                    else if (ev.name === 'down' || ev.name === 'char' && ev.char === '-') {
+                        step(-1);
+                    }
+                    else if (ev.name === 'pageup') {
+                        step(+10);
+                    }
+                    else if (ev.name === 'pagedown') {
+                        step(-10);
+                    }
+                    else if (ev.name === 'char' && ev.char === '0') {
+                        step(-cfg.maxIterations + 1);
+                    }
+                    else if (ev.name === 'char' && ev.char && /[0-9]/.test(ev.char)) {
+                        // Number keys type the exact value (not digit-append — no
+                        // visible field, so append would be invisible state).
+                        const next = Math.min(200, Math.max(1, Number(ev.char)));
+                        if (next !== cfg.maxIterations) {
+                            cfg.maxIterations = next;
+                            try {
+                                (0, config_1.saveConfig)(cfg);
+                            }
+                            catch {
+                                /* read-only home */
+                            }
+                            this.addSystem(`Max iterations: ${next}.`);
+                        }
+                    }
+                    else if (ev.name === 'char' && ev.char === '?') {
+                        this.modal = { type: 'none' };
+                    }
+                    else if (ev.name === 'char' && ev.char) {
+                        // Other letters: keep the old close-and-insert behavior.
+                        this.modal = { type: 'none' };
+                        this.input.insert(ev.char);
+                    }
+                }
+                break;
             case 'provider':
                 await this.handleSelector(modal, ev, this.providerPickerOptions(), async (opt) => {
                     const c = this.agent.config;
@@ -3166,7 +3233,9 @@ class App {
                         label('Model', this.agent.config.model),
                         label('Theme', this.agent.config.theme || 'vectorhead'),
                         label('Mode', this.agent.config.permissionMode),
-                        label('Max iterations', String(this.agent.config.maxIterations)),
+                        // LIVE-EDITABLE: +/- / ↑↓ / PgUp-PgDn step the budget, digits
+                        // type an exact value — persisted to ~/.vector/config.json.
+                        label('Max iterations', `${this.agent.config.maxIterations}  ${theme_1.THEME.muted}(+/- / ↑↓ / PgUp-PgDn / angka)${theme_1.THEME.reset}`),
                         label('Max retries', String(this.agent.config.maxRetries)),
                         label('API URL', this.agent.config.apiUrl || '(default)'),
                         label('Key configured', (0, credentials_1.hasApiKey)(this.agent.config.provider) ? 'yes' : 'no'),
@@ -3184,7 +3253,7 @@ class App {
                         label('Env vars', 'VECTOR_API_KEY VECTOR_API_URL'),
                         label('', 'VECTOR_MODEL VECTOR_PROVIDER'),
                     ],
-                    footer: 'Esc/Enter close · edit via the commands above',
+                    footer: 'Esc close · +/- ubah max iterations (tersimpan otomatis)',
                 }, rows, cols);
             }
             case 'status':
@@ -3216,9 +3285,16 @@ class App {
                         body: ['Fetching models from provider…', '', 'Esc to cancel'],
                     }, rows, cols);
                 }
-                if (m.error) {
+                if (m.error && m.options.length === 0) {
                     // Fetch failed (bad/missing URL or stored key) — show the real
                     // reason (e.g. "HTTP 401 …") instead of a misleading 1-item list.
+                    // BUT only when there is NOTHING selectable: if the provider def
+                    // declares models in config, those options were already merged in
+                    // (openModelModal always populates options from the fallback list
+                    // before setting error) and the picker must stay usable — endpoints
+                    // without GET /models (e.g. Cloudflare Workers AI compat: HTTP 405
+                    // "GET not supported") would otherwise brick /model entirely
+                    // (live VPS 2026-09-10).
                     return (0, components_1.renderModal)({
                         title: `Model (${(0, factory_1.displayProviderName)(this.agent.config)})`,
                         body: [m.error, '', 'Esc to cancel'],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agen-vektor",
-  "version": "0.3.20",
+  "version": "0.3.22",
   "description": "VectorHead (agen-vektor) — AI Coding Agent CLI/TUI for Linux & Termux. Multi-provider, tool calling, session, permission system.",
   "type": "commonjs",
   "bin": {