hanoman 0.1.27 → 0.1.28

package/dist/server.js

@@ -8657,7 +8657,7 @@ var init_paths = __esm({
 
 // ../runner/src/skills.ts
 import { homedir as homedir2 } from "node:os";
-import { join as join2 } from "node:path";
+import { basename, dirname as dirname3, join as join2, resolve as resolve6 } from "node:path";
 import { existsSync as existsSync2, readdirSync, readFileSync as readFileSync2 } from "node:fs";
 function agentSkillHome(agent, env = process.env, osHome = homedir2()) {
   const own = (agent === "codex" ? env.HANOMAN_CODEX_HOME : env.HANOMAN_CLAUDE_HOME)?.trim();
@@ -8668,6 +8668,9 @@ function agentSkillHome(agent, env = process.env, osHome = homedir2()) {
   }
   return join2(osHome, agent === "codex" ? ".codex" : ".claude");
 }
+function agentsSkillHome(env = process.env, osHome = homedir2()) {
+  return env.HANOMAN_AGENTS_HOME?.trim() || join2(osHome, ".agents");
+}
 function dirsIn(dir2) {
   try {
     return readdirSync(dir2, { withFileTypes: true }).filter((e) => (e.isDirectory() || e.isSymbolicLink()) && !e.name.startsWith(".")).map((e) => e.name);
@@ -8682,8 +8685,51 @@ function readJson(file) {
     return null;
   }
 }
-function skillsUnder(dir2, pkg) {
-  return dirsIn(dir2).filter((name2) => existsSync2(join2(dir2, name2, "SKILL.md"))).map((name2) => ({ id: pkg ? `${pkg}:${name2}` : name2, name: name2, pkg, dir: join2(dir2, name2) }));
+function isSkillDir(dir2) {
+  return existsSync2(join2(dir2, "SKILL.md"));
+}
+function asSkill(dir2, pkg, name2 = basename(dir2)) {
+  return { id: pkg ? `${pkg}:${name2}` : name2, name: name2, pkg, dir: dir2 };
+}
+function skillsUnder(dir2, pkg, depth = 2) {
+  const out3 = [];
+  for (const name2 of dirsIn(dir2)) {
+    const sub = join2(dir2, name2);
+    if (isSkillDir(sub)) out3.push(asSkill(sub, pkg, name2));
+    else if (depth > 1) out3.push(...skillsUnder(sub, pkg, depth - 1));
+  }
+  return out3;
+}
+function manifestSkills(installPath, pkg) {
+  for (const marker of [".claude-plugin", ".codex-plugin"]) {
+    const j = readJson(join2(installPath, marker, "plugin.json"));
+    const declared = j?.skills;
+    if (!Array.isArray(declared)) continue;
+    const out3 = [];
+    for (const rel of declared) {
+      if (typeof rel !== "string" || !rel) continue;
+      const p = resolve6(installPath, rel);
+      const dir2 = basename(p) === "SKILL.md" ? dirname3(p) : p;
+      if (isSkillDir(dir2)) out3.push(asSkill(dir2, pkg));
+    }
+    if (out3.length) return out3;
+  }
+  return [];
+}
+function pluginSkills(installPath, pkg) {
+  const declared = manifestSkills(installPath, pkg);
+  return declared.length ? declared : skillsUnder(join2(installPath, "skills"), pkg);
+}
+function lockPluginNames(agentsHome) {
+  const out3 = /* @__PURE__ */ new Map();
+  const j = readJson(join2(agentsHome, ".skill-lock.json"));
+  const skills = j?.skills;
+  if (!skills || typeof skills !== "object") return out3;
+  for (const [name2, entry] of Object.entries(skills)) {
+    const pkg = entry?.pluginName;
+    if (typeof pkg === "string" && pkg.trim()) out3.set(name2, pkg.trim());
+  }
+  return out3;
 }
 function splitPluginKey(key) {
   const at = key.lastIndexOf("@");
@@ -8763,11 +8809,23 @@ function scanAgentSkills(agent, env = process.env, osHome = homedir2()) {
   add(userDir, skillsUnder(userDir, null));
   for (const r of [...manifestRoots(home2), ...cacheRoots(home2)]) {
     if (disabled.has(`${r.pkg}@${r.marketplace}`)) continue;
-    const dir2 = join2(r.dir, "skills");
-    const found = skillsUnder(dir2, r.pkg);
+    const found = pluginSkills(r.dir, r.pkg);
     if (!found.length) continue;
