agen-vektor 0.3.23 → 0.3.25

package/README.md

@@ -71,6 +71,20 @@ npm install -g agen-vektor
 vector
 ```
 
+### Update (existing install)
+
+Sudah install VectorHead sebelumnya? Tinggal update paket global npm-nya lalu
+verifikasi versi:
+
+```bash
+npm install -g agen-vektor@latest
+vector --version
+```
+
+Config lama aman: model default yang sudah usang (`glm-5.3-flash` dst.)
+otomatis termigrasi saat aplikasi pertama kali dijalankan setelah update.
+Tidak ada langkah manual.
+
 ### From source
 
 ```bash

package/dist/tools/e2b.js

@@ -8,7 +8,7 @@ const GW_BASE = free_tier_1.FREE_GATEWAY_URL.replace(/\/v1$/, '');
 const POLL_INTERVAL_MS = Math.max(10, Number(process.env.VECTOR_E2B_POLL_MS) || 3_000);
 const POLL_MAX_MS = 320_000; // > E2B_MAX_TIMEOUT_MS worker (300s) + margin
 const OUT_CAP = 20_000;
-async function postRun(command, timeoutMs) {
+async function postRun(command, timeoutMs, proxy) {
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), 30_000);
     try {
@@ -16,7 +16,7 @@ async function postRun(command, timeoutMs) {
             method: 'POST',
             signal: controller.signal,
             headers: { 'Content-Type': 'application/json', 'User-Agent': 'VectorHead-AI-Agent/0.1' },
-            body: JSON.stringify({ command, timeout_ms: timeoutMs }),
+            body: JSON.stringify({ command, timeout_ms: timeoutMs, proxy }),
         });
         const data = (await res.json().catch(() => null));
         return { res, data };
@@ -25,6 +25,15 @@ async function postRun(command, timeoutMs) {
         clearTimeout(timer);
     }
 }
+/** Daftar proxy Webshare ter-mask (tanpa kredensial) via gateway relay. */
+async function fetchWebshareProxies() {
+    const res = await fetch(GW_BASE + '/v1/webshare/proxies', {
+        headers: { 'User-Agent': 'VectorHead-AI-Agent/0.1' },
+        signal: AbortSignal.timeout(30_000),
+    });
+    const data = (await res.json().catch(() => null));
+    return { count: data?.count || 0, proxies: data?.proxies || [], error: res.ok ? undefined : data?.error || 'HTTP ' + res.status };
+}
 async function fetchStatus(id) {
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), 20_000);
@@ -74,6 +83,7 @@ function createE2bTools() {
                     properties: {
                         command: { type: 'string', description: 'The shell command to run in the sandbox (bash -lc; use && to chain)' },
                         timeout_ms: { type: 'number', description: 'Timeout in ms (default 120000, max 300000)' },
+                        proxy: { type: 'boolean', description: 'Route the command through a rotating Webshare proxy (curl/wget automatically proxied — different exit IP, anti rate-limit). Requires the gateway to have a Webshare key.' },
                     },
                     required: ['command'],
                 },
@@ -83,8 +93,9 @@ function createE2bTools() {
                 if (!command)
                     return { output: 'ERROR: provide a "command"' };
                 const timeoutMs = Math.min(300_000, Math.max(5_000, Number(args.timeout_ms) || 120_000));
-                ctx.onActivity?.('e2b', `sandbox: ${command.slice(0, 80)}`);
-                const { res, data } = await postRun(command, timeoutMs);
+                const useProxy = args.proxy === true;
+                ctx.onActivity?.('e2b', `sandbox${useProxy ? '+proxy' : ''}: ${command.slice(0, 80)}`);
+                const { res, data } = await postRun(command, timeoutMs, useProxy);
                 if (!res.ok || !data || !data.id) {
                     const why = data?.error ? ` — ${(0, credentials_1.redact)(data.error)}` : '';
                     return { output: `ERROR: e2b relay HTTP ${res.status}${why}`, summary: 'e2b relay error' };
@@ -140,5 +151,228 @@ function createE2bTools() {
                 };
             },
         },
+        {
+            // ------------------------------------------------------------------
+            // CLOUD SESSION: sandbox persisten utk alur multi-langkah. Workflow
+            // browser testing (Chromium/Playwright headless DIJALANKAN DI SANDBOX):
+            //   1. e2b_cloud {action:'create'}
+            //   2. e2b_upload per file proyek (path absolut /home/user/...)
