hanoman 0.1.3 → 0.1.4

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.3",
-  "sha": "c5266ce",
-  "builtAt": "2026-07-30T08:59:12.271Z"
+  "version": "0.1.4",
+  "sha": "ac19a3e",
+  "builtAt": "2026-07-30T09:10:14.186Z"
 }

package/dist/cli.js

@@ -6206,7 +6206,15 @@ function packageJsonFor(version2, deps) {
     // seketika dengan "@prisma/client did not initialize yet" (terukur di `npm i -g` nyata).
     // Non-fatal (`|| true`): bila npm melewati script (mis. --ignore-scripts), `hanoman start`
     // mendeteksi & menggenerate sendiri (ensurePrismaClient).
-    scripts: { postinstall: "prisma generate --schema prisma/schema.prisma || true" },
+    scripts: {
+      postinstall: "prisma generate --schema prisma/schema.prisma || true",
+      // SPEC-403 · gerbang terakhir sebelum byte meninggalkan mesin. `hanoman@0.1.3` terbit tanpa
+      // `prisma` karena `dist-npm/package.json` DIMUTASI sesudah dirakit — `npm i -g --prefix <dir>
+      // <tarball>` dengan cwd di `dist-npm` menulis ulang berkas itu (terukur, bisa diulang), dan
+      // smoke test itulah yang merusaknya. npm menjalankan `prepublishOnly` tepat sebelum publish,
+      // jadi inilah satu-satunya lapis yang melihat isi berkas SEBENARNYA yang akan dikirim.
+      prepublishOnly: "node dist/cli.js __verify"
+    },
     engines: { node: ">=20" },
     files: ["bin", "dist", "web", "prisma", "README.md", "LICENSE"],
     dependencies: deps,
@@ -6215,6 +6223,12 @@ function packageJsonFor(version2, deps) {
     license: "MIT"
   };
 }
+function verifyPackedDeps(pkg) {
+  const deps = pkg?.dependencies ?? {};
+  return RUNTIME_DEPS.filter((d) => !deps[d]).map(
+    (d) => `dependency wajib hilang dari package.json paket: ${d}`
+  );
+}
 function copyPlan(repo) {
   return [
     { from: join9(repo, "server/dist/server.js"), to: "dist/server.js" },
@@ -6342,6 +6356,39 @@ var init_pack2 = __esm({
   }
 });
 
+// src/commands/verify-packed.ts
+var verify_packed_exports = {};
+__export(verify_packed_exports, {
+  default: () => verifyPacked
+});
+import { readFileSync as readFileSync7 } from "node:fs";
+import { join as join11 } from "node:path";
+function verifyPacked(_argv, ctx) {
+  const path = join11(process.cwd(), "package.json");
+  let pkg;
+  try {
+    pkg = JSON.parse(readFileSync7(path, "utf8"));
+  } catch {
+    ctx.stderr(`verify: tak bisa membaca ${path}
+`);
+    return 1;
+  }
+  const keluhan = verifyPackedDeps(pkg);
+  if (keluhan.length === 0) return 0;
+  for (const k of keluhan) ctx.stderr(`verify: ${k}
+`);
+  ctx.stderr(
+    "\nPublish DIBATALKAN. `dist-npm/package.json` tercemar sesudah dirakit \u2014 jangan sunting\nberkas itu, rakit ulang: `pnpm release`. Penyebab yang sudah terukur: menjalankan\n`npm install`/`npm i -g` dengan cwd di dalam `dist-npm/` menulis ulang package.json-nya.\n"
+  );
+  return 1;
+}
+var init_verify_packed = __esm({
+  "src/commands/verify-packed.ts"() {
+    "use strict";
+    init_pack();
+  }
+});
+
 // src/router.ts
 import { createRequire as createRequire2 } from "node:module";
 function currentVersion() {
@@ -6362,6 +6409,7 @@ function route(argv) {
     return { cmd: `docs:${sub}`, args: rest };
   }
   if (group === "__pack") return { cmd: "__pack", args: argv.slice(1) };
+  if (group === "__verify") return { cmd: "__verify", args: argv.slice(1) };
   return { cmd: "unknown", args: argv };
 }
 async function run(argv, ctx) {
@@ -6382,6 +6430,7 @@ async function run(argv, ctx) {
   if (cmd === "docs:index") return (await Promise.resolve().then(() => (init_docs_index(), docs_index_exports))).default(args, ctx);
   if (cmd === "docs:link") return (await Promise.resolve().then(() => (init_docs_link(), docs_link_exports))).default(args, ctx);
   if (cmd === "__pack") return (await Promise.resolve().then(() => (init_pack2(), pack_exports))).default(args, ctx);
+  if (cmd === "__verify") return (await Promise.resolve().then(() => (init_verify_packed(), verify_packed_exports))).default(args, ctx);
   ctx.stderr(`unknown command: ${argv.join(" ")}
 
 ${HELP}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hanoman",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Orchestrator + dashboard workflow docs-driven untuk sesi Claude Code / Codex",
   "type": "module",
   "repository": {
@@ -11,7 +11,8 @@
     "hanoman": "bin/hanoman.mjs"
   },
   "scripts": {
-    "postinstall": "prisma generate --schema prisma/schema.prisma || true"
+    "postinstall": "prisma generate --schema prisma/schema.prisma || true",
+    "prepublishOnly": "node dist/cli.js __verify"
   },
   "engines": {
     "node": ">=20"
@@ -25,17 +26,15 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@fastify/cookie": "^9.4.0",
+    "fastify": "^4.28.0",
     "@fastify/static": "^7.0.0",
     "@fastify/websocket": "^10.0.1",
-    "@prisma/client": "^6.19.3",
-    "fastify": "^4.28.0",
+    "@fastify/cookie": "^9.4.0",
+    "@prisma/client": "^6.19.0",
     "node-pty": "^1.1.0",
     "pdfkit": "^0.19.1",
+    "prisma": "^6.19.0",
     "pg": "^8.13.1"
   },
-  "license": "MIT",
-  "devDependencies": {
-    "prisma": "^6.19.3"
-  }
+  "license": "MIT"
 }