     packages.add(r.pkg);
-    add(dir2, found);
+    add(join2(r.dir, "skills"), found);
+  }
+  if (agent === "codex") {
+    const agentsHome = agentsSkillHome(env, osHome);
+    const dir2 = join2(agentsHome, "skills");
+    const names = lockPluginNames(agentsHome);
+    const flat = skillsUnder(dir2, null);
+    const withPkg = flat.flatMap((s2) => {
+      const pkg = names.get(s2.name);
+      if (!pkg) return [s2];
+      packages.add(pkg);
+      return [asSkill(s2.dir, pkg, s2.name), s2];
+    });
+    add(dir2, withPkg);
   }
   return { agent, home: home2, roots, skills, packages: [...packages] };
 }
@@ -9002,7 +9060,7 @@ var init_tap = __esm({
 
 // src/db.ts
 import { mkdirSync as mkdirSync2 } from "node:fs";
-import { dirname as dirname3, resolve as resolve6 } from "node:path";
+import { dirname as dirname4, resolve as resolve7 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { PrismaClient } from "@prisma/client";
 var schemaDir, notice, url, base, prisma;
@@ -9012,12 +9070,12 @@ var init_db = __esm({
     init_env();
     init_src2();
     init_tap();
-    schemaDir = resolve6(dirname3(fileURLToPath2(import.meta.url)), "../prisma");
+    schemaDir = resolve7(dirname4(fileURLToPath2(import.meta.url)), "../prisma");
     notice = dbUrlNotice(process.env);
     if (notice) console.warn(notice);
     url = resolveDbUrl(process.env, schemaDir);
     process.env.DATABASE_URL = url;
-    mkdirSync2(dirname3(dbFilePath(url)), { recursive: true });
+    mkdirSync2(dirname4(dbFilePath(url)), { recursive: true });
     base = new PrismaClient();
     prisma = base.$extends(webhookTap(base));
   }
@@ -9373,7 +9431,7 @@ var init_tui_dialog = __esm({
 // src/services/secret-box.ts
 import { chmodSync, existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync } from "node:fs";
 import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
-import { dirname as dirname4, join as join3 } from "node:path";
+import { dirname as dirname5, join as join3 } from "node:path";
 function isEncrypted(value) {
   return value.startsWith(ENC_PREFIX);
 }
@@ -9424,7 +9482,7 @@ function secretKey() {
     return key2;
   }
   const key = randomBytes(KEY_BYTES);
-  mkdirSync3(dirname4(path), { recursive: true });
+  mkdirSync3(dirname5(path), { recursive: true });
   writeFileSync(path, key.toString("base64url"), { mode: 384 });
   chmodSync(path, 384);
   cached = key;
@@ -9523,7 +9581,7 @@ import { spawn } from "node-pty";
 import { execFileSync } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { mkdirSync as mkdirSync4, statSync, writeFileSync as writeFileSync2 } from "node:fs";
-import { dirname as dirname5 } from "node:path";
+import { dirname as dirname6 } from "node:path";
 import { tmpdir } from "node:os";
 function tmux(...args) {
   try {
@@ -9605,7 +9663,7 @@ function createSession(projectId, cwd, opts = {}) {
   let promptArg = "";
   if (!opts.command && opts.prompt) {
     const promptFile = promptFilePath(id);
-    mkdirSync4(dirname5(promptFile), { recursive: true });
+    mkdirSync4(dirname6(promptFile), { recursive: true });
     writeFileSync2(promptFile, opts.prompt + rosterBlock);
     promptArg = `"$(cat ${sq(promptFile)})"`;
   }
@@ -9617,7 +9675,7 @@ function createSession(projectId, cwd, opts = {}) {
     let goalGate;
     if (agent === "codex" && opts.goal && opts.flow && opts.specId) {
       goalGate = goalGatePath(id);
-      mkdirSync4(dirname5(goalGate), { recursive: true });
+      mkdirSync4(dirname6(goalGate), { recursive: true });
       writeFileSync2(goalGate, codexGoalScript({
         flow: opts.flow,
         specId: opts.specId,
