agen-vektor 0.3.27 → 0.3.29

package/dist/agent/checkpoints.js

@@ -0,0 +1,264 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.takeCheckpoint = takeCheckpoint;
+exports.listCheckpoints = listCheckpoints;
+exports.restoreCheckpoint = restoreCheckpoint;
+exports.pruneCheckpoints = pruneCheckpoints;
+exports.resetCheckpoints = resetCheckpoints;
+/**
+ * Checkpoints — git-based safety net (Freebuff/Codebuff parity).
+ *
+ * Every run, before the FIRST mutating tool call (write_file / edit_file /
+ * delete_file / apply_patch / shell) touches the project, the agent takes a
+ * CHECKPOINT: a full snapshot of the working tree stored in a SHADOW git
+ * repository under ~/.vector/checkpoints/<project>/.
+ *
+ * Design rules:
+ * - The USER'S repo is never touched: no commits, no branches, no refs, no
+ *   hooks. The shadow repo is a SEPARATE GIT_DIR (own object store, index,
+ *   refs) using the project tree as its work-tree. `git status` in the user's
+ *   project stays pristine — verified by tests.
+ * - Each checkpoint is an INDEPENDENT root commit (git commit-tree, no
+ *   parent) pinned by its own ref `refs/vector-cp/<ref>`. Unchanged files
+ *   dedupe by content in the object store, so snapshots stay small — and
+ *   pruning is a plain ref deletion, no history rewrite.
+ * - Restore = index reset to the snapshot ref + `checkout <ref> -- .` +
+ *   resurrection of files deleted after the snapshot. The user's git history
+ *   is untouched (their unstaged changes are replaced — they can still diff
+ *   via their own git BEFORE restoring; /undo warns in the TUI).
+ * - Bounded storage: keep the newest MAX_CHECKPOINTS refs, delete the rest.
+ * - Everything is best-effort: a missing git binary or a read-only home must
+ *   NEVER break a run. All failures resolve to null/empty and the run
+ *   proceeds without a safety net.
+ */
+const node_child_process_1 = require("node:child_process");
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const paths_1 = require("../utils/paths");
+const MAX_CHECKPOINTS = 30;
+const REF_PREFIX = 'refs/vector-cp/';
+const GIT = 'git';
+// Monotonic per-process sequence: same-second snapshots must keep their
+// creation order in listings (restore-by-index!), so the ref suffix is a
+// zero-padded base36 counter instead of random chars — ref-name sort then
+// equals reverse-creation order everywhere.
+let cpSeq = 0;
+function gitDirFor(cwd) {
+    // Stable per project path — two projects never share a shadow repo.
+    const slug = cwd.replace(/[^a-zA-Z0-9._-]+/g, '_').slice(-80) || 'project';
+    return path.join((0, paths_1.getVectorDir)(), 'checkpoints', slug);
+}
+function git(gitDir, args, workTree) {
+    const r = (0, node_child_process_1.spawnSync)(GIT, [`--git-dir=${gitDir}`, ...(workTree ? [`--work-tree=${workTree}`] : []), ...args], { encoding: 'utf8', timeout: 20_000 });
+    return { ok: r.status === 0, out: (r.stdout || '') + (r.stderr || '') };
+}
+function ensureShadowRepo(gitDir) {
+    try {
+        if (!fs.existsSync(path.join(gitDir, 'HEAD'))) {
+            fs.mkdirSync(gitDir, { recursive: true });
+            // Fixed identity — nothing from the user's git config leaks in.
+            if (!git(gitDir, ['init', '--quiet']).ok)
+                return false;
+            git(gitDir, ['config', 'user.email', 'checkpoints@vectorhead.local']);
+            git(gitDir, ['config', 'user.name', 'VectorHead Checkpoints']);
+            git(gitDir, ['config', 'commit.gpgsign', 'false']);
+            git(gitDir, ['config', 'core.autocrlf', 'false']);
+            git(gitDir, ['config', 'gc.auto', '0']);
+        }
+        return fs.existsSync(path.join(gitDir, 'HEAD'));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Take a checkpoint. Returns null when snapshotting is impossible — callers
+ * must treat that as "no safety net", never as an error.
