hanoman 0.1.12 → 0.1.14

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.12",
-  "sha": "f88186c",
-  "builtAt": "2026-08-01T11:46:59.162Z"
+  "version": "0.1.14",
+  "sha": "70cc48f",
+  "builtAt": "2026-08-01T16:01:40.254Z"
 }

package/dist/cli.js

@@ -4380,6 +4380,25 @@ var init_telegram = __esm({
   }
 });
 
+// ../shared/src/auto-merge.ts
+var AUTO_MERGE_MODES, zAutoMerge;
+var init_auto_merge = __esm({
+  "../shared/src/auto-merge.ts"() {
+    "use strict";
+    init_zod();
+    AUTO_MERGE_MODES = ["off", "default-branch", "branch"];
+    zAutoMerge = external_exports.object({
+      mode: external_exports.enum(AUTO_MERGE_MODES).default("off"),
+      // Tujuan: `local` = perbarui ref/fast-forward di checkout ini; `origin` = push.
+      dest: external_exports.enum(["local", "origin"]).default("local"),
+      // Hanya bermakna saat mode = "branch". Untuk "default-branch" ia diresolve SAAT EKSEKUSI.
+      branch: external_exports.string().min(1).nullable().default(null),
+      // Hapus `hanoman/<spec>` (lokal + origin) — HANYA sesudah merge terbukti bersih.
+      deleteBranch: external_exports.boolean().default(false)
+    });
+  }
+});
+
 // ../shared/src/entities.ts
 var zProject, zBriefPayload, zQaPayload, zGoalPayload, zSpecBlocker, zSpec, NOTIFY_SOUNDS, zCodex, CODEX_DEFAULTS, zSourceCommon, zScheduler, SCHEDULER_DEFAULTS, zGoal, GOAL_DEFAULTS, zConflict, CONFLICT_DEFAULTS, zLeadEngine, zLead, LEAD_DEFAULTS, zSetting, zNotification, zDocFile, zDeviceTokenView;
 var init_entities = __esm({
@@ -4388,6 +4407,7 @@ var init_entities = __esm({
     init_zod();
     init_enums();
     init_telegram();
+    init_auto_merge();
     zProject = external_exports.object({
       id: external_exports.string(),
       name: external_exports.string(),
@@ -4453,7 +4473,10 @@ var init_entities = __esm({
       dependsOn: external_exports.array(external_exports.string()).default([]),
       // Turunan (bukan kolom): dihitung `liveSpecs` dari stage dependency + git. Klien tak pernah
       // mengirimkannya — `.default([])` supaya bentuk lama tetap parse.
-      blockedBy: external_exports.array(zSpecBlocker).default([])
+      blockedBy: external_exports.array(zSpecBlocker).default([]),
+      // SPEC-486 · ADR-0103 · override kebijakan auto-merge item ini; null = warisi project.
+      // `.nullable().default(null)` menjaga respons/klien versi lama tetap parse.
+      autoMerge: zAutoMerge.nullable().default(null)
     });
     NOTIFY_SOUNDS = [
       "off",
@@ -4540,6 +4563,11 @@ var init_entities = __esm({
       // `requestTimeout: 0` (terukur dari `buildApp()`) — tak ada pihak lain yang akan memutus peminta.
       // 0 = tanpa antrean sama sekali: penuh berarti langsung ditolak.
       queueWaitSec: external_exports.number().int().min(0).max(900).default(120),
+      // SPEC-485 · ADR-0102 · umur maksimum satu RANTAI keputusan yang dibiarkan terbuka. Peminta bisa
+      // mati di tengah rantai (sesi ditutup, agen crash); tanpa batas ini alurnya `sebagian` selamanya
+      // dan tak ada yang tahu apakah ia masih ditunggu. Penyapunya menumpang tick lead yang sudah ada —
+      // ADR-0024 melarang timer/scheduler baru.
+      flowTtlMin: external_exports.number().int().min(1).max(1440).default(60),
       // OQ-3 · syarat objektif sebelum lead boleh mengintegrasikan ke branch utama. Default MENYALA:
       // risiko "kode masuk main tanpa mata manusia" diterima sadar, tapi syaratnya tetap terukur.