@@ -9633,7 +9691,7 @@ function createSession(projectId, cwd, opts = {}) {
       const json = renderAgentsJson(customDefs);
       if (json) {
         agentsFile = agentsFilePath(id);
-        mkdirSync4(dirname5(agentsFile), { recursive: true });
+        mkdirSync4(dirname6(agentsFile), { recursive: true });
         writeFileSync2(agentsFile, json);
       }
     }
@@ -9653,12 +9711,12 @@ function createSession(projectId, cwd, opts = {}) {
     for (const [k, v] of Object.entries(rootBypassEnv())) envPairs.push(`${k}=${sq(v)}`);
   }
   if (opts.phaseFile) {
-    mkdirSync4(dirname5(opts.phaseFile), { recursive: true });
+    mkdirSync4(dirname6(opts.phaseFile), { recursive: true });
     envPairs.push(`HANOMAN_PHASE_FILE=${sq(opts.phaseFile)}`);
   }
   for (const [k, v] of Object.entries(opts.env ?? {})) envPairs.push(`${k}=${sq(v)}`);
   const cmd = envPairs.length ? `${envPairs.join(" ")} ${argv}` : argv;
-  if (opts.decisionFile) mkdirSync4(dirname5(opts.decisionFile), { recursive: true });
+  if (opts.decisionFile) mkdirSync4(dirname6(opts.decisionFile), { recursive: true });
   tmux(
     "set-option",
     "-g",
@@ -11169,7 +11227,7 @@ var init_gateway = __esm({
             const message = sanitizeTelegramOutput(error.message, this.deps.exactSecrets).slice(0, 500);
             updateTelegramRuntimeStatus({ running: false, readiness: "error", lastError: message });
             if (error instanceof TelegramApiError && error.code === 409) return;
-            await new Promise((resolve15) => setTimeout(resolve15, 1e3));
+            await new Promise((resolve16) => setTimeout(resolve16, 1e3));
           }
         }
       }
@@ -17179,7 +17237,7 @@ var require_parseParams = __commonJS({
 var require_basename = __commonJS({
   "../node_modules/.pnpm/@fastify+busboy@3.2.0/node_modules/@fastify/busboy/lib/utils/basename.js"(exports, module) {
     "use strict";
-    module.exports = function basename3(path) {
+    module.exports = function basename4(path) {
       if (typeof path !== "string") {
         return "";
       }
@@ -17206,7 +17264,7 @@ var require_multipart = __commonJS({
     var Dicer = require_Dicer();
     var parseParams = require_parseParams();
     var decodeText = require_decodeText();
-    var basename3 = require_basename();
+    var basename4 = require_basename();
     var getLimit = require_getLimit();
     var RE_BOUNDARY = /^boundary$/i;
     var RE_FIELD = /^form-data$/i;
@@ -17323,7 +17381,7 @@ var require_multipart = __commonJS({
               } else if (RE_FILENAME.test(parsed[i][0])) {
                 filename = parsed[i][1];
                 if (!preservePath) {
-                  filename = basename3(filename);
+                  filename = basename4(filename);
                 }
               }
             }
@@ -18407,17 +18465,17 @@ var require_stream_wormhole = __commonJS({
   "../node_modules/.pnpm/stream-wormhole@1.1.0/node_modules/stream-wormhole/index.js"(exports, module) {
     "use strict";
     module.exports = (stream, throwError) => {
-      return new Promise((resolve15, reject2) => {
+      return new Promise((resolve16, reject2) => {
         if (typeof stream.resume !== "function") {
-          return resolve15();
+          return resolve16();
         }
         stream.unpipe && stream.unpipe();
         stream.resume();
         if (stream._readableState && stream._readableState.ended) {
-          return resolve15();
+          return resolve16();
         }
         if (!stream.readable || stream.destroyed) {
-          return resolve15();
+          return resolve16();
         }
         function cleanup() {