+ */
+function takeCheckpoint(cwd, reason, task = '') {
+    try {
+        if (!fs.existsSync(cwd))
+            return null;
+        const gitDir = gitDirFor(cwd);
+        if (!ensureShadowRepo(gitDir))
+            return null;
+        // -A stages the full tree incl. deletions and untracked files. A
+        // .gitignore in the user's project is respected (their intent), but
+        // that also means ignored files are NOT protected by checkpoints —
+        // documented trade-off, same as Claude Code.
+        if (!git(gitDir, ['add', '-A', '--'], cwd).ok)
+            return null;
+        const tree = git(gitDir, ['write-tree']);
+        if (!tree.ok)
+            return null;
+        const treeHash = tree.out.trim().split('\n')[0].trim();
+        if (!/^[0-9a-f]{40}$/.test(treeHash))
+            return null;
+        const stamp = new Date();
+        const pad = (n) => String(n).padStart(2, '0');
+        const t = `${stamp.getFullYear()}${pad(stamp.getMonth() + 1)}${pad(stamp.getDate())}` +
+            `-${pad(stamp.getHours())}${pad(stamp.getMinutes())}${pad(stamp.getSeconds())}`;
+        const suffix = (cpSeq++).toString(36).padStart(4, '0');
+        const ref = `cp-${t}-${suffix}`;
+        const msg = `checkpoint ${ref} (${reason}) ${task.slice(0, 80)}`.trim();
+        // Independent root commit — commit-tree gives full control over parents.
+        const commit = git(gitDir, ['commit-tree', treeHash, '-m', msg]);
+        if (!commit.ok)
+            return null;
+        const hash = commit.out.trim().split('\n')[0].trim();
+        if (!/^[0-9a-f]{40}$/.test(hash))
+            return null;
+        if (!git(gitDir, ['update-ref', `${REF_PREFIX}${ref}`, hash]).ok)
+            return null;
+        return { ref, time: stamp.toISOString(), reason, task: task.slice(0, 80), hash };
+    }
+    catch {
+        return null;
+    }
+}
+/** Newest-first list of surviving checkpoints. */
+function listCheckpoints(cwd) {
+    try {
+        const gitDir = gitDirFor(cwd);
+        if (!fs.existsSync(path.join(gitDir, 'HEAD')))
+            return [];
+        const r = git(gitDir, [
+            'for-each-ref',
+            `--format=%(refname)%09%(contents:subject)%09%(committerdate:iso-strict)`,
+            REF_PREFIX,
+        ]);
+        if (!r.ok)
+            return [];
+        const out = [];
+        for (const line of r.out.split('\n')) {
+            if (line.trim() === '')
+                continue;
+            const [refname = '', subject = '', time = ''] = line.split('\t');
+            const ref = refname.replace(REF_PREFIX, '');
+            const m = subject.match(/^(cp-[0-9]{8}-[0-9]{6}-[a-z0-9]+) \(([^)]*)\) ?(.*)$/);
+            const hash = git(gitDir, ['rev-parse', `${REF_PREFIX}${ref}`]).out.trim();
+            if (!/^[0-9a-f]{40}$/.test(hash))
+                continue;
+            out.push({
+                ref: m ? m[1] : ref,
+                time: time.trim(),
+                reason: m ? m[2] : '',
+                task: m ? m[3] : subject,
+                hash,
+            });
+        }
+        // Same-second snapshots tie on committerdate — the ref name embeds a
+        // fixed-width timestamp, so sort on THAT (newest first) in JS instead of
+        // relying on git tie-breaking.
+        out.sort((a, b) => (a.ref < b.ref ? 1 : a.ref > b.ref ? -1 : 0));
+        return out;
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Restore the working tree to a checkpoint (index into the newest-first
+ * list, an exact ref suffix, or a full hash). Files deleted AFTER the
+ * snapshot are resurrected; files the snapshot never tracked are left
+ * alone. Returns a user-facing message either way.