+            //   3. e2b_exec: npm install && npx playwright install --with-deps
+            //      chromium (SEKALI per session — install tersimpan di sandbox)
+            //   4. e2b_exec: node test.mjs (script playwright; screenshot →
+            //      /home/user/shots/...). ⚠️ chromium.launch WAJIB args:
+            //      --no-sandbox --disable-dev-shm-usage --disable-gpu
+            //      --js-flags=--jitless (tanpa itu → Target crashed: V8 CodeRange
+            //      OOM di VM kecil; --single-process dilarang — exit 13)
+            //   5. poll e2b_exec (jobId) sampai status done → baca output/exit
+            //   6. e2b_download artefak (screenshot/log) bila perlu
+            //   7. e2b_cloud {action:'close'} — WAJIB di akhir (kredit shared)
+            // ------------------------------------------------------------------
+            definition: {
+                name: 'e2b_cloud',
+                description: 'Manage a persistent cloud sandbox session (E2B VM) for multi-step work: create a session, or close it when finished. Unlike e2b_run (one-shot), files and installed packages PERSIST across calls within the session — use for project upload + build/test + browser testing (Chromium/Playwright run headless inside the sandbox). ALWAYS close the session when done (shared quota). Browser testing REQUIRES launching Chromium with: --no-sandbox --disable-dev-shm-usage --disable-gpu --js-flags=--jitless (without --jitless the page crashes: V8 CodeRange OOM on the small E2B VM). Playwright is NOT preinstalled — run: npm i playwright && npx playwright install --with-deps chromium (1-3 min, persists for the session).',
+                parameters: {
+                    type: 'object',
+                    properties: {
+                        action: { type: 'string', enum: ['create', 'close'], description: 'create = new persistent sandbox; close = kill it' },
+                        id: { type: 'string', description: 'Session id (required for close)' },
+                        ttl_s: { type: 'number', description: 'Session lifetime in seconds for create (default 1800, max 3600)' },
+                        proxy: { type: 'boolean', description: 'create only: install a rotating Webshare proxy in the sandbox (~/.curlrc + profile.d) so curl/wget in every exec uses a rotating exit IP' },
+                    },
+                    required: ['action'],
+                },
+            },
+            async execute(args, ctx) {
+                const action = String(args.action || '');
+                if (action === 'create') {
+                    const ttl = Math.min(3600, Math.max(120, Number(args.ttl_s) || 1800));
+                    const useProxy = args.proxy === true;
+                    ctx.onActivity?.('e2b', `cloud session create (${ttl}s${useProxy ? '+proxy' : ''})`);
+                    const res = await fetch(GW_BASE + '/v1/e2b/session', {
+                        method: 'POST',
+                        headers: { 'Content-Type': 'application/json', 'User-Agent': 'VectorHead-AI-Agent/0.1' },
+                        body: JSON.stringify({ ttl_s: ttl, proxy: useProxy }),
+                        signal: AbortSignal.timeout(60_000),
+                    });
+                    const data = (await res.json().catch(() => null));
+                    if (!res.ok || !data?.id) {
+                        const why = data?.error ? ` — ${(0, credentials_1.redact)(data.error)}` : '';
+                        return { output: `ERROR: e2b session HTTP ${res.status}${why}`, summary: 'e2b session error' };
+                    }
+                    return {
+                        output: `session created: ${data.id} (ttl ${data.ttl}s${data.proxy ? `, proxy ON via ${data.proxyCountry || '?'} — curl/wget otomatis lewat IP rotasi` : ''})\nNext: e2b_upload files → e2b_exec commands (poll jobId) → e2b_download artifacts → e2b_cloud close.\nSession id: ${data.id}`,
+                        summary: `e2b session ${data.id}`,
+                        data,
+                    };
+                }
+                if (action === 'close') {
+                    const id = String(args.id || '');
+                    if (!/^[A-Za-z0-9-]{8,80}$/.test(id))
+                        return { output: 'ERROR: provide the session "id"' };
+                    ctx.onActivity?.('e2b', `cloud session close ${id}`);
+                    const res = await fetch(GW_BASE + '/v1/e2b/close?id=' + encodeURIComponent(id), { method: 'POST', signal: AbortSignal.timeout(30_000) });
+                    if (!res.ok)
+                        return { output: `ERROR: e2b close HTTP ${res.status}`, summary: 'e2b close error' };
+                    return { output: `session ${id} closed (sandbox killed).`, summary: `e2b session ${id} closed` };
+                }
+                return { output: 'ERROR: action harus create|close' };
+            },
+        },
+        {
+            definition: {
+                name: 'e2b_upload',
+                description: 'Upload one file into a persistent e2b cloud session (from e2b_cloud create). Content is sent as base64 — read local files first (size limit 20 MB). Target path must be absolute under /home/user/ or /tmp/.',
+                parameters: {
+                    type: 'object',
+                    properties: {
+                        id: { type: 'string', description: 'Session id from e2b_cloud create' },
+                        path: { type: 'string', description: 'Absolute path in the sandbox, e.g. /home/user/app/package.json' },
+                        content_b64: { type: 'string', description: 'File content encoded as base64' },
+                    },
+                    required: ['id', 'path', 'content_b64'],
+                },
+            },
+            async execute(args) {
+                const id = String(args.id || '');
+                const path = String(args.path || '').trim();
+                const content = String(args.content_b64 || '');
+                if (!/^[A-Za-z0-9-]{8,80}$/.test(id))
+                    return { output: 'ERROR: invalid session id' };
+                if (!/^\/(home\/user\/|tmp\/)/.test(path) || path.includes('..'))