       requireGreenBeforeIntegrate: external_exports.boolean().default(true),
@@ -4685,12 +4713,24 @@ var init_agent = __esm({
 });
 
 // ../shared/src/custom-agent.ts
-var AGENT_NAME_RE, zCustomAgent, zCreateCustomAgent, zUpdateCustomAgent;
+var AGENT_RUNTIMES, zAgentRuntime, AGENT_NAME_RE, DEFAULT_AGENT_TOOLS, zCustomAgent, zCreateCustomAgent, zUpdateCustomAgent;
 var init_custom_agent = __esm({
   "../shared/src/custom-agent.ts"() {
     "use strict";
     init_zod();
+    AGENT_RUNTIMES = ["claude", "codex"];
+    zAgentRuntime = external_exports.enum(AGENT_RUNTIMES);
     AGENT_NAME_RE = /^[a-z][a-z0-9-]{1,39}$/;
+    DEFAULT_AGENT_TOOLS = [
+      "Read",
+      "Write",
+      "Edit",
+      "Bash",
+      "Glob",
+      "Grep",
+      "WebFetch",
+      "WebSearch"
+    ];
     zCustomAgent = external_exports.object({
       id: external_exports.string(),
       projectId: external_exports.string().nullable(),
@@ -4700,6 +4740,7 @@ var init_custom_agent = __esm({
       tools: external_exports.array(external_exports.string()).nullable(),
       model: external_exports.string().nullable(),
       mentions: external_exports.array(external_exports.string()).nullable(),
+      runtime: external_exports.enum(AGENT_RUNTIMES).nullable(),
       enabled: external_exports.boolean(),
       createdAt: external_exports.string(),
       updatedAt: external_exports.string()
@@ -4712,12 +4753,29 @@ var init_custom_agent = __esm({
       tools: external_exports.array(external_exports.string()).nullable().optional(),
       model: external_exports.string().nullable().optional(),
       mentions: external_exports.array(external_exports.string()).nullable().optional(),
+      // SPEC-484 · ADR-0101 · PENYARING mesin sesi, bukan pemilih proses. null/absen = ikut sesi induk.
+      runtime: external_exports.enum(AGENT_RUNTIMES).nullable().optional(),
       enabled: external_exports.boolean().optional()
     });
     zUpdateCustomAgent = zCreateCustomAgent.omit({ name: true, projectId: true }).partial();
   }
 });
 
+// ../shared/src/agent-catalog.ts
+var BUILTIN_AGENT_TOOLS;
+var init_agent_catalog = __esm({
+  "../shared/src/agent-catalog.ts"() {
+    "use strict";
+    init_custom_agent();
+    init_entities();
+    BUILTIN_AGENT_TOOLS = DEFAULT_AGENT_TOOLS.map((id) => ({
+      id,
+      label: id,
+      group: "builtin"
+    }));
+  }
+});
+
 // ../shared/src/github.ts
 var zGithubIssueStatus, zNormalIssue, zGithubIssueView;
 var init_github = __esm({
@@ -4749,7 +4807,7 @@ var init_github = __esm({
 });
 
 // ../shared/src/lead.ts
-var zLeadGate, zLeadKind, zLeadConfidence, zLeadStatus, LEAD_ACTIONS, zLeadAction, zLeadChoice, zLeadVerdict, zLeadAsk, zLeadOverride;
+var zLeadGate, zLeadKind, zLeadConfidence, zLeadStatus, zLeadFlowStatus, LEAD_ACTIONS, zLeadAction, zLeadChoice, zLeadSelect, zLeadVerdict, zLeadAsk, zLeadOverride;
 var init_lead = __esm({
   "../shared/src/lead.ts"() {
     "use strict";
@@ -4758,6 +4816,7 @@ var init_lead = __esm({
     zLeadKind = external_exports.enum(["answer", "order", "collision", "quality", "refusal"]);
     zLeadConfidence = external_exports.enum(["tinggi", "sedang", "ragu"]);
     zLeadStatus = external_exports.enum(["berlaku", "ditimpa", "dibatalkan", "gagal"]);
+    zLeadFlowStatus = external_exports.enum(["menunggu", "sebagian", "selesai", "dibatalkan"]);
     LEAD_ACTIONS = [
       "none",
       // keputusan murni jawaban; tak ada tindakan menyusul
@@ -4784,6 +4843,11 @@ var init_lead = __esm({
     ];
     zLeadAction = external_exports.enum(LEAD_ACTIONS);
     zLeadChoice = external_exports.object({ index: external_exports.number().int().positive(), option: external_exports.string() });
+    zLeadSelect = external_exports.object({
+      mode: external_exports.enum(["single", "multi"]).default("single"),
+      min: external_exports.number().int().min(0).max(20).default(0),
+      max: external_exports.number().int().min(1).max(20).nullable().default(null)
+    });
     zLeadVerdict = external_exports.object({
       decision: external_exports.string().min(1),
       reason: external_exports.string().min(1),
@@ -4800,6 +4864,14 @@ var init_lead = __esm({
        * yang sama persis dengan `action` di atas.
        */
       choice: external_exports.string().default(""),
+      /**
+       * SPEC-485 · pilihan JAMAK. `string[]` dengan alasan yang sama persis seperti `choice` & `action`
+       * di atas: pilihan di luar daftar harus BISA MASUK supaya server menolaknya secara sadar dan
+       * mencatatnya. Kosong + `choice` terisi dibaca sebagai satu pilihan — keluaran agen berbentuk
+       * ADR-0098 harus tetap terpakai, dan menuntut field baru berarti setiap agen lama mendadak
+       * "tak memilih apa pun".
