hanoman 0.1.39 → 0.1.41

package/dist/server.js

@@ -4557,7 +4557,7 @@ function cmpVersion(a, b) {
   }
   return 0;
 }
-var zProject, zBriefPayload, zQaPayload, zGoalPayload, zSpecBlocker, zSourceChange, zSpec, NOTIFY_SOUNDS, MODELS, EFFORTS, E_5_6, E_LUNA, E_BASE, CODEX_MODELS, RETIRED_CODEX_MODELS, zCodex, CODEX_DEFAULTS, zSourceCommon, zScheduler, SCHEDULER_DEFAULTS, zGoal, GOAL_DEFAULTS, zConflict, CONFLICT_DEFAULTS, CHANGELOG_ENGINE_DEFAULTS, zLeadEngine, zLead, LEAD_DEFAULTS, zSetting, zNotification, zDocFile, zDeviceTokenView;
+var zProject, zBriefPayload, zQaPayload, zGoalPayload, zSpecBlocker, zSourceChange, zManualDone, zSpec, NOTIFY_SOUNDS, MODELS, EFFORTS, E_5_6, E_LUNA, E_BASE, CODEX_MODELS, RETIRED_CODEX_MODELS, zCodex, CODEX_DEFAULTS, zSourceCommon, zScheduler, SCHEDULER_DEFAULTS, zGoal, GOAL_DEFAULTS, zConflict, CONFLICT_DEFAULTS, CHANGELOG_ENGINE_DEFAULTS, zLeadEngine, zLead, LEAD_DEFAULTS, zSetting, zNotification, zDocFile, zDeviceTokenView;
 var init_entities = __esm({
   "../shared/src/entities.ts"() {
     "use strict";
@@ -4615,6 +4615,11 @@ var init_entities = __esm({
       by: external_exports.string(),
       payload: external_exports.unknown().optional()
     });
+    zManualDone = external_exports.object({
+      at: external_exports.string(),
+      by: external_exports.string(),
+      reason: external_exports.string().optional()
+    });
     zSpec = external_exports.object({
       id: external_exports.string(),
       projectId: external_exports.string(),
@@ -4646,7 +4651,10 @@ var init_entities = __esm({
       // SPEC-546 · ADR-0109 · jejak konversi type. `.default([])` menjaga respons/klien versi lama
       // tetap parse; kolom DB-nya `Json?` sehingga baris yang belum pernah dikonversi mengirim
       // `null` — pemakai UI menulis `spec.sourceHistory ?? []`, cermin `blockedBy`.
-      sourceHistory: external_exports.array(zSourceChange).default([])
+      sourceHistory: external_exports.array(zSourceChange).default([]),
+      // SPEC-804 · ADR-0120 · terisi hanya bila item ditandai selesai manual; null = selesai lewat
+      // sesi atau belum selesai. `.nullable().default(null)` menjaga respons/klien versi lama parse.
