agen-vektor 0.3.22 → 0.3.24

package/README.md

@@ -71,6 +71,20 @@ npm install -g agen-vektor
 vector
 ```
 
+### Update (existing install)
+
+Sudah install VectorHead sebelumnya? Tinggal update paket global npm-nya lalu
+verifikasi versi:
+
+```bash
+npm install -g agen-vektor@latest
+vector --version
+```
+
+Config lama aman: model default yang sudah usang (`glm-5.3-flash` dst.)
+otomatis termigrasi saat aplikasi pertama kali dijalankan setelah update.
+Tidak ada langkah manual.
+
 ### From source
 
 ```bash

package/dist/config/free-tier.js

@@ -59,16 +59,16 @@ function freeTierEnabled() {
 /** Provider id used in config.provider / providers map. */
 exports.FREE_PROVIDER_ID = 'vectorhead-free';
 /**
- * Default free model (cheap, gateway allowlist-friendly). 2026-09-07: BACK
- * to `glm-5.3-flash` — the gateway allowlist flipped back from the 7-model
- * Claude window to the api.b.ai set: live GET /v1/models now serves hy3,
- * glm-5.3-flash, qwen3.8-max, mimo-v2.5, so `claude-sonnet-4-6` (the
- * 2026-09-06-malam default) is the id that would 404 on fresh installs.
- * glm-5.3-flash verified live end-to-end via the relay (chat 200). History
- * of the same trap: `deepseek-ai/DeepSeek-V4-Flash` (first default), then
- * claude-sonnet-4-6, now glm-5.3-flash again.
+ * Default free model (cheap, gateway allowlist-friendly). 2026-09-13:
+ * `kilo-auto/free` — gateway di-cutover ke Kilo Code (sesi "pindahkan
+ * provider di dashboard admin pilih kilo code"); id lama `glm-5.3-flash`
+ * TIDAK ada di katalog Kilo → onboarding user baru 404 "model not found"
+ * (ketemu via smoke test 0.3.22). Router Kilo terverifikasi live end-to-end
+ * (chat 200, dijawab dots-3-note-preview:free). Riwayat trap yang sama:
+ * `deepseek-ai/DeepSeek-V4-Flash` → `claude-sonnet-4-6` → `glm-5.3-flash`
+ * (dua flip 2026-09-06/07) → sekarang kilo-auto/free.
  */
-exports.FREE_DEFAULT_MODEL = 'glm-5.3-flash';
+exports.FREE_DEFAULT_MODEL = 'kilo-auto/free';
 /** The providers-map entry for the free tier (idempotent — same shape always). */
 function freeProviderDef() {
     // When a catalog has been fetched in this process, the gateway URL and
@@ -94,18 +94,21 @@ function freeProviderDef() {
         },
         model: exports.FREE_DEFAULT_MODEL,
         models: Object.keys(models).length > 0 ? models : {
-            [exports.FREE_DEFAULT_MODEL]: { name: 'GLM 5.3 Flash (free)' },
+            [exports.FREE_DEFAULT_MODEL]: { name: 'Kilo Auto (free)' },
         },
     };
 }
 /**
  * Stale first-run defaults — migrated to FREE_DEFAULT_MODEL once on
  * ensureFreeProvider (only while the free provider is active). glm-5.3-flash
- * itself was legacy during the 2026-09-06 Claude window; since 2026-09-07 it
- * is the default again, so the stale set is the original deepseek default
- * plus that window's claude default (no longer in the gateway allowlist).
+ * jadi legacy 2026-09-13 (cutover Kilo — id tidak ada di katalog Kilo);
+ * deepseek default pertama; claude-sonnet-4-6 window 2026-09-06.
  */
-exports.FREE_LEGACY_MODELS = ['deepseek-ai/DeepSeek-V4-Flash', 'claude-sonnet-4-6'];
+exports.FREE_LEGACY_MODELS = [
+    'deepseek-ai/DeepSeek-V4-Flash',
+    'claude-sonnet-4-6',
+    'glm-5.3-flash',
+];
 /**
  * Ensure the free provider entry exists in the config's providers map
  * (create or repair — never touches unrelated providers). Also migrates an

