hanoman 0.1.37 → 0.1.39

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.37",
-  "sha": "c2be030",
-  "builtAt": "2026-08-14T16:26:48.760Z"
+  "version": "0.1.39",
+  "sha": "b5ac8a8",
+  "builtAt": "2026-08-15T01:27:37.357Z"
 }

package/dist/cli.js

@@ -5650,6 +5650,7 @@ var init_api = __esm({
       // SPEC-233 · drop commit isolasi
       fsBrowse: (path) => `${API}/fs/browse${path ? `?path=${encodeURIComponent(path)}` : ""}`,
       terminalSessions: `${API}/terminal/sessions`,
+      terminalWorkspace: `${API}/terminal/workspace`,
       // SPEC-742 · ADR-0116 · pembersihan worktree yang masih tertunda sesudah sesi ditutup. Di bawah
       // prefix /terminal supaya ikut capability `sessions` yang sudah ada (cermin sessionHistory).
       terminalCleanups: `${API}/terminal/cleanups`,
@@ -7121,6 +7122,70 @@ var init_changelog = __esm({
   }
 });
 
+// ../shared/src/terminal-workspace.ts
+var zSessionId, zTerminalGroup, zTerminalWorkspaceV1, zTerminalWorkspaceWrite, zTerminalWorkspaceSnapshot;
+var init_terminal_workspace = __esm({
+  "../shared/src/terminal-workspace.ts"() {
+    "use strict";
+    init_zod();
+    zSessionId = external_exports.string().trim().min(1).max(256);
+    zTerminalGroup = external_exports.object({
+      id: external_exports.string().trim().min(1).max(128),
+      name: external_exports.string().trim().min(1).max(80),
+      layout: external_exports.object({
+        rows: external_exports.number().int().min(1).max(12),
+        cols: external_exports.number().int().min(1).max(12),
+        cells: external_exports.array(zSessionId.nullable()).max(144)
+      }).strict().superRefine((layout, ctx) => {
+        if (layout.cells.length !== layout.rows * layout.cols) {
+          ctx.addIssue({
+            code: external_exports.ZodIssueCode.custom,
+            path: ["cells"],
+            message: "cells must match rows \xD7 cols"
+          });
+        }
+      })
+    }).strict();
+    zTerminalWorkspaceV1 = external_exports.object({
+      version: external_exports.literal(1),
+      groups: external_exports.array(zTerminalGroup).min(1).max(24)
+    }).strict().superRefine((workspace, ctx) => {
+      const groupIds = /* @__PURE__ */ new Set();
+      const sessionIds = /* @__PURE__ */ new Set();
+      workspace.groups.forEach((group, groupIndex) => {
+        if (groupIds.has(group.id)) {
+          ctx.addIssue({
+            code: external_exports.ZodIssueCode.custom,
+            path: ["groups", groupIndex, "id"],
+            message: "group id must be unique"
+          });
+        }
+        groupIds.add(group.id);
+        group.layout.cells.forEach((sessionId, cellIndex) => {
+          if (sessionId === null) return;
+          if (sessionIds.has(sessionId)) {
+            ctx.addIssue({
+              code: external_exports.ZodIssueCode.custom,
+              path: ["groups", groupIndex, "layout", "cells", cellIndex],
+              message: "sessionId must be unique across the workspace"
+            });
+          }
+          sessionIds.add(sessionId);
+        });
+      });
+    });
+    zTerminalWorkspaceWrite = external_exports.object({
+      baseRevision: external_exports.number().int().min(0),
+      workspace: zTerminalWorkspaceV1
+    }).strict();
+    zTerminalWorkspaceSnapshot = external_exports.object({
+      workspace: zTerminalWorkspaceV1.nullable(),
+      revision: external_exports.number().int().min(0),
+      updatedAt: external_exports.string().datetime().nullable()
+    }).strict();
+  }
+});
+
 // ../shared/src/index.ts
 var init_src = __esm({
   "../shared/src/index.ts"() {
@@ -7152,6 +7217,7 @@ var init_src = __esm({
     init_auto_merge();
     init_changelog();
     init_cron_expr();
+    init_terminal_workspace();
   }
 });
 

package/dist/server.js

@@ -6092,6 +6092,7 @@ var init_api = __esm({
       // SPEC-233 · drop commit isolasi
       fsBrowse: (path2) => `${API}/fs/browse${path2 ? `?path=${encodeURIComponent(path2)}` : ""}`,
       terminalSessions: `${API}/terminal/sessions`,
+      terminalWorkspace: `${API}/terminal/workspace`,
       // SPEC-742 · ADR-0116 · pembersihan worktree yang masih tertunda sesudah sesi ditutup. Di bawah
       // prefix /terminal supaya ikut capability `sessions` yang sudah ada (cermin sessionHistory).
       terminalCleanups: `${API}/terminal/cleanups`,
@@ -7701,6 +7702,70 @@ var init_changelog = __esm({
   }
 });
 