+       */
+      choices: external_exports.array(external_exports.string().max(2e3)).max(20).default([]),
       /**
        * SPEC-480 · apa yang KURANG bila konteksnya memang tak cukup untuk memutuskan. Bukan pengganti
        * `confidence: "ragu"` (bukti tipis, jawabannya tetap ada) melainkan untuk fakta konkret yang
@@ -4815,23 +4887,36 @@ var init_lead = __esm({
       sessionId: external_exports.string().nullish(),
       question: external_exports.string().min(1).max(8e3),
       options: external_exports.array(external_exports.string().max(2e3)).max(20).default([]),
-      context: external_exports.string().max(2e4).default("")
+      context: external_exports.string().max(2e4).default(""),
+      /** SPEC-485 · bentuk pilihan yang diminta peminta. Default = perilaku hari ini (single). */
+      select: zLeadSelect.default({ mode: "single", min: 0, max: null }),
+      /** `true` = peminta akan mengajukan pertanyaan lanjutan; alurnya dibiarkan terbuka sampai submit. */
+      chain: external_exports.boolean().default(false),
+      /** Lanjutkan rantai yang sudah ada. Alur tertutup ditolak 409 — bukan dibuatkan diam-diam. */
+      flowId: external_exports.string().min(1).nullish().default(null)
     });
     zLeadOverride = external_exports.object({
       answer: external_exports.string().min(1).max(8e3),
-      reason: external_exports.string().max(8e3).default("")
+      reason: external_exports.string().max(8e3).default(""),
+      /**
+       * SPEC-485 · centang operator sebagai DATA, bukan prosa. Dipetakan ke opsi baris yang ditimpa,
+       * lalu ikut diketikkan ke pane — jadi manusia mencentang di dashboard dan kotaknya benar-benar
+       * tercentang di dialog sesi.
+       */
+      choices: external_exports.array(external_exports.string().max(2e3)).max(20).default([])
     });
   }
 });
 
 // ../shared/src/dto.ts
-var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zUpdateProject, zCreateSpec, zPatchSpec, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerState, zLeadDecisionView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, zLogin, zSignup, zChangePassword, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, UPDATE_RESTART_EXIT, zUpdateApplyBody, zTicketView, zTicketAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus;
+var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zUpdateProject, zCreateSpec, zPatchSpec, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerState, zLeadDecisionView, zLeadFlowView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, zLogin, zSignup, zChangePassword, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, UPDATE_RESTART_EXIT, zUpdateApplyBody, zTicketView, zTicketAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus;
 var init_dto = __esm({
   "../shared/src/dto.ts"() {
     "use strict";
     init_zod();
     init_entities();
     init_lead();
+    init_auto_merge();
     init_enums();
     zIssueDeviceToken = external_exports.object({ name: external_exports.string().min(1) });
     zSessionResult = external_exports.object({
@@ -4884,8 +4969,11 @@ var init_dto = __esm({
       // SPEC-217 · path default/server editable (null = kosongkan)
       schedulerOptIn: external_exports.boolean().optional(),
       // SPEC-294 · opt-in scheduler otonom (lokal, tak disync)
-      leadOptIn: external_exports.boolean().optional()
+      leadOptIn: external_exports.boolean().optional(),
       // SPEC-409 · ADR-0091 · opt-in hanoman-lead (lokal, tak disync)
+      // SPEC-486 · ADR-0103 · kebijakan auto-merge project (null = kosongkan → tanpa auto-merge).
+      // Divalidasi server terhadap repo (checkAutoMerge): repoDir wajib ada, branch wajib nyata.
+      autoMerge: zAutoMerge.nullable().optional()
     });
     zCreateSpec = external_exports.object({
       project: external_exports.string(),
@@ -4914,7 +5002,11 @@ var init_dto = __esm({
       // SPEC-447 · ADR-0093 · SENGAJA di luar gerbang `editingContent` (SPEC-186): gerbang itu
       // melindungi konten yang sudah jadi dasar kerja sesi berjalan, sedangkan dependsOn hanya
       // menggerbangi peluncuran BERIKUTNYA. `[]` = kosongkan.
-      dependsOn: external_exports.array(external_exports.string()).optional()
+      dependsOn: external_exports.array(external_exports.string()).optional(),
+      // SPEC-486 · ADR-0103 · override per item; `null` mengembalikannya ke warisan project.
+      // SENGAJA di luar gerbang `editingContent` (SPEC-186), sama seperti dependsOn: ia menggerbangi
+      // apa yang terjadi SESUDAH kerja, bukan konten yang sedang dikerjakan sesi hidup.