+      manualDone: zManualDone.nullable().default(null)
     });
     NOTIFY_SOUNDS = [
       "off",
@@ -5450,7 +5458,7 @@ var init_cron_expr = __esm({
 function flowForSource(source) {
   return source === "qa" ? "qa" : source === "audit" ? "audit" : source === "goal" ? "goal" : "feature";
 }
-var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zUpdateProject, zCreateSpec, zPatchSpec, zChangeSpecSource, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerQueueCounts, zSchedulerState, zLeadDecisionView, zLeadFlowView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, USER_ROLES, zUserRole, zLogin, zSignup, zSetup, zChangePassword, zCreateClientAccount, zUpdateClientAccount, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, UPDATE_RESTART_EXIT, zUpdateApplyBody, zTicketView, zTicketAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus, zCronExpr, zCreateCron, zPatchCron, zSchedulerCron, zSchedulerCronRun;
+var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zUpdateProject, zCreateSpec, zPatchSpec, zChangeSpecSource, zMarkSpecDone, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerQueueCounts, zSchedulerState, zLeadDecisionView, zLeadFlowView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, USER_ROLES, zUserRole, zLogin, zSignup, zSetup, zChangePassword, zCreateClientAccount, zUpdateClientAccount, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, UPDATE_RESTART_EXIT, zUpdateApplyBody, zTicketView, zTicketAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus, zCronExpr, zCreateCron, zPatchCron, zSchedulerCron, zSchedulerCronRun;
 var init_dto = __esm({
   "../shared/src/dto.ts"() {
     "use strict";
@@ -5557,6 +5565,10 @@ var init_dto = __esm({
       if (o.payload !== void 0 && !payloadMatchesSource(o.source, o.payload))
         ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["payload"], message: "bentuk payload tak cocok dengan source" });
     });
+    zMarkSpecDone = external_exports.object({
+      reason: external_exports.string().trim().max(280).optional(),
+      confirm: external_exports.boolean().optional()
+    });
     zIntegrate = external_exports.object({
       op: external_exports.enum(["merge", "rebase"]),
       target: external_exports.string().regex(/^(local|origin):.+/)
@@ -6028,6 +6040,8 @@ var init_api = __esm({
       specIntegrate: (id) => `${API}/specs/${id}/integrate`,
       // SPEC-546 · ADR-0109 · ubah type/source item in-place (operasi khusus, bukan field PATCH).
       specSource: (id) => `${API}/specs/${id}/source`,
+      // SPEC-804 · ADR-0120 · tandai item selesai manual (operasi khusus, bukan field PATCH).
+      specDone: (id) => `${API}/specs/${id}/done`,
       specReview: (id) => `${API}/specs/${id}/review`,
       specReviewFile: (id, path2) => `${API}/specs/${id}/review/${path2}`,
       settings: `${API}/settings`,
@@ -6195,6 +6209,8 @@ var init_api = __esm({
       syncNow: `${API}/sync/now`,
       // SPEC-270 · ADR-0067 · antrean konflik rekonsil (cookie-authed)
       syncConflicts: `${API}/sync/conflicts`,
+      // SPEC-799 · ADR-0119 · penghapusan yang menunggu jendela online (cookie-only, cermin syncNow).
+      syncPending: `${API}/sync/pending`,
       syncConflictResolve: (entity, recordId) => `${API}/sync/conflicts/${encodeURIComponent(entity)}/${encodeURIComponent(recordId)}/resolve`,
       // SPEC-257 · ADR-0065 · agent token (kelola cookie-only) + katalog capability
       agentTokens: `${API}/agent-tokens`,
@@ -6747,6 +6763,9 @@ var init_webhook = __esm({
           "autoMerge",
           "createdAt",
           "startedAt",
+          // SPEC-804 · ADR-0120 · penerima harus bisa membedakan "selesai lewat sesi" dari "ditandai
+          // manusia" tanpa mendiff dua amplop. Peristiwanya tetap `spec.stage_changed`.