+ */
+function restoreCheckpoint(cwd, refOrIndex) {
+    const list = listCheckpoints(cwd);
+    if (list.length === 0)
+        return { ok: false, message: 'No checkpoints yet.' };
+    let cp;
+    if (typeof refOrIndex === 'number') {
+        if (refOrIndex < 0 || refOrIndex >= list.length)
+            return { ok: false, message: 'Checkpoint index out of range.' };
+        cp = list[refOrIndex];
+    }
+    else {
+        cp = list.find((c) => c.ref === refOrIndex || c.hash === refOrIndex);
+        if (!cp)
+            return { ok: false, message: `Unknown checkpoint "${refOrIndex}".` };
+    }
+    const gitDir = gitDirFor(cwd);
+    const target = cp; // bounds-checked above
+    // index := snapshot tree, then materialize the whole tree over the
+    // work-tree (restores modified AND deleted files).
+    if (!git(gitDir, ['read-tree', '--reset', '-u', target.hash], cwd).ok) {
+        return { ok: false, message: `restore failed: read-tree ${target.ref}` };
+    }
+    const checkout = git(gitDir, ['checkout', target.hash, '--', '.'], cwd);
+    if (!checkout.ok) {
+        return { ok: false, message: `restore failed: ${checkout.out.trim().slice(0, 200)}` };
+    }
+    // read-tree -u handles deletions of tracked files already; walk the
+    // snapshot tree to be extra safe about paths git skipped.
+    const ls = git(gitDir, ['ls-tree', '-r', '--name-only', target.hash]);
+    if (ls.ok) {
+        for (const f of ls.out.split('\n')) {
+            const p = f.trim();
+            if (p && !fs.existsSync(path.join(cwd, p))) {
+                git(gitDir, ['checkout', target.hash, '--', p], cwd);
+            }
+        }
+    }
+    return { ok: true, message: `Restored to checkpoint ${target.ref} (${target.time}).` };
+}
+/** Keep only the newest MAX_CHECKPOINTS refs (best-effort, storage bound). */
+function pruneCheckpoints(cwd) {
+    try {
+        const gitDir = gitDirFor(cwd);
+        if (!fs.existsSync(path.join(gitDir, 'HEAD')))
+            return;
+        const list = listCheckpoints(cwd);
+        for (const cp of list.slice(MAX_CHECKPOINTS)) {
+            git(gitDir, ['update-ref', '-d', `${REF_PREFIX}${cp.ref}`]);
+        }
+        // Drop unreferenced objects occasionally — cheap, bounded.
+        if (list.length > MAX_CHECKPOINTS)
+            git(gitDir, ['gc', '--quiet', '--prune=now']);
+    }
+    catch {
+        /* best-effort */
+    }
+}
+/** Test helper: wipe the shadow repo for a project. */
+function resetCheckpoints(cwd) {
+    try {
+        fs.rmSync(gitDirFor(cwd), { recursive: true, force: true });
+    }
+    catch {
+        /* ignore */
+    }
+}

package/dist/agent/loop.js

@@ -15,6 +15,7 @@ exports.estimateContextSize = estimateContextSize;
  */
 const provider_1 = require("../providers/provider");
 const context_1 = require("./context");
+const checkpoints_1 = require("./checkpoints");
 const light_1 = require("./light");
 const prompts_1 = require("./prompts");
 const rules_1 = require("./rules");
@@ -139,6 +140,22 @@ async function runAgentLoop(userRequest, opts, callbacks = {}) {
     let stopped = false;
     let finalContent = '';
     let lastReasoning = '';
+    // ─── Checkpoints (git-based safety net, Freebuff/Codebuff parity) ───
+    // Armed lazily: the snapshot is taken right before the FIRST mutating
+    // tool call of the run (never for pure read/chat runs), once per run.
+    // Best-effort: null = no net, the run proceeds regardless.