package/dist/tools/e2b.js

@@ -140,5 +140,204 @@ function createE2bTools() {
                 };
             },
         },
+        {
+            // ------------------------------------------------------------------
+            // CLOUD SESSION: sandbox persisten utk alur multi-langkah. Workflow
+            // browser testing (Chromium/Playwright headless DIJALANKAN DI SANDBOX):
+            //   1. e2b_cloud {action:'create'}
+            //   2. e2b_upload per file proyek (path absolut /home/user/...)
+            //   3. e2b_exec: npm install && npx playwright install --with-deps
+            //      chromium (SEKALI per session — install tersimpan di sandbox)
+            //   4. e2b_exec: node test.mjs (script playwright; screenshot →
+            //      /home/user/shots/...). ⚠️ chromium.launch WAJIB args:
+            //      --no-sandbox --disable-dev-shm-usage --disable-gpu
+            //      --js-flags=--jitless (tanpa itu → Target crashed: V8 CodeRange
+            //      OOM di VM kecil; --single-process dilarang — exit 13)
+            //   5. poll e2b_exec (jobId) sampai status done → baca output/exit
+            //   6. e2b_download artefak (screenshot/log) bila perlu
+            //   7. e2b_cloud {action:'close'} — WAJIB di akhir (kredit shared)
+            // ------------------------------------------------------------------
+            definition: {
+                name: 'e2b_cloud',
+                description: 'Manage a persistent cloud sandbox session (E2B VM) for multi-step work: create a session, or close it when finished. Unlike e2b_run (one-shot), files and installed packages PERSIST across calls within the session — use for project upload + build/test + browser testing (Chromium/Playwright run headless inside the sandbox). ALWAYS close the session when done (shared quota). Browser testing REQUIRES launching Chromium with: --no-sandbox --disable-dev-shm-usage --disable-gpu --js-flags=--jitless (without --jitless the page crashes: V8 CodeRange OOM on the small E2B VM). Playwright is NOT preinstalled — run: npm i playwright && npx playwright install --with-deps chromium (1-3 min, persists for the session).',
+                parameters: {
+                    type: 'object',
+                    properties: {
+                        action: { type: 'string', enum: ['create', 'close'], description: 'create = new persistent sandbox; close = kill it' },
+                        id: { type: 'string', description: 'Session id (required for close)' },
+                        ttl_s: { type: 'number', description: 'Session lifetime in seconds for create (default 1800, max 3600)' },
+                    },
+                    required: ['action'],
+                },
+            },
+            async execute(args, ctx) {
+                const action = String(args.action || '');
+                if (action === 'create') {
+                    const ttl = Math.min(3600, Math.max(120, Number(args.ttl_s) || 1800));
+                    ctx.onActivity?.('e2b', `cloud session create (${ttl}s)`);
+                    const res = await fetch(GW_BASE + '/v1/e2b/session', {
+                        method: 'POST',
+                        headers: { 'Content-Type': 'application/json', 'User-Agent': 'VectorHead-AI-Agent/0.1' },
+                        body: JSON.stringify({ ttl_s: ttl }),
+                        signal: AbortSignal.timeout(60_000),
+                    });
+                    const data = (await res.json().catch(() => null));
+                    if (!res.ok || !data?.id) {
+                        const why = data?.error ? ` — ${(0, credentials_1.redact)(data.error)}` : '';
+                        return { output: `ERROR: e2b session HTTP ${res.status}${why}`, summary: 'e2b session error' };
+                    }
+                    return {
+                        output: `session created: ${data.id} (ttl ${data.ttl}s)\nNext: e2b_upload files → e2b_exec commands (poll jobId) → e2b_download artifacts → e2b_cloud close.\nSession id: ${data.id}`,
+                        summary: `e2b session ${data.id}`,
+                        data,
+                    };
+                }
+                if (action === 'close') {
+                    const id = String(args.id || '');
+                    if (!/^[A-Za-z0-9-]{8,80}$/.test(id))
+                        return { output: 'ERROR: provide the session "id"' };
+                    ctx.onActivity?.('e2b', `cloud session close ${id}`);
+                    const res = await fetch(GW_BASE + '/v1/e2b/close?id=' + encodeURIComponent(id), { method: 'POST', signal: AbortSignal.timeout(30_000) });