+          "manualDone",
           "updatedAt"
         ],
         projectIdField: "projectId",
@@ -6785,6 +6804,7 @@ var init_webhook = __esm({
           autoMerge: null,
           createdAt: "2026-08-01T02:10:00.000Z",
           startedAt: "2026-08-01T02:12:31.000Z",
+          manualDone: null,
           updatedAt: "2026-08-01T09:41:22.000Z"
         }
       },
@@ -9736,8 +9756,8 @@ function assertRuntimeBoundary(env, runtime) {
   if (runtime.uid === 0) throw new Error("production Hanoman harus berjalan sebagai user non-root");
   if (env.HANOMAN_SESSION_SANDBOX !== "podman")
     throw new Error("HANOMAN_SESSION_SANDBOX=podman wajib di production");
-  if (!env.HANOMAN_PUBLIC_ORIGINS || !env.HANOMAN_CONTROL_ORIGINS)
-    throw new Error("public/control origin wajib dipisahkan di production");
+  if (!env.HANOMAN_CONTROL_ORIGINS || !env.HANOMAN_PUBLIC_ORIGINS && !env.HANOMAN_SINGLE_ORIGIN)
+    throw new Error("public/control origin wajib dipisahkan di production (HANOMAN_SINGLE_ORIGIN=1 untuk sadar memilih satu origin)");
   if (!env.HANOMAN_TRUST_PROXY) throw new Error("trusted proxy hop/CIDR wajib di production");
   if (runtime.host !== "127.0.0.1" && runtime.host !== "::1" && runtime.host !== "localhost")
     throw new Error("origin Hanoman harus bind loopback; buka hanya reverse proxy");
@@ -10487,16 +10507,55 @@ var init_rename_project = __esm({
   }
 });
 
+// src/services/tombstone.ts
+async function findTombstone(entity, recordId) {
+  const row = await prisma.syncTombstone.findUnique({ where: { entity_recordId: { entity, recordId } } });
+  return row ? view(row) : null;
+}
+async function writeTombstone(entity, recordId, version2, data, deviceId) {
+  const prev = await findTombstone(entity, recordId);
+  if (prev && prev.version >= version2) return prev;
+  const row = await prisma.syncTombstone.upsert({
+    where: { entity_recordId: { entity, recordId } },
+    create: { entity, recordId, version: version2, data, deviceId: deviceId ?? null },
+    update: { version: version2, data, deviceId: deviceId ?? null, deletedAt: /* @__PURE__ */ new Date() }
+  });
+  return view(row);
+}
+async function clearTombstone(entity, recordId) {
+  await prisma.syncTombstone.deleteMany({ where: { entity, recordId } });
+}
+var view;
+var init_tombstone = __esm({
+  "src/services/tombstone.ts"() {
+    "use strict";
+    init_db();
+    view = (r) => ({
+      entity: r.entity,
+      recordId: r.recordId,
+      version: r.version,
+      data: r.data ?? {},
+      deletedAt: r.deletedAt,
+      deviceId: r.deviceId
+    });
+  }
+});
+
 // src/services/sync.ts
 var sync_exports = {};
 __export(sync_exports, {
+  PARENTS: () => PARENTS,
   SYNCED: () => SYNCED,
   __DATE_FIELDS: () => __DATE_FIELDS,
   __FIELDS: () => __FIELDS,
   __FIELDS_FOR_TEST: () => __FIELDS_FOR_TEST,
+  __JSON_FIELDS: () => __JSON_FIELDS,
   applyPush: () => applyPush,
   backfillFeed: () => backfillFeed,
+  consumeTombstoneOnRecreate: () => consumeTombstoneOnRecreate,
+  deleteRow: () => deleteRow,
   isEntity: () => isEntity,
+  publishDelete: () => publishDelete,
   publishLocal: () => publishLocal,
   pull: () => pull,
   setAcceptedHook: () => setAcceptedHook,
@@ -10561,10 +10620,24 @@ async function snapshot(entity, id) {
   for (const f of FIELDS[entity]) data[f] = jsonSafe(row[f]);
   return { version: Number(row.version), data };
 }
-async function applyPush(entity, id, baseVersion, data, deviceId) {
+async function applyPush(entity, id, baseVersion, data, deviceId, op = "upsert") {
   validateSyncData(entity, data, { allowProjectRename: true });
+  if (op === "delete") {
+    const already = await findTombstone(entity, id);
+    if (already) return { ok: true, version: already.version };
+    const snap2 = await snapshot(entity, id);