+    const MUTATING_TOOLS = new Set(['write_file', 'edit_file', 'delete_file', 'apply_patch', 'shell', 'git', 'run_in_background']);
+    let checkpointTaken = false;
+    const maybeCheckpoint = (toolName) => {
+        if (checkpointTaken || !MUTATING_TOOLS.has(toolName))
+            return;
+        checkpointTaken = true;
+        const cp = (0, checkpoints_1.takeCheckpoint)(cwd, toolName, userRequest);
+        if (cp) {
+            callbacks.onStatus?.(`Checkpoint siap (${cp.ref})`);
+            callbacks.onActivity?.('checkpoint', `safety snapshot ${cp.ref}`);
+        }
+    };
     const checkAbort = () => {
         if (signal?.aborted) {
             aborted = true;
@@ -420,6 +437,11 @@ async function runAgentLoop(userRequest, opts, callbacks = {}) {
                 for (const batch of batches) {
                     checkAbort();
                     const parallel = batch.length > 1 && batch.every((tc) => PARALLEL_TOOLS.has(tc.name));
+                    // Safety net BEFORE the first mutating call of this run — armed
+                    // once, lazily; parallel batches are read-only by construction and
+                    // never trigger it.
+                    if (!parallel)
+                        maybeCheckpoint(batch[0].name);
                     toolCalls += batch.length;
                     if (!parallel) {
                         callbacks.onStatus?.(`Running ${batch[0].name}`);

package/dist/config/config.js

@@ -67,7 +67,11 @@ exports.DEFAULT_CONFIG = {
     // so the guardrail floor stays intact. Opt back into prompting via
     // VECTOR_ASK=1 or the /mode toggle in the TUI.
     permissionMode: 'yolo',
-    maxIterations: 25,
+    // 50 (dulu 25): task panjang sering mati di tengah — "runs out of
+    // iterations" — padahal agen masih di jalur yang benar. Naik tanpa
+    // risiko: iteration = 1 langkah agen (LLM call + tools), bukan 1 API
+    // key query; kuota gateway dijaga rate-limit per-request di sisi gateway.
+    maxIterations: 50,
     maxRetries: 3,
     requestTimeoutMs: 120_000,
     extraModels: {},

package/dist/tools/e2b.js

@@ -335,6 +335,90 @@ ${lines.join('\n')}`,
                 };
             },
         },
+        {
+            definition: {
+                name: 'e2b_screenshot',
+                description: 'Take a screenshot of a URL with headless Chromium INSIDE a persistent e2b cloud session (from e2b_cloud create) and get it back as a downloadable gateway link (render_ui button opens it). Requires Playwright+Chromium installed in the session (npx playwright install --with-deps chromium). The target URL is fetched FROM INSIDE the sandbox — use http://localhost:<port> for dev servers running in this session. The sandbox needs internet unless the target is localhost.',
+                parameters: {
+                    type: 'object',
+                    properties: {
+                        id: { type: 'string', description: 'Session id from e2b_cloud create' },
+                        url: { type: 'string', description: 'URL to capture, e.g. http://localhost:3000 (default)' },
+                        wait_ms: { type: 'number', description: 'Milliseconds to wait for page load before capturing (default 1500)' },
+                        full_page: { type: 'boolean', description: 'Capture full scrollable page (default false)' },
+                    },
+                    required: ['id'],
+                },
+            },
+            async execute(args, ctx) {
+                const id = String(args.id || '');
+                const target = String(args.url || 'http://localhost:3000').trim();
+                if (!/^[A-Za-z0-9-]{8,80}$/.test(id))
+                    return { output: 'ERROR: invalid session id' };
+                if (!/^https?:\/\//.test(target) || target.includes("'"))
+                    return { output: 'ERROR: url harus http(s) tanpa quote' };
+                const waitMs = Math.min(15_000, Math.max(0, Number(args.wait_ms) || 1500));
+                const fullPage = args.full_page === true;
+                // Dua langkah: (1) exec script Playwright → simpan PNG di /home/user/, (2) beri
+                // link download via route /v1/e2b/file (gateway stream PNG → tombol render_ui
+                // di TUI membukanya di browser). Script memakai flag jitless WAJIB (gotcha V8
+                // OOM di sandbox kecil) dan hanya setelah marker __VECTOR_DONE_ hasil poll.