+                    return { output: 'ERROR: path harus absolut di bawah /home/user/ atau /tmp/' };
+                if (!content)
+                    return { output: 'ERROR: content_b64 kosong' };
+                const res = await fetch(GW_BASE + '/v1/e2b/upload?id=' + encodeURIComponent(id), {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json', 'User-Agent': 'VectorHead-AI-Agent/0.1' },
+                    body: JSON.stringify({ path, content_b64: content }),
+                    signal: AbortSignal.timeout(120_000),
+                });
+                const data = (await res.json().catch(() => null));
+                if (!res.ok || !data?.ok) {
+                    const why = data?.error ? ` — ${(0, credentials_1.redact)(data.error)}` : '';
+                    return { output: `ERROR: e2b upload HTTP ${res.status}${why}`, summary: 'e2b upload error' };
+                }
+                return { output: `uploaded: ${path} (${data.size} bytes)`, summary: `e2b upload ${path}` };
+            },
+        },
+        {
+            definition: {
+                name: 'e2b_exec',
+                description: 'Run a command DETACHED inside a persistent e2b cloud session and WAIT for it to finish (polls automatically; long-running OK — e.g. npm install, npx playwright install --with-deps chromium, node test.mjs). Returns stdout/stderr + exit code. Use e2b_run for one-shot no-session commands instead. For Playwright scripts: launch Chromium with --no-sandbox --disable-dev-shm-usage --disable-gpu --js-flags=--jitless (else "Target crashed" — V8 CodeRange OOM on the small E2B VM) and NEVER --single-process (hard crash).',
+                parameters: {
+                    type: 'object',
+                    properties: {
+                        id: { type: 'string', description: 'Session id from e2b_cloud create' },
+                        command: { type: 'string', description: 'Shell command to run in the sandbox (bash -lc)' },
+                    },
+                    required: ['id', 'command'],
+                },
+            },
+            async execute(args, ctx) {
+                const id = String(args.id || '');
+                const command = String(args.command || '').trim();
+                if (!/^[A-Za-z0-9-]{8,80}$/.test(id))
+                    return { output: 'ERROR: invalid session id' };
+                if (!command)
+                    return { output: 'ERROR: provide a "command"' };
+                ctx.onActivity?.('e2b', `exec: ${command.slice(0, 80)}`);
+                const start = await fetch(GW_BASE + '/v1/e2b/exec?id=' + encodeURIComponent(id), {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json', 'User-Agent': 'VectorHead-AI-Agent/0.1' },
+                    body: JSON.stringify({ command }),
+                    signal: AbortSignal.timeout(30_000),
+                });
+                const startData = (await start.json().catch(() => null));
+                if (!start.ok || !startData?.jobId) {
+                    const why = startData?.error ? ` — ${(0, credentials_1.redact)(startData.error)}` : '';
+                    return { output: `ERROR: e2b exec HTTP ${start.status}${why}`, summary: 'e2b exec error' };
+                }
+                const jobId = startData.jobId;
+                const deadline = Date.now() + POLL_MAX_MS;
+                let last = '';
+                while (Date.now() < deadline) {
+                    await new Promise((r) => setTimeout(r, POLL_INTERVAL_MS));
+                    const pr = await fetch(GW_BASE + '/v1/e2b/job?id=' + encodeURIComponent(id) + '&job=' + encodeURIComponent(jobId), {
+                        signal: AbortSignal.timeout(30_000),
+                        headers: { 'User-Agent': 'VectorHead-AI-Agent/0.1' },
+                    });
+                    const pj = (await pr.json().catch(() => null));
+                    if (!pj)
+                        continue;
+                    if (pj.status === 'done') {
+                        const out = `exit ${pj.exitCode ?? '?'}\n${(pj.output || '').slice(0, OUT_CAP)}`;
+                        return { output: out, summary: `e2b exec → exit ${pj.exitCode ?? '?'}`, data: { jobId, exitCode: pj.exitCode, output: pj.output } };
+                    }
+                    if (pj.status === 'starting' || pj.status === 'running') {
+                        last = pj.output || last;
+                        continue;