+    const version2 = (snap2?.version ?? baseVersion) + 1;
+    if (snap2) await DELEGATE[entity].delete({ where: { id } });
+    await writeTombstone(entity, id, version2, snap2?.data ?? data, deviceId);
+    await publishDelete(entity, id);
+    return { ok: true, version: version2 };
+  }
   if (entity === "project" && typeof data.renamedFrom === "string" && data.renamedFrom && data.renamedFrom !== id) {
     const oldId = data.renamedFrom;
+    const destTomb = await findTombstone("project", id);
+    if (destTomb) {
+      return { ok: false, conflict: true, deleted: true, deletedVersion: destTomb.version, server: null };
+    }
     const already = await DELEGATE.project.findUnique({ where: { id }, select: { version: true } });
     if (already) return { ok: true, version: Number(already.version) };
     const old = await DELEGATE.project.findUnique({ where: { id: oldId }, select: { version: true } });
@@ -10578,17 +10651,24 @@ async function applyPush(entity, id, baseVersion, data, deviceId) {
       const snap2 = await snapshot("project", id);
       const logData = { ...snap2?.data ?? {}, renamedFrom: oldId };
       const log3 = await prisma.syncLog.create({
-        data: { entity: "project", recordId: id, version: newVersion2, data: logData, deviceId: deviceId ?? null }
+        data: { entity: "project", recordId: id, version: newVersion2, op: "upsert", data: logData, deviceId: deviceId ?? null }
       });
-      onAccepted?.({ entity: "project", recordId: id, version: newVersion2, data: logData, seq: String(log3.seq) });
+      onAccepted?.({ entity: "project", recordId: id, version: newVersion2, op: "upsert", data: logData, seq: String(log3.seq) });
       return { ok: true, version: newVersion2 };
     }
   }
+  const tomb = await findTombstone(entity, id);
   const existing = await DELEGATE[entity].findUnique({ where: { id }, select: { version: true } });
-  if (existing && Number(existing.version) !== baseVersion) {
-    return { ok: false, conflict: true, server: await snapshot(entity, id) };
+  const currentVersion = existing ? Number(existing.version) : tomb ? tomb.version : null;
+  if (currentVersion !== null && currentVersion !== baseVersion) {
+    return {
+      ok: false,
+      conflict: true,
+      server: await snapshot(entity, id),
+      ...tomb && !existing ? { deleted: true, deletedVersion: tomb.version } : {}
+    };
   }
-  const newVersion = existing ? Number(existing.version) + 1 : 1;
+  const newVersion = (currentVersion ?? 0) + 1;
   const writeData = coerce2(entity, data);
   const stamp2 = writeData.updatedAt ?? /* @__PURE__ */ new Date();
   await DELEGATE[entity].upsert({
@@ -10596,11 +10676,12 @@ async function applyPush(entity, id, baseVersion, data, deviceId) {
     create: { id, ...writeData, version: newVersion, updatedAt: stamp2 },
     update: { ...writeData, version: newVersion, updatedAt: stamp2 }
   });
+  if (tomb) await clearTombstone(entity, id);
   const snap = await snapshot(entity, id);
   const log2 = await prisma.syncLog.create({
-    data: { entity, recordId: id, version: newVersion, data: snap?.data ?? {}, deviceId: deviceId ?? null }
+    data: { entity, recordId: id, version: newVersion, op: "upsert", data: snap?.data ?? {}, deviceId: deviceId ?? null }
   });
-  onAccepted?.({ entity, recordId: id, version: newVersion, data: snap?.data ?? {}, seq: String(log2.seq) });
+  onAccepted?.({ entity, recordId: id, version: newVersion, op: "upsert", data: snap?.data ?? {}, seq: String(log2.seq) });
   return { ok: true, version: newVersion };
 }
 async function pull(sinceCursor, limit = 500) {
@@ -10613,7 +10694,13 @@ async function pull(sinceCursor, limit = 500) {
   const cursor = rows.length ? String(rows[rows.length - 1].seq) : sinceCursor || "0";
   return {