           stream.removeListener("end", onEnd);
@@ -18426,14 +18484,14 @@ var require_stream_wormhole = __commonJS({
         }
         function onEnd() {
           cleanup();
-          resolve15();
+          resolve16();
         }
         function onError(err) {
           cleanup();
           if (throwError) {
             reject2(err);
           } else {
-            resolve15();
+            resolve16();
           }
         }
         stream.on("end", onEnd);
@@ -18868,16 +18926,16 @@ var require_multipart2 = __commonJS({
           }
         };
         const parts = () => {
-          return new Promise((resolve15, reject2) => {
+          return new Promise((resolve16, reject2) => {
             handle((val) => {
               if (val instanceof Error) {
                 if (val.message === "Unexpected end of multipart data") {
-                  resolve15(null);
+                  resolve16(null);
                 } else {
                   reject2(val);
                 }
               } else {
-                resolve15(val);
+                resolve16(val);
               }
             });
           });
@@ -19143,7 +19201,7 @@ import fastifyStatic from "@fastify/static";
 import websocket from "@fastify/websocket";
 import cookie from "@fastify/cookie";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
-import { dirname as dirname13 } from "node:path";
+import { dirname as dirname14 } from "node:path";
 import { existsSync as existsSync14 } from "node:fs";
 
 // src/web-dir.ts
@@ -19207,7 +19265,7 @@ init_src();
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import { readFileSync as readFileSync5, writeFileSync as writeFileSync3, existsSync as existsSync4, rmSync as rmSync2, mkdirSync as mkdirSync5 } from "node:fs";
-import { resolve as resolve7, dirname as dirname6, sep } from "node:path";
+import { resolve as resolve8, dirname as dirname7, sep } from "node:path";
 var exec = promisify(execFile);
 async function listRepoDocs(repoDir) {
   try {
@@ -19223,7 +19281,7 @@ async function listRepoDocs(repoDir) {
 }
 function docsDirOf(repoDir) {
   try {
-    const raw = readFileSync5(resolve7(repoDir, "hanoman.config.json"), "utf8");
+    const raw = readFileSync5(resolve8(repoDir, "hanoman.config.json"), "utf8");
     return zHanomanConfig.parse(JSON.parse(raw)).docsDir;
   } catch {
     return zHanomanConfig.parse({}).docsDir;
@@ -19231,7 +19289,7 @@ function docsDirOf(repoDir) {
 }
 function resolveIndex(repoDir, docsDir) {
   const rel = `${docsDir}/README.md`;
-  return existsSync4(resolve7(repoDir, rel)) ? rel : "";
+  return existsSync4(resolve8(repoDir, rel)) ? rel : "";
 }
 var catOf = (rel) => rel.includes("/") ? rel.slice(0, rel.lastIndexOf("/")) : ".";
 var nameOf = (rel) => rel.includes("/") ? rel.slice(rel.lastIndexOf("/") + 1) : rel;
@@ -19242,7 +19300,7 @@ async function scanRepoDocs(repoDir) {
   const index = resolveIndex(repoDir, docsDir);
   const read = (rel) => {
     try {
-      return readFileSync5(resolve7(repoDir, rel), "utf8");
+      return readFileSync5(resolve8(repoDir, rel), "utf8");
     } catch {
       return null;
     }
@@ -19265,7 +19323,7 @@ async function scanRepoDocs(repoDir) {
 function docAbsPath(repoDir, rel) {
   if (!rel.endsWith(".md")) throw new Error("hanya file .md yang diizinkan");
   if (rel.split("/").includes(".git")) throw new Error("tidak boleh menyentuh .git");
-  const abs = resolve7(repoDir, rel);
+  const abs = resolve8(repoDir, rel);
   if (abs !== repoDir && !abs.startsWith(repoDir + sep)) throw new Error("path keluar dari repo");
   return abs;
 }
@@ -19278,7 +19336,7 @@ function readDocFile(repoDir, rel) {
