agen-vektor 0.3.28 → 0.3.29

package/dist/tools/e2b.js

@@ -335,6 +335,90 @@ ${lines.join('\n')}`,
                 };
             },
         },
+        {
+            definition: {
+                name: 'e2b_screenshot',
+                description: 'Take a screenshot of a URL with headless Chromium INSIDE a persistent e2b cloud session (from e2b_cloud create) and get it back as a downloadable gateway link (render_ui button opens it). Requires Playwright+Chromium installed in the session (npx playwright install --with-deps chromium). The target URL is fetched FROM INSIDE the sandbox — use http://localhost:<port> for dev servers running in this session. The sandbox needs internet unless the target is localhost.',
+                parameters: {
+                    type: 'object',
+                    properties: {
+                        id: { type: 'string', description: 'Session id from e2b_cloud create' },
+                        url: { type: 'string', description: 'URL to capture, e.g. http://localhost:3000 (default)' },
+                        wait_ms: { type: 'number', description: 'Milliseconds to wait for page load before capturing (default 1500)' },
+                        full_page: { type: 'boolean', description: 'Capture full scrollable page (default false)' },
+                    },
+                    required: ['id'],
+                },
+            },
+            async execute(args, ctx) {
+                const id = String(args.id || '');
+                const target = String(args.url || 'http://localhost:3000').trim();
+                if (!/^[A-Za-z0-9-]{8,80}$/.test(id))
+                    return { output: 'ERROR: invalid session id' };
+                if (!/^https?:\/\//.test(target) || target.includes("'"))
+                    return { output: 'ERROR: url harus http(s) tanpa quote' };
+                const waitMs = Math.min(15_000, Math.max(0, Number(args.wait_ms) || 1500));
+                const fullPage = args.full_page === true;
+                // Dua langkah: (1) exec script Playwright → simpan PNG di /home/user/, (2) beri
+                // link download via route /v1/e2b/file (gateway stream PNG → tombol render_ui
+                // di TUI membukanya di browser). Script memakai flag jitless WAJIB (gotcha V8
+                // OOM di sandbox kecil) dan hanya setelah marker __VECTOR_DONE_ hasil poll.
+                // PENTING: script DITULIS ke /home/user (bukan /tmp) — ESM resolve
+                // `import 'playwright'` relatif thd lokasi file, dan package terinstall
+                // di /home/user/node_modules (npm i tanpa -g).
+                const script = [
+                    'mkdir -p /home/user',
+                    `cat > /home/user/vector-shot.mjs <<\'EOF\'`,
+                    `import { chromium } from 'playwright';`,
+                    `const b = await chromium.launch({ args: ['--no-sandbox','--disable-dev-shm-usage','--disable-gpu','--js-flags=--jitless'] });`,
+                    `const p = await b.newPage();`,
+                    `try {`,
+                    `  await p.goto(${JSON.stringify(target)}, { waitUntil: 'load', timeout: 20000 });`,
+                    `  await p.waitForTimeout(${waitMs});`,
+                    `  await p.screenshot({ path: '/home/user/vector-preview.png', fullPage: ${fullPage ? 'true' : 'false'} });`,
+                    `  console.log('SHOT_OK');`,
+                    `} catch (e) { console.log('SHOT_ERR ' + e.message); await b.close(); process.exit(3); }`,
+                    `await b.close();`,
+                    `EOF`,
+                    `cd /home/user && node /home/user/vector-shot.mjs`,
+                ].join('\n');
+                ctx.onActivity?.('e2b', `screenshot ${target}`);
+                // Poll exec manual di sini (bukan e2bExec blocking): kita butuh exit code.
+                const started = await fetch(GW_BASE + '/v1/e2b/exec?id=' + encodeURIComponent(id), {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json', 'User-Agent': 'VectorHead-AI-Agent/0.1' },
+                    body: JSON.stringify({ command: script }),
+                    signal: AbortSignal.timeout(30_000),
+                });
+                const sdata = (await started.json().catch(() => null));
+                if (!started.ok || !sdata?.jobId) {
+                    return { output: `ERROR: e2b exec gagal — ${(0, credentials_1.redact)(sdata?.error || 'HTTP ' + started.status)}`, summary: 'screenshot exec error' };
+                }
+                const t0 = Date.now();
+                while (Date.now() - t0 < 90_000) {
+                    await new Promise((r) => setTimeout(r, POLL_INTERVAL_MS));
+                    const jr = await fetch(GW_BASE + '/v1/e2b/job?id=' + encodeURIComponent(id) + '&job=' + sdata.jobId, {
+                        signal: AbortSignal.timeout(15_000),
+                    });
+                    const j = (await jr.json().catch(() => null));
+                    if (j?.status === 'done') {
+                        if (j.exitCode !== 0 || !(j.stdout || '').includes('SHOT_OK')) {
+                            const why = (j.stderr || j.stdout || '').trim().slice(0, 300);
+                            return { output: `ERROR: screenshot gagal (exit ${j.exitCode})\n${(0, credentials_1.redact)(why)}` + (why.includes('Cannot find package') ? '\n→ Playwright belum terpasang di sesi ini: e2b_exec {command: "npm i playwright && npx playwright install --with-deps chromium"}' : ''), summary: 'screenshot error' };
+                        }
+                        const link = `${GW_BASE}/v1/e2b/file?id=${encodeURIComponent(id)}&path=%2Fhome%2Fuser%2Fvector-preview.png`;
+                        return {
+                            output: `screenshot tersimpan: /home/user/vector-preview.png (${target})\nlink: ${link}`,
+                            summary: `e2b screenshot ${target}`,
+                            data: { widget: { type: 'button', text: '🖼 Lihat screenshot', link }, screenshot: link },
+                        };
+                    }
+                    if (j?.status === 'error')
+                        break;
+                }
+                return { output: 'ERROR: screenshot timeout (job tidak selesai dalam 90s)', summary: 'screenshot timeout' };
+            },
+        },
         {
             definition: {
                 name: 'e2b_download',

package/dist/tui/app.js

@@ -1763,7 +1763,13 @@ class App {
                         this.runFollowupMsgs.push(followupMsg);
                     }
                 }
-                if (tool === 'render_ui' && data && data.widget) {
+                // Tombol UI: tool render_ui — dan kini juga tool e2b (screenshot/
+                // preview) — bisa mengembalikan data.widget {type:'button',text,link}.
+                // Whitelist supaya tool pihak ketiga (MCP) tidak bisa memicu tombol
+                // (surface prompt-injection: deskripsi/hasil tool = untrusted data).
+                if ((tool === 'render_ui' || tool.startsWith('e2b_')) &&
+                    data &&
+                    data.widget) {
                     const w = data.widget;
                     this.activeUiButton = w;
                     this.messages.push({ kind: 'ui', content: w.text, ui: w, ts: Date.now() });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agen-vektor",
-  "version": "0.3.28",
+  "version": "0.3.29",
   "description": "VectorHead (agen-vektor) — AI Coding Agent CLI/TUI for Linux & Termux. Multi-provider, tool calling, session, permission system.",
   "type": "commonjs",
   "bin": {