     cursor,
-    records: rows.map((r) => ({ entity: r.entity, recordId: r.recordId, version: r.version, data: r.data }))
+    records: rows.map((r) => ({
+      entity: r.entity,
+      recordId: r.recordId,
+      version: r.version,
+      op: r.op === "delete" ? "delete" : "upsert",
+      data: r.data
+    }))
   };
 }
 async function publishLocal(entity, id) {
@@ -10622,9 +10709,38 @@ async function publishLocal(entity, id) {
   const newVersion = snap.version + 1;
   await DELEGATE[entity].update({ where: { id }, data: { version: newVersion } });
   const log2 = await prisma.syncLog.create({
-    data: { entity, recordId: id, version: newVersion, data: snap.data ?? {}, deviceId: null }
+    data: { entity, recordId: id, version: newVersion, op: "upsert", data: snap.data ?? {}, deviceId: null }
   });
-  onAccepted?.({ entity, recordId: id, version: newVersion, data: snap.data ?? {}, seq: String(log2.seq) });
+  onAccepted?.({ entity, recordId: id, version: newVersion, op: "upsert", data: snap.data ?? {}, seq: String(log2.seq) });
+}
+async function deleteRow(entity, id) {
+  await DELEGATE[entity].delete({ where: { id } });
+}
+async function publishDelete(entity, id) {
+  const tomb = await findTombstone(entity, id);
+  if (!tomb) return;
+  const log2 = await prisma.syncLog.create({
+    data: {
+      entity,
+      recordId: id,
+      version: tomb.version,
+      op: "delete",
+      data: tomb.data,
+      deviceId: tomb.deviceId
+    }
+  });
+  onAccepted?.({ entity, recordId: id, version: tomb.version, op: "delete", data: tomb.data, seq: String(log2.seq) });
+}
+async function consumeTombstoneOnRecreate(entity, id) {
+  const tomb = await findTombstone(entity, id);
+  if (!tomb) return false;
+  const row = await DELEGATE[entity].findUnique({ where: { id }, select: { version: true } });
+  if (!row) return false;
+  await clearTombstone(entity, id);
+  if (Number(row.version) < tomb.version) {
+    await DELEGATE[entity].update({ where: { id }, data: { version: tomb.version } });
+  }
+  return true;
 }
 async function backfillFeed() {
   let published = 0;
@@ -10640,6 +10756,16 @@ async function backfillFeed() {
       published++;
     }
   }
+  for (const t of await prisma.syncTombstone.findMany({ select: { entity: true, recordId: true, version: true } })) {
+    if (!isEntity(t.entity)) continue;
+    const has = await prisma.syncLog.findFirst({
+      where: { entity: t.entity, recordId: t.recordId, version: t.version, op: "delete" },
+      select: { seq: true }
+    });
+    if (has) continue;
+    await publishDelete(t.entity, t.recordId);
+    published++;
+  }
   return published;
 }
 async function upsertLocal(entity, id, version2, data) {
@@ -10667,12 +10793,13 @@ async function upsertLocal(entity, id, version2, data) {
 function setAcceptedHook(hook) {
   onAccepted = hook;
 }
-var SYNCED, DELEGATE, FIELDS, DATE_FIELDS, __FIELDS, __DATE_FIELDS, NUMBER_FIELDS, BOOLEAN_FIELDS, JSON_FIELDS, onAccepted, __FIELDS_FOR_TEST;
+var SYNCED, DELEGATE, FIELDS, DATE_FIELDS, PARENTS, __FIELDS, __DATE_FIELDS, NUMBER_FIELDS, BOOLEAN_FIELDS, JSON_FIELDS, __JSON_FIELDS, onAccepted, __FIELDS_FOR_TEST;
 var init_sync = __esm({
   "src/services/sync.ts"() {
     "use strict";
     init_db();
     init_rename_project();
+    init_tombstone();
     SYNCED = ["project", "spec", "vps", "sessionResult", "ticket", "ticketAttachment", "customAgent", "githubIssue"];
     DELEGATE = {
       project: prisma.project,
@@ -10698,7 +10825,10 @@ var init_sync = __esm({
       // TETAP berhasil, jadi kolom yang terlewat di sini mendarat sebagai null palsu di tiap client
       // tanpa satu pun error (kelas gagal-senyap ADR-0090/0093/0094/0105). BUKAN DATE_FIELDS —
       // `at` hidup di dalam JSON-nya, kolomnya sendiri bukan DateTime.