+                // PENTING: script DITULIS ke /home/user (bukan /tmp) — ESM resolve
+                // `import 'playwright'` relatif thd lokasi file, dan package terinstall
+                // di /home/user/node_modules (npm i tanpa -g).
+                const script = [
+                    'mkdir -p /home/user',
+                    `cat > /home/user/vector-shot.mjs <<\'EOF\'`,
+                    `import { chromium } from 'playwright';`,
+                    `const b = await chromium.launch({ args: ['--no-sandbox','--disable-dev-shm-usage','--disable-gpu','--js-flags=--jitless'] });`,
+                    `const p = await b.newPage();`,
+                    `try {`,
+                    `  await p.goto(${JSON.stringify(target)}, { waitUntil: 'load', timeout: 20000 });`,
+                    `  await p.waitForTimeout(${waitMs});`,
+                    `  await p.screenshot({ path: '/home/user/vector-preview.png', fullPage: ${fullPage ? 'true' : 'false'} });`,
+                    `  console.log('SHOT_OK');`,
+                    `} catch (e) { console.log('SHOT_ERR ' + e.message); await b.close(); process.exit(3); }`,
+                    `await b.close();`,
+                    `EOF`,
+                    `cd /home/user && node /home/user/vector-shot.mjs`,
+                ].join('\n');
+                ctx.onActivity?.('e2b', `screenshot ${target}`);
+                // Poll exec manual di sini (bukan e2bExec blocking): kita butuh exit code.
+                const started = await fetch(GW_BASE + '/v1/e2b/exec?id=' + encodeURIComponent(id), {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json', 'User-Agent': 'VectorHead-AI-Agent/0.1' },
+                    body: JSON.stringify({ command: script }),
+                    signal: AbortSignal.timeout(30_000),
+                });
+                const sdata = (await started.json().catch(() => null));
+                if (!started.ok || !sdata?.jobId) {
+                    return { output: `ERROR: e2b exec gagal — ${(0, credentials_1.redact)(sdata?.error || 'HTTP ' + started.status)}`, summary: 'screenshot exec error' };
+                }
+                const t0 = Date.now();
+                while (Date.now() - t0 < 90_000) {
+                    await new Promise((r) => setTimeout(r, POLL_INTERVAL_MS));
+                    const jr = await fetch(GW_BASE + '/v1/e2b/job?id=' + encodeURIComponent(id) + '&job=' + sdata.jobId, {
+                        signal: AbortSignal.timeout(15_000),
+                    });
+                    const j = (await jr.json().catch(() => null));
+                    if (j?.status === 'done') {
+                        if (j.exitCode !== 0 || !(j.stdout || '').includes('SHOT_OK')) {
+                            const why = (j.stderr || j.stdout || '').trim().slice(0, 300);
+                            return { output: `ERROR: screenshot gagal (exit ${j.exitCode})\n${(0, credentials_1.redact)(why)}` + (why.includes('Cannot find package') ? '\n→ Playwright belum terpasang di sesi ini: e2b_exec {command: "npm i playwright && npx playwright install --with-deps chromium"}' : ''), summary: 'screenshot error' };
+                        }
+                        const link = `${GW_BASE}/v1/e2b/file?id=${encodeURIComponent(id)}&path=%2Fhome%2Fuser%2Fvector-preview.png`;
+                        return {
+                            output: `screenshot tersimpan: /home/user/vector-preview.png (${target})\nlink: ${link}`,
+                            summary: `e2b screenshot ${target}`,
+                            data: { widget: { type: 'button', text: '🖼 Lihat screenshot', link }, screenshot: link },
+                        };
+                    }
+                    if (j?.status === 'error')
+                        break;
+                }
+                return { output: 'ERROR: screenshot timeout (job tidak selesai dalam 90s)', summary: 'screenshot timeout' };
+            },
+        },
         {
             definition: {
                 name: 'e2b_download',

package/dist/tui/app.js

@@ -59,6 +59,7 @@ const commands_1 = require("./commands");
 const suggest_1 = require("./suggest");
 const mcp_1 = require("../tools/mcp");
 const provider_1 = require("../providers/provider");
+const checkpoints_1 = require("../agent/checkpoints");
 const planner_1 = require("../agent/planner");
 const extras_1 = require("../tools/extras");
 const session_1 = require("../agent/session");
@@ -1762,7 +1763,13 @@ class App {
                         this.runFollowupMsgs.push(followupMsg);
                     }
                 }
-                if (tool === 'render_ui' && data && data.widget) {
+                // Tombol UI: tool render_ui — dan kini juga tool e2b (screenshot/
+                // preview) — bisa mengembalikan data.widget {type:'button',text,link}.
