← Back to OpsTerm

🔧 Tech Stack

Dokumen ini menjelaskan teknologi yang dipake di OpsTerm — dari bahasa pemrograman sampai protocol komunikasi.

🎯 Ringkasan

Zero dependencies wajib — cukup Python 3 stdlib. Semuanya built-in.
Satu-satunya optional dep: pip install cryptography (buat vault).

🐍 Bahasa: Python 3

Kenapa Python?

Kenapa BUKAN Go / Rust?

Python adalah paling praktis untuk CLI tool yang harus zero-dep dan portable.

📦 Zero-Dependency Strategy

Ini adalah nilai jual utama OpsTerm. Gimana caranya?

Yang Biasanya Pake Library Pihak Ketiga:

Custom YAML Parser

Parser YAML di OpsTerm itu minimal — cuma support subset YAML yang dipake:

Supported:
- Key-value: key: value
- Nested mapping via indent
- Lists: - item
- Nested objects in lists
- Comments (#)
- Strings, numbers, booleans, null

NOT supported:
- YAML anchors (&anchor, *alias)
- Multi-line strings (|, >)
- Inline JSON ({key: value})
- Complex types (timestamps, sets)

Kenapa ga pake PyYAML?
1. Dependency — user harus pip install dulu
2. Overkill — kita cuma pake subset kecil YAML
3. Maintainable — parser cuma 80 baris, mudah dipahami

🗄️ SQLite History

Schema:

CREATE TABLE IF NOT EXISTS history (
    id INTEGER PRIMARY KEY AUTOINCREMENT,
    timestamp TEXT DEFAULT (datetime('now','localtime')),
    mode TEXT,        -- 'ai', 'ssh', 'workflow', 'pipe', 'shell', 'scp', 'vault'
    input TEXT,       -- command/pertanyaan (max 500 chars)
    output TEXT       -- response (max 2000 chars)
);

Kenapa SQLite?

• Built-in Python (import sqlite3)
• Zero config — file db otomatis dibuat
• Permanent — riwayat gak ilang meski terminal ditutup
• Searchable — bisa query pake SQL

🔗 Protocol: OpenAI-Compatible API

AI Client pake format yang kompatibel dengan OpenAI.

Request:

POST /v1/chat/completions
Authorization: Bearer <api_key>
Content-Type: application/json

{
    "model": "deepseek-chat",
    "messages": [
        {"role": "system", "content": "Kamu adalah asisten terminal..."},
        {"role": "user", "content": "cara check disk usage"}
    ],
    "temperature": 0.3,
    "max_tokens": 1024
}

Response:

{
    "id": "chatcmpl-...",
    "choices": [{
        "message": {
            "role": "assistant",
            "content": "$ df -h /"
        }
    }]
}

Provider yang Didukung:

🔐 Enkripsi Vault

Primary (recommended): cryptography.fernet.Fernet

Master Password
       │
       ▼
   PBKDF2 (SHA-256, 600k iterations, salt)
       │
       ▼
   AES-128-CBC (Fernet)
       │
       ▼
   Base64-encoded token
       │
       ▼
   vault.json

Fallback (no cryptography): HMAC + XOR

Kalo cryptography gak terinstall, OpsTerm pake fallback encryption:
1. Key derivation: PBKDF2 from hashlib (stdlib)
2. Encryption: XOR cipher dengan random IV
3. Integrity: HMAC-SHA256

⚠️ Fallback ini kurang aman dibanding AES. Recommended: pip install cryptography

📡 Komunikasi SSH/SCP

SSH Command Building:

# Direct SSH
ssh -i ~/.ssh/id_ed25519 -p 22 ubuntu@43.157.204.199 -t

# Multi-hop via ProxyJump
ssh -J ubuntu@10.0.0.1:22 ubuntu@43.157.204.199 -t

SCP Command Building:

# Upload
scp -i ~/.ssh/id_ed25519 local.txt ubuntu@host:/remote/path/

# Download
scp -i ~/.ssh/id_ed25519 ubuntu@host:/remote/path/ local.txt

# Via jump host
scp -o ProxyJump=ubuntu@bastion:22 file.txt ubuntu@internal:/path/

Interaction:

• SSH: os.execvp() → replace proses, interactive
• SCP: subprocess.run() → blocking sampai selesai
• Workflow SSH: subprocess.run() → non-interactive, command via SSH

🐚 Zsh Plugin Integration

Hooks yang dipake:

Aliases:

alias ai-last='ai last'
alias ai-explain='ai explain-last'

Cara kerja ai-ti (AI + Terminal Integration):

ai-ti() {
    # 1. Tanya AI
    ai "$*"

    # 2. Ekstrak command dari response (yang mulai dengan $)
    # 3. Tanya user: jalanin?
    # 4. Kalo ya, execute
}

🎯 Perbandingan dengan Alternatif

Selanjutnya: 🤔 Design Decisions →