-      spec: ["projectId", "title", "source", "stage", "priority", "author", "objective", "payload", "branchFrom", "baseSha", "headSha", "dependsOn", "sourceHistory", "createdAt", "startedAt", "doneAt", "updatedAt"],
+      // SPEC-804 · ADR-0120 · manualDone ikut menyeberang: "item ini ditandai selesai manusia" adalah
+      // bagian keadaan yang harus dilihat sama oleh semua mesin — di antaranya gerbang auto-merge.
+      // BUKAN DATE_FIELDS, alasan yang sama dengan sourceHistory.
+      spec: ["projectId", "title", "source", "stage", "priority", "author", "objective", "payload", "branchFrom", "baseSha", "headSha", "dependsOn", "sourceHistory", "manualDone", "createdAt", "startedAt", "doneAt", "updatedAt"],
       vps: ["name", "host", "port", "user", "health", "audit", "hardened", "lastSeenAt", "lastAuditAt", "updatedAt"],
       sessionResult: ["projectId", "specId", "oldStage", "newStage", "commitSha", "branch", "prUrl", "status", "deviceId", "author", "createdAt", "updatedAt"],
       // SPEC-268 · ADR-0066 · metadata tiket (lampiran biner tak disync). accessKeyHash wajib
@@ -10746,6 +10876,13 @@ var init_sync = __esm({
       customAgent: ["createdAt", "updatedAt"],
       githubIssue: ["issueCreatedAt", "issueUpdatedAt", "pulledAt", "createdAt", "updatedAt"]
     };
+    PARENTS = {
+      spec: [{ field: "projectId", entity: "project" }],
+      ticket: [{ field: "projectId", entity: "project" }],
+      ticketAttachment: [{ field: "ticketId", entity: "ticket" }],
+      customAgent: [{ field: "projectId", entity: "project" }],
+      githubIssue: [{ field: "projectId", entity: "project" }]
+    };
     __FIELDS = FIELDS;
     __DATE_FIELDS = DATE_FIELDS;
     NUMBER_FIELDS = /* @__PURE__ */ new Set([
@@ -10759,12 +10896,14 @@ var init_sync = __esm({
       "spec:payload",
       "spec:dependsOn",
       "spec:sourceHistory",
+      "spec:manualDone",
       "vps:health",
       "vps:audit",
       "customAgent:tools",
       "customAgent:mentions",
       "githubIssue:labels"
     ]);
+    __JSON_FIELDS = JSON_FIELDS;
     __FIELDS_FOR_TEST = FIELDS;
   }
 });
@@ -10888,6 +11027,134 @@ var init_codex_trust = __esm({
   }
 });
 
+// src/services/notifications.ts
+async function recordDrift(vpsId, vpsName, drift, snapshotId) {
+  if (drift.length === 0) return;
+  const ids = drift.map((d) => d.itemId);
+  const shown = ids.slice(0, 5).join(", ") + (ids.length > 5 ? `, +${ids.length - 5} lagi` : "");
+  const title = `Drift di "${vpsName}": ${drift.length} item regresi (${shown})`;
+  await prisma.notification.create({
+    data: { type: "drift", key: `drift:${vpsId}:${snapshotId}`, title, projectId: null }
+  }).catch(() => {
+  });
+}
+async function recordCompletion(specId, title, projectId) {
+  await prisma.spec.updateMany({ where: { id: specId, doneAt: null }, data: { doneAt: /* @__PURE__ */ new Date() } }).catch(() => {
+  });
+  const sessionId2 = specId.toLowerCase().replace(/[^a-z0-9_-]/g, "_");
+  await prisma.notification.create({
+    data: { type: "done", key: `done:${specId}`, specId, sessionId: sessionId2, title, projectId }
+  }).catch(() => {
+  });
+}
+async function recordSyncDelete(entity, recordId, version2, title) {
+  await prisma.notification.create({
+    data: { type: "sync", key: `sync-delete:${entity}:${recordId}:${version2}`, title, projectId: null }
+  }).catch(() => {
+  });
+}
+async function recordFailure(specId, title, projectId, reason) {
+  const sessionId2 = specId.toLowerCase().replace(/[^a-z0-9_-]/g, "_");