+      autoMerge: zAutoMerge.nullable().optional()
     });
     zIntegrate = external_exports.object({
       op: external_exports.enum(["merge", "rebase"]),
@@ -4937,7 +5029,9 @@ var init_dto = __esm({
       // SPEC-253 · Help Center publik aktif
       schedulerOptIn: external_exports.boolean().default(false),
       // SPEC-294 · opt-in scheduler otonom
-      leadOptIn: external_exports.boolean().default(false)
+      leadOptIn: external_exports.boolean().default(false),
+      // SPEC-409 · ADR-0091 · opt-in hanoman-lead
+      autoMerge: zAutoMerge.nullable().default(null)
     });
     zSchedulerQueueItem = external_exports.object({
       id: external_exports.string(),
@@ -4994,11 +5088,32 @@ var init_dto = __esm({
       choiceIndex: external_exports.number().nullable().default(null),
       options: external_exports.array(external_exports.string()).default([]),
       missing: external_exports.array(external_exports.string()).default([]),
+      // SPEC-485 · ADR-0102 · jawaban SELALU daftar di permukaan baca. Baris pra-migrasi tak punya
+      // kolomnya, jadi `toDecisionView` MENURUNKANNYA dari `choice`/`choiceIndex` — itulah yang
+      // membuat riwayat lama tetap terbaca sesudah perubahan skema.
+      choices: external_exports.array(zLeadChoice).default([]),
+      select: zLeadSelect.nullable().default(null),
+      flowId: external_exports.string().nullable().default(null),
+      step: external_exports.number().nullable().default(null),
       status: zLeadStatus,
       weighty: external_exports.boolean(),
       supersededById: external_exports.string().nullable(),
       createdAt: external_exports.string()
     });
+    zLeadFlowView = external_exports.object({
+      id: external_exports.string(),
+      projectId: external_exports.string(),
+      specId: external_exports.string().nullable(),
+      sessionId: external_exports.string().nullable(),
+      gate: zLeadGate,
+      status: zLeadFlowStatus,
+      title: external_exports.string(),
+      steps: external_exports.number(),
+      closeReason: external_exports.string().nullable(),
+      openedAt: external_exports.string(),
+      closedAt: external_exports.string().nullable(),
+      expiresAt: external_exports.string()
+    });
     zLeadAnswer = external_exports.object({
       id: external_exports.string(),
       decision: external_exports.string(),
@@ -5010,7 +5125,12 @@ var init_dto = __esm({
       // dipilih sebagai field, bukan sesuatu yang harus ditebak dari `decision`. `decision`/`reason`
       // di sini TERPANGKAS (jejak penuh ada di `GET /lead/decisions`).
       choice: zLeadChoice.nullable().default(null),
-      missing: external_exports.array(external_exports.string()).default([])
+      missing: external_exports.array(external_exports.string()).default([]),
+      // SPEC-485 · ADR-0102 · `choices` adalah bentuk yang berlaku; `choice` di atas tinggal
+      // `choices[0]`. `flowId`/`flowStatus` memberi peminta pegangan untuk melanjutkan rantainya.
+      choices: external_exports.array(zLeadChoice).default([]),
+      flowId: external_exports.string().nullable().default(null),
+      flowStatus: zLeadFlowStatus.nullable().default(null)
     });
     zLeadProjectStatus = external_exports.object({
       projectId: external_exports.string(),
@@ -5264,6 +5384,9 @@ var init_api = __esm({
       limits: `${API}/limits`,
       // SPEC-339 · versi codex CLI (peringatan lunak model GPT-5.6).
       codexVersion: `${API}/codex/version`,
+      // SPEC-489 · panduan AI agent — markdown MENTAH & PUBLIC (tanpa auth). Satu definisi URL untuk
+      // klien web dan untuk tautan yang disalin operator ke agennya.
+      agentDoc: `${API}/agent-integration.md`,
       docs: (id) => `${API}/projects/${id}/docs`,
       docFile: (id, path) => `${API}/projects/${id}/docs/${path}`,
       // SPEC-210 · dokumen PRD project (freshest-wins: worktree sesi prd hidup > repoDir)
@@ -5370,8 +5493,15 @@ var init_api = __esm({
       leadDecisions: `${API}/lead/decisions`,
       leadDecisionOverride: (id) => `${API}/lead/decisions/${encodeURIComponent(id)}/override`,
       leadDecisionCancel: (id) => `${API}/lead/decisions/${encodeURIComponent(id)}/cancel`,
+      // SPEC-485 · ADR-0102 · rantai keputusan. Di bawah prefix `lead` supaya capability-nya turunan
+      // method (lead:read/lead:write) tanpa peta baru — kelas bug SPEC-405 sudah ditutup di sana.
+      leadFlows: `${API}/lead/flows`,
+      leadFlowSubmit: (id) => `${API}/lead/flows/${encodeURIComponent(id)}/submit`,
+      leadFlowCancel: (id) => `${API}/lead/flows/${encodeURIComponent(id)}/cancel`,
       // SPEC-450 · ADR-0094 · katalog custom agent. `?projectId=` → himpunan EFEKTIF (global+project).
       customAgents: `${API}/custom-agents`,
+      // SPEC-484 · ADR-0101 · sumber daftar tools/model/runtime untuk form (mention dari `customAgents`).