+// ../shared/src/terminal-workspace.ts
+var zSessionId, zTerminalGroup, zTerminalWorkspaceV1, zTerminalWorkspaceWrite, zTerminalWorkspaceSnapshot;
+var init_terminal_workspace = __esm({
+  "../shared/src/terminal-workspace.ts"() {
+    "use strict";
+    init_zod();
+    zSessionId = external_exports.string().trim().min(1).max(256);
+    zTerminalGroup = external_exports.object({
+      id: external_exports.string().trim().min(1).max(128),
+      name: external_exports.string().trim().min(1).max(80),
+      layout: external_exports.object({
+        rows: external_exports.number().int().min(1).max(12),
+        cols: external_exports.number().int().min(1).max(12),
+        cells: external_exports.array(zSessionId.nullable()).max(144)
+      }).strict().superRefine((layout, ctx) => {
+        if (layout.cells.length !== layout.rows * layout.cols) {
+          ctx.addIssue({
+            code: external_exports.ZodIssueCode.custom,
+            path: ["cells"],
+            message: "cells must match rows \xD7 cols"
+          });
+        }
+      })
+    }).strict();
+    zTerminalWorkspaceV1 = external_exports.object({
+      version: external_exports.literal(1),
+      groups: external_exports.array(zTerminalGroup).min(1).max(24)
+    }).strict().superRefine((workspace, ctx) => {
+      const groupIds = /* @__PURE__ */ new Set();
+      const sessionIds = /* @__PURE__ */ new Set();
+      workspace.groups.forEach((group2, groupIndex) => {
+        if (groupIds.has(group2.id)) {
+          ctx.addIssue({
+            code: external_exports.ZodIssueCode.custom,
+            path: ["groups", groupIndex, "id"],
+            message: "group id must be unique"
+          });
+        }
+        groupIds.add(group2.id);
+        group2.layout.cells.forEach((sessionId2, cellIndex) => {
+          if (sessionId2 === null) return;
+          if (sessionIds.has(sessionId2)) {
+            ctx.addIssue({
+              code: external_exports.ZodIssueCode.custom,
+              path: ["groups", groupIndex, "layout", "cells", cellIndex],
+              message: "sessionId must be unique across the workspace"
+            });
+          }
+          sessionIds.add(sessionId2);
+        });
+      });
+    });
+    zTerminalWorkspaceWrite = external_exports.object({
+      baseRevision: external_exports.number().int().min(0),
+      workspace: zTerminalWorkspaceV1
+    }).strict();
+    zTerminalWorkspaceSnapshot = external_exports.object({
+      workspace: zTerminalWorkspaceV1.nullable(),
+      revision: external_exports.number().int().min(0),
+      updatedAt: external_exports.string().datetime().nullable()
+    }).strict();
+  }
+});
+
 // ../shared/src/index.ts
 var init_src = __esm({
   "../shared/src/index.ts"() {
@@ -7732,6 +7797,7 @@ var init_src = __esm({
     init_auto_merge();
     init_changelog();
     init_cron_expr();
+    init_terminal_workspace();
   }
 });
 
@@ -30237,6 +30303,7 @@ async function recordSessionResult(input) {
 // src/routes/terminal.ts
 init_stage_machine();
 init_pty();
+var TERMINAL_WS_MESSAGES_PER_MINUTE = 6e3;
 async function advanceStage(specId, repoDir, sessionId2, flow, worktree) {
   const next = stageForRun(readPhases(phaseFilePath(repoDir, sessionId2), flow), worktree, specId);
   if (!next) return;
@@ -30580,7 +30647,7 @@ async function terminal_default(app2, opts) {
       socket2.close(1008, "connection limit");
       return;
     }
-    const guard = new WsMessageGuard();
+    const guard = new WsMessageGuard({ perWindow: TERMINAL_WS_MESSAGES_PER_MINUTE });
     const client = { send: (m) => socket2.send(m), close: () => socket2.close() };
     attach(id, client);
     socket2.on("message", async (raw2) => {
@@ -30617,6 +30684,93 @@ async function terminal_default(app2, opts) {
   });
 }
 