+                    if (!res.ok)
+                        return { output: `ERROR: e2b close HTTP ${res.status}`, summary: 'e2b close error' };
+                    return { output: `session ${id} closed (sandbox killed).`, summary: `e2b session ${id} closed` };
+                }
+                return { output: 'ERROR: action harus create|close' };
+            },
+        },
+        {
+            definition: {
+                name: 'e2b_upload',
+                description: 'Upload one file into a persistent e2b cloud session (from e2b_cloud create). Content is sent as base64 — read local files first (size limit 20 MB). Target path must be absolute under /home/user/ or /tmp/.',
+                parameters: {
+                    type: 'object',
+                    properties: {
+                        id: { type: 'string', description: 'Session id from e2b_cloud create' },
+                        path: { type: 'string', description: 'Absolute path in the sandbox, e.g. /home/user/app/package.json' },
+                        content_b64: { type: 'string', description: 'File content encoded as base64' },
+                    },
+                    required: ['id', 'path', 'content_b64'],
+                },
+            },
+            async execute(args) {
+                const id = String(args.id || '');
+                const path = String(args.path || '').trim();
+                const content = String(args.content_b64 || '');
+                if (!/^[A-Za-z0-9-]{8,80}$/.test(id))
+                    return { output: 'ERROR: invalid session id' };
+                if (!/^\/(home\/user\/|tmp\/)/.test(path) || path.includes('..'))
+                    return { output: 'ERROR: path harus absolut di bawah /home/user/ atau /tmp/' };
+                if (!content)
+                    return { output: 'ERROR: content_b64 kosong' };
+                const res = await fetch(GW_BASE + '/v1/e2b/upload?id=' + encodeURIComponent(id), {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json', 'User-Agent': 'VectorHead-AI-Agent/0.1' },
+                    body: JSON.stringify({ path, content_b64: content }),
+                    signal: AbortSignal.timeout(120_000),
+                });
+                const data = (await res.json().catch(() => null));
+                if (!res.ok || !data?.ok) {
+                    const why = data?.error ? ` — ${(0, credentials_1.redact)(data.error)}` : '';
+                    return { output: `ERROR: e2b upload HTTP ${res.status}${why}`, summary: 'e2b upload error' };
+                }
+                return { output: `uploaded: ${path} (${data.size} bytes)`, summary: `e2b upload ${path}` };
+            },
+        },
+        {
+            definition: {
+                name: 'e2b_exec',
+                description: 'Run a command DETACHED inside a persistent e2b cloud session and WAIT for it to finish (polls automatically; long-running OK — e.g. npm install, npx playwright install --with-deps chromium, node test.mjs). Returns stdout/stderr + exit code. Use e2b_run for one-shot no-session commands instead. For Playwright scripts: launch Chromium with --no-sandbox --disable-dev-shm-usage --disable-gpu --js-flags=--jitless (else "Target crashed" — V8 CodeRange OOM on the small E2B VM) and NEVER --single-process (hard crash).',
+                parameters: {
+                    type: 'object',
+                    properties: {
+                        id: { type: 'string', description: 'Session id from e2b_cloud create' },
+                        command: { type: 'string', description: 'Shell command to run in the sandbox (bash -lc)' },
+                    },
+                    required: ['id', 'command'],
+                },
+            },
+            async execute(args, ctx) {
+                const id = String(args.id || '');
+                const command = String(args.command || '').trim();
+                if (!/^[A-Za-z0-9-]{8,80}$/.test(id))
+                    return { output: 'ERROR: invalid session id' };
+                if (!command)
+                    return { output: 'ERROR: provide a "command"' };
+                ctx.onActivity?.('e2b', `exec: ${command.slice(0, 80)}`);
+                const start = await fetch(GW_BASE + '/v1/e2b/exec?id=' + encodeURIComponent(id), {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json', 'User-Agent': 'VectorHead-AI-Agent/0.1' },
+                    body: JSON.stringify({ command }),
+                    signal: AbortSignal.timeout(30_000),
+                });