+      customAgentCatalog: `${API}/custom-agents/catalog`,
       // SPEC-481 · ADR-0100 · webhook keluar (cookie-only)
       webhooks: `${API}/webhooks`,
       webhook: (id) => `${API}/webhooks/${encodeURIComponent(id)}`,
@@ -5535,6 +5665,7 @@ var init_config_registry = __esm({
         kind: "url",
         apply: "live",
         category: "knob",
+        example: "https://hanoman.nafanesia.id",
         help: "Base URL hub tujuan sync (REST + WS). Kosong = instance ini murni HUB."
       },
       {
@@ -5544,6 +5675,7 @@ var init_config_registry = __esm({
         kind: "secret",
         apply: "live",
         category: "credential",
+        example: "43 karakter base64url dari tab Perangkat hub",
         help: "Token yang diterbitkan hub (tab Perangkat di hub). Dikirim sebagai Bearer."
       },
       {
@@ -5553,6 +5685,7 @@ var init_config_registry = __esm({
         kind: "int",
         apply: "live",
         category: "knob",
+        example: "15000",
         default: "15000",
         min: 1e3
       },
@@ -5564,13 +5697,14 @@ var init_config_registry = __esm({
         kind: "secret",
         apply: "new-session",
         category: "credential",
+        example: "sk-ant-oat01-\u2026",
         inheritEnv: true,
         help: "Token `claude setup-token`. Diwarisi proses claude yang di-spawn."
       },
-      { key: "ANTHROPIC_API_KEY", group: "claude", label: "Anthropic API key", kind: "secret", apply: "new-session", category: "credential", inheritEnv: true },
-      { key: "HANOMAN_CLAUDE_BIN", group: "claude", label: "Biner claude", kind: "path", apply: "new-session", category: "knob", default: "claude" },
+      { key: "ANTHROPIC_API_KEY", group: "claude", label: "Anthropic API key", kind: "secret", apply: "new-session", category: "credential", example: "sk-ant-api03-\u2026", inheritEnv: true },
+      { key: "HANOMAN_CLAUDE_BIN", group: "claude", label: "Biner claude", kind: "path", apply: "new-session", category: "knob", example: "/opt/homebrew/bin/claude", default: "claude" },
       // codex (SPEC-338 · ADR-0074)
-      { key: "HANOMAN_CODEX_BIN", group: "claude", label: "Biner codex", kind: "path", apply: "new-session", category: "knob", default: "codex" },
+      { key: "HANOMAN_CODEX_BIN", group: "claude", label: "Biner codex", kind: "path", apply: "new-session", category: "knob", example: "/opt/homebrew/bin/codex", default: "codex" },
       {
         key: "CLAUDE_CONFIG_DIR",
         group: "claude",
@@ -5578,11 +5712,12 @@ var init_config_registry = __esm({
         kind: "path",
         apply: "new-session",
         category: "knob",
+        example: "~/.claude",
         help: "Default ~/.claude. Sumber .credentials.json untuk panel usage/limit."
       },
       // vps
-      { key: "HANOMAN_SSH_KEY_DIR", group: "vps", label: "Dir key SSH", kind: "path", apply: "new-session", category: "knob", help: "Default ~/.hanoman." },
-      { key: "HANOMAN_SSH_BIN", group: "vps", label: "Biner ssh", kind: "path", apply: "new-session", category: "knob", default: "ssh" },
+      { key: "HANOMAN_SSH_KEY_DIR", group: "vps", label: "Dir key SSH", kind: "path", apply: "new-session", category: "knob", example: "~/.hanoman", help: "Default ~/.hanoman." },
+      { key: "HANOMAN_SSH_BIN", group: "vps", label: "Biner ssh", kind: "path", apply: "new-session", category: "knob", example: "/usr/bin/ssh", default: "ssh" },
       // github (SPEC-471 · ADR-0095 · tarik issue → backlog). Dua mode auth, satu jalur kode:
       // `gh` memakai keyring mesin; bila GITHUB_TOKEN diisi ia diteruskan sebagai GH_TOKEN ke
       // proses gh DAN dipakai jalur REST (hub VPS yang tak punya keyring).
@@ -5593,6 +5728,7 @@ var init_config_registry = __esm({
         kind: "secret",
         apply: "live",
         category: "credential",
+        example: "ghp_\u2026",
         help: "PAT scope `repo` (atau `public_repo`). Kosong = andalkan `gh auth login` di mesin ini."
       },
       {
@@ -5602,6 +5738,7 @@ var init_config_registry = __esm({
         kind: "path",
         apply: "live",
         category: "knob",
+        example: "/opt/homebrew/bin/gh",
         default: "gh",
         help: "Absen = tarik issue lewat HTTPS langsung ke api.github.com."
       },
@@ -5614,6 +5751,7 @@ var init_config_registry = __esm({
         kind: "secret",
         apply: "live",
         category: "credential",
+        example: "123456789:AAE\u2026",
         pattern: "^\\d{5,}:[A-Za-z0-9_-]{30,}$",
         patternError: "format BotFather: <bot_id>:<secret>",
         help: "Token dari BotFather. Disimpan terenkripsi; tak pernah dikembalikan utuh."