+// src/routes/terminal-workspace.ts
+init_src();
+
+// src/services/terminal-workspace.ts
+init_src();
+init_db();
+import "@prisma/client";
+var InvalidStoredTerminalWorkspaceError = class extends Error {
+  constructor() {
+    super("stored terminal workspace is invalid");
+  }
+};
+async function readTerminalWorkspace(userId) {
+  const user = await prisma.user.findUniqueOrThrow({
+    where: { id: userId },
+    select: {
+      terminalWorkspace: true,
+      terminalWorkspaceRevision: true,
+      terminalWorkspaceUpdatedAt: true
+    }
+  });
+  if (user.terminalWorkspace === null) {
+    return {
+      workspace: null,
+      revision: user.terminalWorkspaceRevision,
+      updatedAt: user.terminalWorkspaceUpdatedAt?.toISOString() ?? null
+    };
+  }
+  const parsed = zTerminalWorkspaceV1.safeParse(user.terminalWorkspace);
+  if (!parsed.success) throw new InvalidStoredTerminalWorkspaceError();
+  return {
+    workspace: parsed.data,
+    revision: user.terminalWorkspaceRevision,
+    updatedAt: user.terminalWorkspaceUpdatedAt?.toISOString() ?? null
+  };
+}
+async function writeTerminalWorkspace(userId, input) {
+  await readTerminalWorkspace(userId);
+  const updatedAt = /* @__PURE__ */ new Date();
+  const changed = await prisma.user.updateMany({
+    where: { id: userId, terminalWorkspaceRevision: input.baseRevision },
+    data: {
+      terminalWorkspace: input.workspace,
+      terminalWorkspaceRevision: { increment: 1 },
+      terminalWorkspaceUpdatedAt: updatedAt
+    }
+  });
+  if (changed.count === 1) {
+    return {
+      ok: true,
+      current: {
+        workspace: input.workspace,
+        revision: input.baseRevision + 1,
+        updatedAt: updatedAt.toISOString()
+      }
+    };
+  }
+  return { ok: false, current: await readTerminalWorkspace(userId) };
+}
+
+// src/routes/terminal-workspace.ts
+var storedInvalid = (reply) => reply.code(422).send({ error: "stored terminal workspace is invalid" });
+async function terminalWorkspaceRoutes(app2) {
+  app2.get("/terminal/workspace", async (request, reply) => {
+    try {
+      return await readTerminalWorkspace(request.user.id);
+    } catch (error) {
+      if (error instanceof InvalidStoredTerminalWorkspaceError) return storedInvalid(reply);
+      throw error;
+    }
+  });
+  app2.put("/terminal/workspace", async (request, reply) => {
+    const parsed = zTerminalWorkspaceWrite.safeParse(request.body);
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    try {
+      const result = await writeTerminalWorkspace(request.user.id, parsed.data);
+      if (!result.ok) {
+        return reply.code(409).send({ code: "revision-conflict", current: result.current });
+      }
+      return result.current;
+    } catch (error) {
+      if (error instanceof InvalidStoredTerminalWorkspaceError) return storedInvalid(reply);
+      throw error;
+    }
+  });
+}
+
 // src/routes/vps.ts
 init_db();
 init_src();
@@ -44585,6 +44739,7 @@ function capabilityForRoute(method, path2) {
   if (top === "vps") return rw("vps");
   if (top === "prds") return rw("docs");
   if (top === "terminal") {
+    if (seg[1] === "workspace") return "COOKIE_ONLY";
     if (seg[seg.length - 1] === "ws") return "sessions:write";
     return rw("sessions");
   }
@@ -44851,6 +45006,7 @@ function buildApp({ requireAuth = true, agentDocFile, env = process.env } = {})
     await api.register(fs_default);
     const wsOptions = { allowedOrigins: wsControlOrigins(env) };
     await api.register(terminal_default, wsOptions);
+    await api.register(terminalWorkspaceRoutes);
     await api.register(vps_default);
     await api.register(limits);
     await api.register(update);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hanoman",
-  "version": "0.1.37",
+  "version": "0.1.39",
   "description": "Orchestrator + dashboard workflow docs-driven untuk sesi Claude Code / Codex",
   "type": "module",
   "repository": {

package/prisma/migrations/20260815000000_terminal_workspace_user/migration.sql

@@ -0,0 +1,4 @@
+-- SPEC-786 · workspace Terminal kanonik per akun admin, LOCAL-only.
+ALTER TABLE "User" ADD COLUMN "terminalWorkspace" JSONB;
+ALTER TABLE "User" ADD COLUMN "terminalWorkspaceRevision" INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE "User" ADD COLUMN "terminalWorkspaceUpdatedAt" DATETIME;

package/prisma/schema.prisma

@@ -207,6 +207,11 @@ model User {
   // cookie yang sudah terbit tetap hidup sampai 7 hari (pencabutan yang tak mencabut).
   disabled     Boolean   @default(false)
   createdAt    DateTime  @default(now())
+  // SPEC-786 · LOCAL-only. Mapping Terminal is state operator per akun pada instance ini;
+  // fullscreen, focus, dan pilihan grup aktif tetap di browser dan tidak masuk JSON ini.
+  terminalWorkspace          Json?
+  terminalWorkspaceRevision  Int       @default(0)
+  terminalWorkspaceUpdatedAt DateTime?
   sessions     Session[]
   deviceTokens DeviceToken[]
   projectAccess ClientProjectAccess[]