 }
 function writeDocFile(repoDir, rel, content) {
   const abs = docAbsPath(repoDir, rel);
-  mkdirSync5(dirname6(abs), { recursive: true });
+  mkdirSync5(dirname7(abs), { recursive: true });
   writeFileSync3(abs, content);
 }
 function deleteDocFile(repoDir, rel) {
@@ -19768,7 +19826,7 @@ import { execFile as execFile4 } from "node:child_process";
 import { promisify as promisify4 } from "node:util";
 import { readFile as readFile2, mkdtemp, copyFile, rm } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join5, resolve as resolve8 } from "node:path";
+import { join as join5, resolve as resolve9 } from "node:path";
 var exec4 = promisify4(execFile4);
 var GIT3 = { maxBuffer: 1 << 24 };
 var MAX = 256 * 1024;
@@ -19777,7 +19835,7 @@ async function withTempIndex(wt, fn) {
   const idx = (await exec4("git", ["rev-parse", "--git-path", "index"], { cwd: wt, ...GIT3 })).stdout.trim();
   const dir2 = await mkdtemp(join5(tmpdir2(), "hanoman-idx-"));
   const tmp = join5(dir2, "index");
-  await copyFile(resolve8(wt, idx), tmp);
+  await copyFile(resolve9(wt, idx), tmp);
   const env = { ...process.env, GIT_INDEX_FILE: tmp };
   try {
     await exec4("git", ["add", "-A", "-N"], { cwd: wt, env, ...GIT3 });
@@ -22666,7 +22724,7 @@ function renderDocPdf(text, name2, meta) {
   });
   const chunks = [];
   doc.on("data", (c) => chunks.push(c));
-  const done = new Promise((resolve15) => doc.on("end", () => resolve15(Buffer.concat(chunks))));
+  const done = new Promise((resolve16) => doc.on("end", () => resolve16(Buffer.concat(chunks))));
   doc.font("Helvetica-Bold").fontSize(8).fillColor(BRASS).text(toWinAnsi(meta.eyebrow.toUpperCase()), { characterSpacing: 0.8 });
   doc.moveDown(0.25);
   doc.font("Helvetica-Bold").fontSize(17).fillColor(STRONG).text(toWinAnsi(name2.split("/").pop() ?? name2));
@@ -23283,7 +23341,7 @@ async function docs_default(app2) {
 
 // src/routes/ide.ts
 init_src2();
-import { basename } from "node:path";
+import { basename as basename2 } from "node:path";
 import { spawn as spawn2 } from "node:child_process";
 
 // src/services/git-remotes.ts
@@ -23351,14 +23409,14 @@ import { execFile as execFile6 } from "node:child_process";
 import { promisify as promisify6 } from "node:util";
 import { readFile as readFile3, writeFile, mkdir } from "node:fs/promises";
 import { existsSync as existsSync7 } from "node:fs";
-import { resolve as resolve9, sep as sep2, dirname as dirname8 } from "node:path";
+import { resolve as resolve10, sep as sep2, dirname as dirname9 } from "node:path";
 var exec6 = promisify6(execFile6);
 var GIT5 = { maxBuffer: 1 << 24 };
 var MAX2 = 256 * 1024;
 var splitZ2 = (s2) => s2.split("\0").filter(Boolean);
 function repoAbsPath(repoDir, rel) {
   if (rel.split(/[\\/]/).includes(".git")) throw new Error("tidak boleh menyentuh .git");
-  const abs = resolve9(repoDir, rel);
+  const abs = resolve10(repoDir, rel);
   if (abs !== repoDir && !abs.startsWith(repoDir + sep2)) throw new Error("path keluar dari repo");
   return abs;
 }
@@ -23597,7 +23655,7 @@ async function commitFileDiff(repoDir, sha, rel) {
 async function writeRepoFile(repoDir, rel, content) {
   if (!repoDir) throw new Error("project tidak punya repoDir");
   const abs = repoAbsPath(repoDir, rel);
-  await mkdir(dirname8(abs), { recursive: true });
+  await mkdir(dirname9(abs), { recursive: true });
   await writeFile(abs, content);
 }
 function validateGitOp(op) {
@@ -24093,7 +24151,7 @@ async function ide_default(app2) {
     const fmt = q.format === "tar" ? "tar" : "zip";
     const child = spawn2("git", ["archive", `--format=${fmt}`, "--end-of-options", ref], { cwd: repoDir });