@@ -5625,6 +5763,7 @@ var init_config_registry = __esm({
         kind: "secret",
         apply: "live",
         category: "credential",
+        example: "hnm_agt_\u2026",
         pattern: "^\\S{20,}$",
         patternError: "plaintext AgentToken (hnm_agt_\u2026)",
         help: "Plaintext AgentToken ber-capability Telegram. Dipakai session operator, bukan bot."
@@ -5636,6 +5775,7 @@ var init_config_registry = __esm({
         kind: "string",
         apply: "live",
         category: "credential",
+        example: "123456789, 987654321",
         pattern: "^\\d+(?:[\\s,]+\\d+)*$",
         patternError: "numeric user id, dipisah koma/spasi",
         help: "Siapa yang boleh memerintah bot. Numeric Telegram user id, bukan username."
@@ -5647,12 +5787,13 @@ var init_config_registry = __esm({
         kind: "string",
         apply: "live",
         category: "knob",
+        example: "-1001234567890",
         pattern: "^-?\\d+$",
         patternError: "numeric chat id (channel/supergroup negatif)",
         help: "Tujuan Test Connection. Kosong = pakai satu-satunya id di allowlist."
       },
       // runtime
-      { key: "HANOMAN_EVENTS_TICK_MS", group: "runtime", label: "Interval events (ms)", kind: "int", apply: "live", category: "knob", default: "1000", min: 100 },
+      { key: "HANOMAN_EVENTS_TICK_MS", group: "runtime", label: "Interval events (ms)", kind: "int", apply: "live", category: "knob", example: "1000", default: "1000", min: 100 },
       { key: "HANOMAN_UPDATE_FETCH", group: "runtime", label: "Deteksi update saat boot", kind: "bool", apply: "live", category: "knob", default: "1" },
       // SPEC-398 · ADR-0087 · deteksi update kini membandingkan semver dengan registry npm, bukan
       // menghitung commit di repo git (HANOMAN_REPO_ROOT dicabut bersama jalur git itu).
@@ -5663,6 +5804,7 @@ var init_config_registry = __esm({
         kind: "string",
         apply: "live",
         category: "knob",
+        example: "https://registry.npmjs.org",
         default: "https://registry.npmjs.org",
         help: "Sumber versi terbaru paket `hanoman`."
       },
@@ -5673,15 +5815,16 @@ var init_config_registry = __esm({
         kind: "string",
         apply: "restart",
         category: "knob",
+        example: "hanoman",
         default: "hanoman",
         help: "Mengubah ini TIDAK memindahkan sesi tmux yang sudah hidup \u2014 berlaku setelah restart."
       },
       // gitGraph (SPEC-233 · preferensi tampilan git graph; semua live, dikonsumsi client)
-      { key: "gitGraph.style", group: "gitGraph", label: "Gaya graph", kind: "string", apply: "live", category: "knob", default: "rounded", help: "rounded | angular" },
-      { key: "gitGraph.colours", group: "gitGraph", label: "Warna lane (CSV)", kind: "string", apply: "live", category: "knob", help: "Daftar warna hex dipisah koma; kosong = palet bawaan." },
-      { key: "gitGraph.dateType", group: "gitGraph", label: "Jenis tanggal", kind: "string", apply: "live", category: "knob", default: "author", help: "author | commit" },
-      { key: "gitGraph.commitsInitialLoad", group: "gitGraph", label: "Muat awal", kind: "int", apply: "live", category: "knob", default: "200", min: 1 },
-      { key: "gitGraph.commitsLoadMore", group: "gitGraph", label: "Muat lagi", kind: "int", apply: "live", category: "knob", default: "100", min: 1 },
+      { key: "gitGraph.style", group: "gitGraph", label: "Gaya graph", kind: "string", apply: "live", category: "knob", example: "rounded", default: "rounded", help: "rounded | angular" },
+      { key: "gitGraph.colours", group: "gitGraph", label: "Warna lane (CSV)", kind: "string", apply: "live", category: "knob", example: "#c9a227, #6b8f71, #b4614e", help: "Daftar warna hex dipisah koma; kosong = palet bawaan." },
+      { key: "gitGraph.dateType", group: "gitGraph", label: "Jenis tanggal", kind: "string", apply: "live", category: "knob", example: "author", default: "author", help: "author | commit" },
+      { key: "gitGraph.commitsInitialLoad", group: "gitGraph", label: "Muat awal", kind: "int", apply: "live", category: "knob", example: "200", default: "200", min: 1 },
+      { key: "gitGraph.commitsLoadMore", group: "gitGraph", label: "Muat lagi", kind: "int", apply: "live", category: "knob", example: "100", default: "100", min: 1 },
       { key: "gitGraph.showRemoteBranches", group: "gitGraph", label: "Tampilkan remote", kind: "bool", apply: "live", category: "knob", default: "1" },