+                // Whitelist supaya tool pihak ketiga (MCP) tidak bisa memicu tombol
+                // (surface prompt-injection: deskripsi/hasil tool = untrusted data).
+                if ((tool === 'render_ui' || tool.startsWith('e2b_')) &&
+                    data &&
+                    data.widget) {
                     const w = data.widget;
                     this.activeUiButton = w;
                     this.messages.push({ kind: 'ui', content: w.text, ui: w, ts: Date.now() });
@@ -2163,6 +2170,17 @@ class App {
             case '/session':
                 this.modal = { type: 'session', selected: 0, start: 0 };
                 break;
+            case '/undo': {
+                // Freebuff/Codebuff-style safety net: pick a checkpoint (auto taken
+                // before the first mutating tool call of each run) and restore it.
+                const checkpoints = (0, checkpoints_1.listCheckpoints)(this.agent.cwd);
+                if (checkpoints.length === 0) {
+                    this.addSystem('Belum ada checkpoint — snapshot dibuat otomatis sebelum tool menulis pertama kali di sebuah run.');
+                    break;
+                }
+                this.modal = { type: 'undo', selected: 0, start: 0, checkpoints };
+                break;
+            }
             case '/settings':
                 this.modal = { type: 'settings' };
                 break;
@@ -2414,8 +2432,11 @@ class App {
                 // Esc still closes. Changes persist via saveConfig immediately.
                 {
                     const cfg = this.agent.config;
+                    // Cap 999 (dulu 200): task besar (refactor menyeluruh, migrasi,
+                    // riset panjang) butuh budget lebih — 200 sering masih kurang.
+                    const cap = 999;
                     const step = (d) => {
-                        const next = Math.min(200, Math.max(1, cfg.maxIterations + d));
+                        const next = Math.min(cap, Math.max(1, cfg.maxIterations + d));
                         if (next === cfg.maxIterations)
                             return;
                         cfg.maxIterations = next;
@@ -2451,7 +2472,7 @@ class App {
                     else if (ev.name === 'char' && ev.char && /[0-9]/.test(ev.char)) {
                         // Number keys type the exact value (not digit-append — no
                         // visible field, so append would be invisible state).
-                        const next = Math.min(200, Math.max(1, Number(ev.char)));
+                        const next = Math.min(cap, Math.max(1, Number(ev.char)));
                         if (next !== cfg.maxIterations) {
                             cfg.maxIterations = next;
                             try {
@@ -2527,6 +2548,41 @@ class App {
                     this.modal = { type: 'none' };
                 });
                 break;
+            case 'undo': {
+                const cps = modal.checkpoints;
+                await this.handleSelector(modal, ev, cps.map((c) => ({
+                    label: `${c.time.replace('T', ' ').slice(0, 19)} — ${c.task || c.reason}`,
+                    value: c.ref,
+                    hint: c.reason,
+                })), async (sel) => {
+                    this.modal = { type: 'none' };
+                    if (this.running) {
+                        this.addSystem('Tidak bisa restore saat agen sedang jalan — hentikan dulu (Esc).');
+                        return;
+                    }
+                    // Confirm: restore MENIMPA perubahan yang belum di-commit.