+  await prisma.notification.create({
+    data: { type: "fail", key: `fail:${specId}`, specId, sessionId: sessionId2, title: `Gagal: ${title} \u2014 ${reason}`, projectId }
+  }).catch(() => {
+  });
+}
+async function recordAutoMerge(specId, projectId, title) {
+  const sessionId2 = specId.toLowerCase().replace(/[^a-z0-9_-]/g, "_");
+  await prisma.notification.create({
+    data: { type: "automerge", key: `automerge:${specId}`, specId, sessionId: sessionId2, title, projectId }
+  }).catch(() => {
+  });
+}
+async function recordCleanupFailure(sessionId2, projectId, entry, reason) {
+  await prisma.notification.create({
+    data: {
+      type: "cleanup",
+      key: `cleanup:${entry}`,
+      sessionId: sessionId2,
+      projectId,
+      title: `Worktree sesi ${sessionId2} gagal dibersihkan \u2014 ${reason}`
+    }
+  }).catch(() => {
+  });
+}
+async function recordSourceChange(specId, projectId, title, from, to, seq) {
+  const sessionId2 = specId.toLowerCase().replace(/[^a-z0-9_-]/g, "_");
+  await prisma.notification.create({
+    data: {
+      type: "spec-source",
+      key: `source:${specId}:${seq}`,
+      specId,
+      sessionId: sessionId2,
+      title: `${specId} \xB7 type ${from} \u2192 ${to} \u2014 ${title}`,
+      projectId
+    }
+  }).catch(() => {
+  });
+}
+async function recordNewTicket(ticketId, projectId, projectName, category, title) {
+  const short = title.length > 80 ? title.slice(0, 77) + "\u2026" : title;
+  const t = `Keluhan baru di "${projectName}": ${category}: ${short}`;
+  await prisma.notification.create({
+    data: { type: "ticket", key: `ticket:${ticketId}`, projectId, title: t }
+  }).catch(() => {
+  });
+}
+async function recordLeadDecision(decisionId, title, projectId, specId, sessionId2) {
+  await prisma.notification.create({
+    data: { type: "lead", key: `lead:${decisionId}`, specId, sessionId: sessionId2, projectId, title }
+  }).catch(() => {
+  });
+}
+async function recordCronRun(cronId, cronName, projectId, dueAt, status, note) {
+  const verb = status === "launched" ? "berjalan" : status === "skipped" ? "dilewati" : "gagal";
+  const title = `Cron "${cronName}" ${verb}${note ? ` \u2014 ${note}` : ""}`;
+  await prisma.notification.create({
+    data: { type: "cron", key: `cron:${cronId}:${dueAt.toISOString()}`, title, projectId }
+  }).catch(() => {
+  });
+}
+async function scanDecisions(read2 = liveDecisions) {
+  const next = /* @__PURE__ */ new Set();
+  const fresh = [];
+  for (const s2 of read2()) {
+    if (!markerFilled(s2.decisionFile)) continue;
+    next.add(s2.id);
+    if (!awaiting.has(s2.id)) fresh.push(s2);
+  }
+  awaiting = next;
+  for (const s2 of fresh) {
+    const title = s2.specId ? (await prisma.spec.findUnique({ where: { id: s2.specId }, select: { title: true } }))?.title ?? s2.specId : s2.id;
+    await prisma.notification.create({
+      data: { type: "decision", specId: s2.specId ?? null, sessionId: s2.id, projectId: s2.projectId || null, title }
+    });
+  }
+}
+async function notificationsFeed(p = {}) {
+  await scanDecisions();
+  const pageSize = p.limit ? Math.max(1, Math.floor(+p.limit) || 1) : DEFAULT_FEED_TAKE;
+  const page = p.page ? Math.max(1, Math.floor(+p.page) || 1) : 1;
+  const total = await prisma.notification.count();
+  const items = await prisma.notification.findMany({
+    orderBy: { createdAt: "desc" },
+    skip: (page - 1) * pageSize,
+    take: pageSize
+  });
+  const unread = await prisma.notification.count({ where: { readAt: null } });