       { key: "gitGraph.showTags", group: "gitGraph", label: "Tampilkan tag", kind: "bool", apply: "live", category: "knob", default: "1" },
       { key: "gitGraph.showStashes", group: "gitGraph", label: "Tampilkan stash", kind: "bool", apply: "live", category: "knob", default: "1" },
@@ -5691,7 +5834,7 @@ var init_config_registry = __esm({
       { key: "gitGraph.combineLocalRemote", group: "gitGraph", label: "Gabung label local+remote", kind: "bool", apply: "live", category: "knob", default: "0" },
       { key: "gitGraph.markdown", group: "gitGraph", label: "Render markdown pesan", kind: "bool", apply: "live", category: "knob", default: "1" },
       { key: "gitGraph.emoji", group: "gitGraph", label: "Render emoji shortcode", kind: "bool", apply: "live", category: "knob", default: "1" },
-      { key: "gitGraph.issueLinkPattern", group: "gitGraph", label: "Pola link issue", kind: "string", apply: "live", category: "knob", help: "URL dengan $1 untuk nomor issue, mis. https://github.com/acme/app/issues/$1" },
+      { key: "gitGraph.issueLinkPattern", group: "gitGraph", label: "Pola link issue", kind: "string", apply: "live", category: "knob", example: "https://github.com/acme/app/issues/$1", help: "URL dengan $1 untuk nomor issue, mis. https://github.com/acme/app/issues/$1" },
       // bootstrap (read-only)
       { key: "DATABASE_URL", group: "bootstrap", label: "DATABASE_URL", kind: "secret", apply: "restart", category: "bootstrap" },
       { key: "TEST_DATABASE_URL", group: "bootstrap", label: "TEST_DATABASE_URL", kind: "secret", apply: "restart", category: "bootstrap" },
@@ -5763,6 +5906,7 @@ var init_webhook = __esm({
           "baseSha",
           "headSha",
           "dependsOn",
+          "autoMerge",
           "createdAt",
           "startedAt",
           "updatedAt"
@@ -5792,6 +5936,7 @@ var init_webhook = __esm({
           baseSha: "5117298c5a3e63af76cbadaa46e2edfa50921d7",
           headSha: null,
           dependsOn: null,
+          autoMerge: null,
           createdAt: "2026-08-01T02:10:00.000Z",
           startedAt: "2026-08-01T02:12:31.000Z",
           updatedAt: "2026-08-01T09:41:22.000Z"
@@ -5811,6 +5956,7 @@ var init_webhook = __esm({
           "helpEnabled",
           "schedulerOptIn",
           "leadOptIn",
+          "autoMerge",
           "createdAt",
           "updatedAt"
         ],
@@ -5831,6 +5977,7 @@ var init_webhook = __esm({
           helpEnabled: false,
           schedulerOptIn: true,
           leadOptIn: false,
+          autoMerge: null,
           createdAt: "2026-05-02T04:00:00.000Z",
           updatedAt: "2026-08-01T09:00:00.000Z"
         }
@@ -6625,7 +6772,7 @@ var init_mcp_catalog = __esm({
       {
         name: "hanoman_lead_ask",
         title: "Minta putusan hanoman-lead",
-        description: "Minta putusan ke hanoman-lead saat menemui persimpangan yang biasanya butuh manusia. Jawabannya terbaca mesin (`decision`, `reason`, `refs`, `confidence`, `action`) dan `refs` hanya memuat rujukan yang benar-benar ada di repo. Panggilan ini melahirkan jejak permanen dan putusannya bisa menggerakkan sesi \u2014 pakai hanya saat memang buntu. 409 = lead tak aktif atau proyek belum opt-in: kembali ke perilaku biasa, berhenti dan tunggu manusia.",
+        description: "Minta putusan ke hanoman-lead saat menemui persimpangan yang biasanya butuh manusia. Jawabannya terbaca mesin (`decision`, `reason`, `refs`, `confidence`, `action`, `choices`) dan `refs` hanya memuat rujukan yang benar-benar ada di repo. Bila opsinya TIDAK saling eksklusif, set `multi: true` \u2014 balasannya memuat `choices` (daftar), bukan hanya `choice`. Panggilan ini melahirkan jejak permanen dan putusannya bisa menggerakkan sesi \u2014 pakai hanya saat memang buntu. 409 = lead tak aktif atau proyek belum opt-in: kembali ke perilaku biasa, berhenti dan tunggu manusia; 400 = bentuk `multi`/`minChoices`/`maxChoices` mustahil dipenuhi oleh daftar opsi yang kamu kirim.",
         inputSchema: obj({
           properties: {
             project: str("Id proyek."),
@@ -6633,7 +6780,10 @@ var init_mcp_catalog = __esm({
             spec: str("Opsional. Id backlog yang bersangkutan."),
             session: str("Opsional. Id sesi yang bersangkutan."),
             options: strArray("Opsional. Pilihan yang tersedia, maksimum 20, masing-masing maksimum 2000 karakter. Lead memilih salah satunya."),
-            context: str("Opsional. Konteks pendukung, maksimum 20.000 karakter.")