+                const startData = (await start.json().catch(() => null));
+                if (!start.ok || !startData?.jobId) {
+                    const why = startData?.error ? ` — ${(0, credentials_1.redact)(startData.error)}` : '';
+                    return { output: `ERROR: e2b exec HTTP ${start.status}${why}`, summary: 'e2b exec error' };
+                }
+                const jobId = startData.jobId;
+                const deadline = Date.now() + POLL_MAX_MS;
+                let last = '';
+                while (Date.now() < deadline) {
+                    await new Promise((r) => setTimeout(r, POLL_INTERVAL_MS));
+                    const pr = await fetch(GW_BASE + '/v1/e2b/job?id=' + encodeURIComponent(id) + '&job=' + encodeURIComponent(jobId), {
+                        signal: AbortSignal.timeout(30_000),
+                        headers: { 'User-Agent': 'VectorHead-AI-Agent/0.1' },
+                    });
+                    const pj = (await pr.json().catch(() => null));
+                    if (!pj)
+                        continue;
+                    if (pj.status === 'done') {
+                        const out = `exit ${pj.exitCode ?? '?'}\n${(pj.output || '').slice(0, OUT_CAP)}`;
+                        return { output: out, summary: `e2b exec → exit ${pj.exitCode ?? '?'}`, data: { jobId, exitCode: pj.exitCode, output: pj.output } };
+                    }
+                    if (pj.status === 'starting' || pj.status === 'running') {
+                        last = pj.output || last;
+                        continue;
+                    }
+                    return { output: `ERROR: e2b job error: ${pj.error || pj.status}`, summary: 'e2b job error', data: { jobId } };
+                }
+                return { output: `TIMEOUT menunggu job ${jobId}. Log terakhir:\n${last.slice(0, 4000)}`, summary: 'e2b exec polling timeout', data: { jobId } };
+            },
+        },
+        {
+            definition: {
+                name: 'e2b_download',
+                description: 'Download a file (artifact) from a persistent e2b cloud session — e.g. Playwright screenshots (/home/user/shots/*.png), logs, or build outputs. Returns the file content as base64 (prefix data with file type when writing locally, e.g. data:image/png;base64,).',
+                parameters: {
+                    type: 'object',
+                    properties: {
+                        id: { type: 'string', description: 'Session id from e2b_cloud create' },
+                        path: { type: 'string', description: 'Absolute path of the file in the sandbox' },
+                    },
+                    required: ['id', 'path'],
+                },
+            },
+            async execute(args) {
+                const id = String(args.id || '');
+                const path = String(args.path || '').trim();
+                if (!/^[A-Za-z0-9-]{8,80}$/.test(id))
+                    return { output: 'ERROR: invalid session id' };
+                if (!/^\/(home\/user\/|tmp\/)/.test(path) || path.includes('..'))
+                    return { output: 'ERROR: path harus absolut di bawah /home/user/ atau /tmp/' };
+                const res = await fetch(GW_BASE + '/v1/e2b/file?id=' + encodeURIComponent(id) + '&path=' + encodeURIComponent(path), {
+                    signal: AbortSignal.timeout(60_000),
+                    headers: { 'User-Agent': 'VectorHead-AI-Agent/0.1' },
+                });
+                if (!res.ok) {
+                    const t = await res.text().catch(() => '');
+                    return { output: `ERROR: e2b download HTTP ${res.status}${t ? ' — ' + (0, credentials_1.redact)(t.slice(0, 200)) : ''}`, summary: 'e2b download error' };
+                }
+                const buf = new Uint8Array(await res.arrayBuffer());
+                let bin = '';
+                for (let i = 0; i < buf.length; i++)
+                    bin += String.fromCharCode(buf[i]);
+                return {
+                    output: `downloaded ${path} (${buf.length} bytes)\nbase64:\n${btoa(bin)}`,
+                    summary: `e2b download ${path} (${buf.length}B)`,
+                    data: { path, size: buf.length, base64: btoa(bin) },
+                };
+            },
+        },
     ];
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agen-vektor",
-  "version": "0.3.22",
+  "version": "0.3.24",
   "description": "VectorHead (agen-vektor) — AI Coding Agent CLI/TUI for Linux & Termux. Multi-provider, tool calling, session, permission system.",
   "type": "commonjs",
   "bin": {