+                    }
+                    return { output: `ERROR: e2b job error: ${pj.error || pj.status}`, summary: 'e2b job error', data: { jobId } };
+                }
+                return { output: `TIMEOUT menunggu job ${jobId}. Log terakhir:\n${last.slice(0, 4000)}`, summary: 'e2b exec polling timeout', data: { jobId } };
+            },
+        },
+        {
+            definition: {
+                name: 'webshare_proxies',
+                description: 'List the rotating proxies available to the agent (Webshare via gateway relay). Use to check availability/countries before e2b_run/e2b_cloud with proxy:true — the gateway injects the credentials automatically (never exposed). Kredensial asli di-mask; rotasi dipilih acak oleh gateway.',
+                parameters: { type: 'object', properties: {} },
+            },
+            async execute(_args, ctx) {
+                ctx.onActivity?.('e2b', 'webshare: list proxies');
+                const r = await fetchWebshareProxies();
+                if (r.error)
+                    return { output: `ERROR: webshare relay — ${(0, credentials_1.redact)(r.error)}`, summary: 'webshare relay error' };
+                if (!r.proxies.length)
+                    return { output: 'tidak ada proxy tersedia di akun Webshare (0 proxy).', summary: 'webshare: 0 proxy' };
+                const lines = r.proxies.map((p) => `${p.proxy_address}:${p.port} [${p.country_code}] ${p.valid ? 'valid' : 'INVALID'}`);
+                return {
+                    output: `${r.count} proxy (kredensial otomatis di-inject gateway saat proxy:true):
+${lines.join('\n')}`,
+                    summary: `webshare: ${r.count} proxy`,
+                    data: { count: r.count },
+                };
+            },
+        },
+        {
+            definition: {
+                name: 'e2b_download',
+                description: 'Download a file (artifact) from a persistent e2b cloud session — e.g. Playwright screenshots (/home/user/shots/*.png), logs, or build outputs. Returns the file content as base64 (prefix data with file type when writing locally, e.g. data:image/png;base64,).',
+                parameters: {
+                    type: 'object',
+                    properties: {
+                        id: { type: 'string', description: 'Session id from e2b_cloud create' },
+                        path: { type: 'string', description: 'Absolute path of the file in the sandbox' },
+                    },
+                    required: ['id', 'path'],
+                },
+            },
+            async execute(args) {
+                const id = String(args.id || '');
+                const path = String(args.path || '').trim();
+                if (!/^[A-Za-z0-9-]{8,80}$/.test(id))
+                    return { output: 'ERROR: invalid session id' };
+                if (!/^\/(home\/user\/|tmp\/)/.test(path) || path.includes('..'))
+                    return { output: 'ERROR: path harus absolut di bawah /home/user/ atau /tmp/' };
+                const res = await fetch(GW_BASE + '/v1/e2b/file?id=' + encodeURIComponent(id) + '&path=' + encodeURIComponent(path), {
+                    signal: AbortSignal.timeout(60_000),
+                    headers: { 'User-Agent': 'VectorHead-AI-Agent/0.1' },
+                });
+                if (!res.ok) {
+                    const t = await res.text().catch(() => '');
+                    return { output: `ERROR: e2b download HTTP ${res.status}${t ? ' — ' + (0, credentials_1.redact)(t.slice(0, 200)) : ''}`, summary: 'e2b download error' };
+                }
+                const buf = new Uint8Array(await res.arrayBuffer());
+                let bin = '';
+                for (let i = 0; i < buf.length; i++)
+                    bin += String.fromCharCode(buf[i]);
+                return {
+                    output: `downloaded ${path} (${buf.length} bytes)\nbase64:\n${btoa(bin)}`,
+                    summary: `e2b download ${path} (${buf.length}B)`,
+                    data: { path, size: buf.length, base64: btoa(bin) },
+                };
+            },
+        },
     ];
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agen-vektor",
-  "version": "0.3.23",
+  "version": "0.3.25",
   "description": "VectorHead (agen-vektor) — AI Coding Agent CLI/TUI for Linux & Termux. Multi-provider, tool calling, session, permission system.",
   "type": "commonjs",
   "bin": {