+            context: str("Opsional. Konteks pendukung, maksimum 20.000 karakter."),
+            multi: bool("Opsional. `true` bila opsinya TIDAK saling eksklusif dan lead boleh memilih beberapa sekaligus. Menuntut `options` terisi."),
+            minChoices: int("Opsional, hanya untuk `multi`. Paling sedikit berapa opsi harus dipilih."),
+            maxChoices: int("Opsional, hanya untuk `multi`. Paling banyak berapa opsi boleh dipilih; tanpa ini sebanyak opsinya.")
           },
           required: ["project", "question"]
         }),
@@ -6650,7 +6800,10 @@ var init_mcp_catalog = __esm({
             ...s(a.spec) ? { specId: a.spec } : {},
             ...s(a.session) ? { sessionId: a.session } : {},
             ...Array.isArray(a.options) ? { options: a.options } : {},
-            ...s(a.context) ? { context: a.context } : {}
+            ...s(a.context) ? { context: a.context } : {},
+            // SPEC-485 · ADITIF: tanpa `multi` bentuk permintaannya identik dengan sebelum ADR-0102,
+            // jadi klien MCP lama tak berubah perilakunya satu bit pun.
+            ...a.multi === true ? { select: { mode: "multi", min: n(a.minChoices) ?? 0, max: n(a.maxChoices) ?? null } } : {}
           }
         }),
         shape: (raw) => raw
@@ -6692,6 +6845,7 @@ var init_src = __esm({
     init_entities();
     init_agent();
     init_custom_agent();
+    init_agent_catalog();
     init_github();
     init_lead();
     init_dto();
@@ -6705,6 +6859,7 @@ var init_src = __esm({
     init_telegram();
     init_webhook();
     init_mcp();
+    init_auto_merge();
   }
 });
 
@@ -28273,8 +28428,11 @@ var init_migrate_pg = __esm({
       "SyncOutbox",
       "SyncState",
       "SyncConflict",
+      // SPEC-485 · ADR-0102 · LeadFlow SEBELUM LeadDecision: `flowId` menunjuk ke sana. Tanpa FK, tapi
+      // urutan tabel harus tetap mencerminkan arah tautannya bagi pembaca berikutnya.
       "SchedulerQueueItem",
       "RuntimeConfig",
+      "LeadFlow",
       "LeadDecision",
       // SPEC-476 · ADR-0096 · tabel gateway LOCAL-only; sumber Postgres lama lazimnya tidak punya
       // tabel ini dan jalur 42P01 di bawah memperlakukannya sebagai nol baris.
@@ -28559,7 +28717,7 @@ function packageJsonFor(version3, deps) {
       prepublishOnly: "node dist/cli.js __verify"
     },
     engines: { node: ">=20" },
-    files: ["bin", "dist", "web", "prisma", "README.md", "LICENSE"],
+    files: ["bin", "dist", "web", "prisma", "docs", "README.md", "LICENSE"],
     dependencies: deps,
     // MIT: paket ini didistribusikan publik supaya orang `npm i -g`. `UNLICENSED` berarti "tak ada
     // izin pakai" — 0.1.0 terbit dengan kontradiksi itu, dan versi terbit tak bisa diperbaiki.
@@ -28581,6 +28739,9 @@ function copyPlan(repo) {
     { from: join10(repo, "server/prisma/schema.prisma"), to: "prisma/schema.prisma" },
     { from: join10(repo, "server/prisma/migrations"), to: "prisma/migrations", dir: true },
     { from: join10(repo, "internal/docs/operations/npm-readme.md"), to: "README.md" },
+    // SPEC-489 · dibaca runtime oleh pickGuideFile (kandidat `<pkg>/docs/…`). Bukan README:
+    // README paket adalah npm-readme.md (berhadapan-MANUSIA), ini naskah berhadapan-AGEN.
+    { from: join10(repo, "docs/agent-integration.md"), to: "docs/agent-integration.md" },
     { from: join10(repo, "LICENSE"), to: "LICENSE" }
   ];
 }
@@ -28609,7 +28770,11 @@ var init_pack = __esm({
       "prisma/schema.prisma",
       "web/index.html",
       "README.md",
-      "LICENSE"
+      "LICENSE",
+      // SPEC-489 · naskah panduan AI agent — dibaca runtime & disajikan di GET /api/agent-integration.md.
+      // Tanpa gerbang ini paket bisa terbit tanpa dokumen dan endpoint-nya 404 di SETIAP instalasi npm,
+      // sementara checkout dev terlihat sehat.
+      "docs/agent-integration.md"
     ];
     BIN_SHIM = `#!/usr/bin/env node
 // SPEC-398 \xB7 shim tipis: seluruh logika ada di dist/cli.js (bundle esbuild).