     reply.header("content-type", fmt === "zip" ? "application/zip" : "application/x-tar");
-    reply.header("content-disposition", `attachment; filename="${basename(repoDir)}-${ref.replace(/[^\w.-]/g, "_")}.${fmt}"`);
+    reply.header("content-disposition", `attachment; filename="${basename2(repoDir)}-${ref.replace(/[^\w.-]/g, "_")}.${fmt}"`);
     return reply.send(child.stdout);
   });
   app2.get("/projects/:id/commit/:sha", async (req, reply) => {
@@ -24245,22 +24303,22 @@ async function finishGraphOp(reply, id, repoDir, r, verb) {
     CODE_STYLE_CLAUSE,
     `${verb} via git graph project ${id}.`
   ].join("\n\n");
-  const s2 = createSession(id, r.worktree, { id: basename(r.worktree), model, effort, agent, prompt });
+  const s2 = createSession(id, r.worktree, { id: basename2(r.worktree), model, effort, agent, prompt });
   return { status: "conflict", sessionId: s2.id };
 }
 
 // src/routes/fs.ts
 import { readdir } from "node:fs/promises";
 import { homedir as homedir4 } from "node:os";
-import { resolve as resolve10, dirname as dirname9, join as join6 } from "node:path";
+import { resolve as resolve11, dirname as dirname10, join as join6 } from "node:path";
 async function fs_default(app2) {
   app2.get("/fs/browse", async (req, reply) => {
     const q = req.query.path;
-    const dir2 = q && q.trim() ? resolve10(q.trim()) : homedir4();
+    const dir2 = q && q.trim() ? resolve11(q.trim()) : homedir4();
     try {
       const ents = await readdir(dir2, { withFileTypes: true });
       const entries = ents.filter((e) => e.isDirectory() && !e.name.startsWith(".")).map((e) => ({ name: e.name, path: join6(dir2, e.name) })).sort((a, b) => a.name.localeCompare(b.name));
-      const parent = dirname9(dir2);
+      const parent = dirname10(dir2);
       return { path: dir2, parent: parent === dir2 ? null : parent, entries };
     } catch {
       return reply.code(400).send({ error: `tak bisa membaca folder "${dir2}"` });
@@ -24418,11 +24476,11 @@ function installCommand(m, agent, shell = shellBin()) {
 }
 
 // src/services/session-worktree.ts
-import { resolve as resolve11, sep as sep3 } from "node:path";
+import { resolve as resolve12, sep as sep3 } from "node:path";
 function ownsWorktree(repoDir, cwd) {
-  const base2 = resolve11(repoDir);
-  const dir2 = resolve11(cwd);
-  const container = resolve11(base2, ".worktrees");
+  const base2 = resolve12(repoDir);
+  const dir2 = resolve12(cwd);
+  const container = resolve12(base2, ".worktrees");
   return dir2 !== base2 && dir2 !== container && dir2.startsWith(container + sep3);
 }
 
@@ -24884,7 +24942,7 @@ init_config2();
 import { spawn as spawn3 } from "node:child_process";
 import { mkdtempSync, rmSync as rmSync4, writeFileSync as writeFileSync4 } from "node:fs";
 import { tmpdir as tmpdir3 } from "node:os";
-import { dirname as dirname10, join as join7 } from "node:path";
+import { dirname as dirname11, join as join7 } from "node:path";
 var sshBin = () => effectiveStr("HANOMAN_SSH_BIN") ?? "ssh";
 function consoleArgv(t) {
   return [
@@ -24934,14 +24992,14 @@ function sshExec(t, remoteCmd, opts = {}) {
     SSH_ASKPASS_REQUIRE: "force",
     HANOMAN_SSH_PASSWORD: opts.password
   } : process.env;
-  return new Promise((resolve15) => {
+  return new Promise((resolve16) => {
     const p = spawn3(sshBin(), args, { stdio: ["pipe", "pipe", "pipe"], env });
     let out3 = "";
     const timer7 = setTimeout(() => p.kill("SIGKILL"), opts.timeoutMs ?? 6e4);
     const done = (r) => {
       clearTimeout(timer7);
-      if (askpass) rmSync4(dirname10(askpass), { recursive: true, force: true });