+                    this.modal = {
+                        type: 'confirm',
+                        title: 'Restore checkpoint',
+                        body: [
+                            `Kembalikan seluruh file project ke snapshot ${sel.value}?`,
+                            '',
+                            'Perubahan yang BELUM di-commit akan tertimpa (riwayat git kamu tetap utuh —',
+                            'restore hanya menyentuh working tree).',
+                        ],
+                        focused: 'cancel',
+                        resolve: async (ok) => {
+                            this.modal = { type: 'none' };
+                            if (!ok)
+                                return;
+                            const r = (0, checkpoints_1.restoreCheckpoint)(this.agent.cwd, sel.value);
+                            this.addSystem(r.ok ? `⏪ ${r.message}` : `! ${r.message}`);
+                            this.markDirty();
+                        },
+                    };
+                });
+                break;
+            }
             case 'session': {
                 const sessions = (0, session_1.listSessions)();
                 await this.handleSelector(modal, ev, sessions.map((s) => ({ label: s.name, value: s.name, hint: `${s.messageCount} msgs` })), async (s) => {
@@ -3324,7 +3380,7 @@ class App {
                         label('Mode', this.agent.config.permissionMode),
                         // LIVE-EDITABLE: +/- / ↑↓ / PgUp-PgDn step the budget, digits
                         // type an exact value — persisted to ~/.vector/config.json.
-                        label('Max iterations', `${this.agent.config.maxIterations}  ${theme_1.THEME.muted}(+/- / ↑↓ / PgUp-PgDn / angka)${theme_1.THEME.reset}`),
+                        label('Max iterations', `${this.agent.config.maxIterations}  ${theme_1.THEME.muted}(+/- / ↑↓ / PgUp-PgDn / angka · cap 999)${theme_1.THEME.reset}`),
                         label('Max retries', String(this.agent.config.maxRetries)),
                         label('API URL', this.agent.config.apiUrl || '(default)'),
                         label('Key configured', (0, credentials_1.hasApiKey)(this.agent.config.provider) ? 'yes' : 'no'),
@@ -3414,6 +3470,22 @@ class App {
                     cols,
                 });
             }
+            case 'undo': {
+                return (0, components_1.renderSelector)({
+                    title: 'Restore checkpoint',
+                    options: m.checkpoints.length > 0
+                        ? m.checkpoints.map((c) => ({
+                            label: `${c.time.replace('T', ' ').slice(0, 19)} — ${c.task || c.reason}`,
+                            value: c.ref,
+                            hint: c.reason,
+                        }))
+                        : [{ label: '(no checkpoints yet)', value: '' }],
+                    selected: m.selected,
+                    start: m.start,
+                    rows,
+                    cols,
+                });
+            }
             case 'theme': {
                 const themes = (0, themes_1.listThemes)();
                 return (0, components_1.renderSelector)({

package/dist/tui/commands.js

@@ -23,6 +23,7 @@ exports.COMMANDS = [
     { id: 'model', description: 'select model for the active provider' },
     { id: 'theme', description: 'select theme (OpenCode-style)' },
     { id: 'session', description: 'manage sessions (list / switch)' },
+    { id: 'undo', description: 'restore project files to a checkpoint (auto-snapshot before edits)' },
     { id: 'session-name', description: 'set session name (arg optional)' },
     { id: 'settings', description: 'view settings (provider, model, limits, files)' },
     { id: 'mcp', description: 'MCP servers — probe config, list tools per server' },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agen-vektor",
-  "version": "0.3.27",
+  "version": "0.3.29",
   "description": "VectorHead (agen-vektor) — AI Coding Agent CLI/TUI for Linux & Termux. Multi-provider, tool calling, session, permission system.",
   "type": "commonjs",
   "bin": {