-      resolve15(r);
+      if (askpass) rmSync4(dirname11(askpass), { recursive: true, force: true });
+      resolve16(r);
     };
     p.stdout.on("data", (d) => {
       out3 += d;
@@ -24965,12 +25023,12 @@ import { join as join9 } from "node:path";
 
 // src/runner/deps.ts
 import { existsSync as existsSync9 } from "node:fs";
-import { dirname as dirname11, join as join8 } from "node:path";
+import { dirname as dirname12, join as join8 } from "node:path";
 function repoRootFrom(startDir) {
   let dir2 = startDir;
   for (let i = 0; i < 8; i++) {
     if (existsSync9(join8(dir2, "pnpm-workspace.yaml"))) return dir2;
-    const parent = dirname11(dir2);
+    const parent = dirname12(dir2);
     if (parent === dir2) break;
     dir2 = parent;
   }
@@ -25723,7 +25781,7 @@ init_src();
 init_src();
 init_config2();
 import { readFileSync as readFileSync12 } from "node:fs";
-import { resolve as resolve12, dirname as dirname12 } from "node:path";
+import { resolve as resolve13, dirname as dirname13 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 var UPDATE_COMMAND = "npm i -g hanoman@latest";
 function composeUpdate(x) {
@@ -25748,8 +25806,8 @@ var lastFetchAt = 0;
 var lastLatest = null;
 var lastStatus = "unavailable";
 function runningVersion() {
-  const here = dirname12(fileURLToPath3(import.meta.url));
-  for (const p of [resolve12(here, "build-info.json"), resolve12(here, "../package.json")]) {
+  const here = dirname13(fileURLToPath3(import.meta.url));
+  for (const p of [resolve13(here, "build-info.json"), resolve13(here, "../package.json")]) {
     try {
       const v = JSON.parse(readFileSync12(p, "utf8")).version;
       if (typeof v === "string" && v) return v;
@@ -26099,7 +26157,7 @@ init_conflicts();
 init_config2();
 import { randomUUID as randomUUID3 } from "node:crypto";
 import { mkdir as mkdir2, writeFile as writeFile2, readFile as readFile4, unlink } from "node:fs/promises";
-import { join as join13, resolve as resolve13 } from "node:path";
+import { join as join13, resolve as resolve14 } from "node:path";
 var EXT = {
   "image/png": ".png",
   "image/jpeg": ".jpg",
@@ -26109,7 +26167,7 @@ function extFor(mimeType) {
   return EXT[mimeType] ?? ".bin";
 }
 function uploadDir() {
-  return resolve13(effectiveStr("HANOMAN_UPLOAD_DIR") ?? join13(process.cwd(), "data", "uploads"));
+  return resolve14(effectiveStr("HANOMAN_UPLOAD_DIR") ?? join13(process.cwd(), "data", "uploads"));
 }
 async function saveUpload(buf, mimeType) {
   const dir2 = uploadDir();
@@ -26274,10 +26332,10 @@ import { randomUUID as randomUUID5 } from "node:crypto";
 init_config2();
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { mkdir as mkdir3, writeFile as writeFile3, readFile as readFile5, unlink as unlink2 } from "node:fs/promises";
-import { join as join14, resolve as resolve14, basename as basename2 } from "node:path";
+import { join as join14, resolve as resolve15, basename as basename3 } from "node:path";
 var MAX_TRANSCRIPT_BYTES = 1024 * 1024;
 function transcriptDir() {
-  return resolve14(effectiveStr("HANOMAN_TRANSCRIPT_DIR") ?? join14(process.cwd(), "data", "transcripts"));
+  return resolve15(effectiveStr("HANOMAN_TRANSCRIPT_DIR") ?? join14(process.cwd(), "data", "transcripts"));
 }
 function clamp(text) {
   const buf = Buffer.from(text, "utf8");
@@ -26301,14 +26359,14 @@ async function saveTranscript(text) {
 async function readTranscript(key) {
   if (!key) return null;
   try {
-    return await readFile5(join14(transcriptDir(), basename2(key)), "utf8");
+    return await readFile5(join14(transcriptDir(), basename3(key)), "utf8");
   } catch {
     return null;
   }
 }
 async function deleteTranscript(key) {
   if (!key) return;
-  await unlink2(join14(transcriptDir(), basename2(key))).catch(() => {
+  await unlink2(join14(transcriptDir(), basename3(key))).catch(() => {
   });
 }
 
@@ -27696,7 +27754,7 @@ function leadFailureReason(agent, timeoutMs, err, stdout, stderr) {
 function think(prompt, o) {
   const bin = binFor(o.agent);
   const args = leadArgv({ agent: o.agent, model: o.model, effort: o.effort, prompt });
-  return new Promise((resolve15, reject2) => {
+  return new Promise((resolve16, reject2) => {
     const child = execFile9(bin, args, {
       cwd: o.cwd,
       timeout: o.timeoutMs,
@@ -27709,7 +27767,7 @@ function think(prompt, o) {
         reject2(new Error(leadFailureReason(o.agent, o.timeoutMs, err, stdout, stderr)));
         return;
       }
-      resolve15(stdout);
+      resolve16(stdout);
     });
     child.stdin?.end();
   });
@@ -27746,9 +27804,9 @@ function acquire(cap, waitMs) {
     return Promise.resolve();
   }
   const startedAt = Date.now();
-  return new Promise((resolve15, reject2) => {
+  return new Promise((resolve16, reject2) => {
     const w = {
-      grant: resolve15,
+      grant: resolve16,
       deny: reject2,
       timer: setTimeout(() => {
         const i = queue.indexOf(w);
@@ -29812,7 +29870,7 @@ function issuesFromRest(raw) {
 }
 var GH_FIELDS = "number,title,body,author,labels,url,state,createdAt,updatedAt";
 var API2 = "https://api.github.com";
-var defaultRunGh = (args, env) => new Promise((resolve15, reject2) => {
+var defaultRunGh = (args, env) => new Promise((resolve16, reject2) => {
   execFile11(
     args[0],
     args.slice(1),
@@ -29820,7 +29878,7 @@ var defaultRunGh = (args, env) => new Promise((resolve15, reject2) => {
     (err, stdout, stderr) => {
       const e = err;
       if (e && (e.code === "ENOENT" || e.code === "EACCES")) return reject2(e);
-      resolve15({ code: err ? Number(err.code ?? 1) : 0, stdout, stderr });
+      resolve16({ code: err ? Number(err.code ?? 1) : 0, stdout, stderr });
     }
   );
 });
@@ -31359,7 +31417,7 @@ var PUBLIC = /* @__PURE__ */ new Set([
   "GET /api/agent-integration.md"
 ]);
 function buildApp({ requireAuth = true, agentDocFile } = {}) {
-  const docFile = agentDocFile !== void 0 ? agentDocFile : pickGuideFile(dirname13(fileURLToPath4(import.meta.url)), process.env, existsSync14);
+  const docFile = agentDocFile !== void 0 ? agentDocFile : pickGuideFile(dirname14(fileURLToPath4(import.meta.url)), process.env, existsSync14);
   const app2 = Fastify({ logger: false, trustProxy: true });
   app2.addContentTypeParser("application/json", { parseAs: "string" }, (_req, body, done) => {
     if (!body) return done(null, void 0);
@@ -31450,7 +31508,7 @@ function buildApp({ requireAuth = true, agentDocFile } = {}) {
     await api.register(client_accounts_default);
   }, { prefix: "/api" });
   if (process.env.NODE_ENV === "production") {
-    const dist = pickWebDir(dirname13(fileURLToPath4(import.meta.url)), process.env, existsSync14);
+    const dist = pickWebDir(dirname14(fileURLToPath4(import.meta.url)), process.env, existsSync14);
     if (dist) {
       app2.register(fastifyStatic, { root: dist });
       app2.setNotFoundHandler((req, reply) => req.url.startsWith("/api") ? reply.code(404).send({ error: "not found" }) : reply.sendFile("index.html"));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hanoman",
-  "version": "0.1.27",
+  "version": "0.1.28",
   "description": "Orchestrator + dashboard workflow docs-driven untuk sesi Claude Code / Codex",
   "type": "module",
   "repository": {