+  return { items, unread, total, page, pageSize };
+}
+var awaiting, DEFAULT_FEED_TAKE;
+var init_notifications = __esm({
+  "src/services/notifications.ts"() {
+    "use strict";
+    init_db();
+    init_pty();
+    awaiting = /* @__PURE__ */ new Set();
+    DEFAULT_FEED_TAKE = 50;
+  }
+});
+
 // src/services/agent-token.ts
 import { randomBytes as randomBytes2, createHash, timingSafeEqual } from "node:crypto";
 function toAgentTokenView(t) {
@@ -16171,7 +16438,14 @@ function validateIncomingRecord(input) {
   if (!row.data || typeof row.data !== "object" || Array.isArray(row.data)) throw new Error("sync data invalid");
   if (Buffer.byteLength(JSON.stringify(input)) > MAX_SYNC_RECORD_BYTES) throw new Error("sync record terlalu besar");
   validateSyncData(row.entity, row.data, { allowProjectRename: true });
-  return { entity: row.entity, recordId: row.recordId, version: Number(row.version), data: row.data };
+  const op = row.op === void 0 || row.op === null || row.op === "upsert" ? "upsert" : row.op === "delete" ? "delete" : null;
+  return {
+    entity: row.entity,
+    recordId: row.recordId,
+    version: Number(row.version),
+    data: row.data,
+    op
+  };
 }
 async function getCursor() {
   const s2 = await prisma.syncState.findUnique({ where: { id: 1 } });
@@ -16180,15 +16454,50 @@ async function getCursor() {
 async function setCursor(cursor) {
   await prisma.syncState.upsert({ where: { id: 1 }, create: { id: 1, cursor }, update: { cursor } });
 }
-async function applyRemote(entity, recordId, version2, data) {
-  if (!isEntity(entity)) return;
+async function applyRemote(entity, recordId, version2, data, op = "upsert") {
+  if (!isEntity(entity)) return "dropped";
+  if (op === "delete") {
+    await applyRemoteDelete(entity, recordId, version2, data);
+    return "applied";
+  }
+  const tomb = await findTombstone(entity, recordId);
+  if (tomb) {
+    if (version2 <= tomb.version) return "dropped";
+    await clearTombstone(entity, recordId);
+  }
+  if (await parentTombstoned(entity, data)) return "dropped";
   await upsertLocal(entity, recordId, version2, data);
+  return "applied";
+}
+async function applyRemoteDelete(entity, recordId, version2, data) {
+  const existing = await snapshot(entity, recordId);
+  await writeTombstone(entity, recordId, version2, existing?.data ?? data);
+  if (existing) await deleteRow(entity, recordId);
+  const pending2 = await prisma.syncOutbox.findFirst({ where: { entity, recordId } });
+  if (!pending2) return;
+  await clearOutbox(entity, recordId);
+  if (existing) {
+    await recordSyncDelete(
+      entity,
+      recordId,
+      version2,
+      `Dihapus di peer: ${entity} ${recordId} \u2014 suntingan lokal yang belum tersinkron dibuang`
+    );
+  }
+}
+async function parentTombstoned(entity, data) {
+  for (const p of PARENTS[entity] ?? []) {
+    const v = data[p.field];
+    if (typeof v !== "string" || !v) continue;
+    if (await findTombstone(p.entity, v)) return true;
+  }
+  return false;
 }
 async function applyFeedFrame(msg) {
   if (!msg.entity || !msg.recordId) return true;
   try {
     const record2 = validateIncomingRecord({ ...msg, version: Number(msg.version ?? 0), data: msg.data ?? {} });
-    await applyRemote(record2.entity, record2.recordId, record2.version, record2.data);
+    if (record2.op) await applyRemote(record2.entity, record2.recordId, record2.version, record2.data, record2.op);
   } catch {
     feedHole = true;
     return false;
@@ -16197,7 +16506,7 @@ async function applyFeedFrame(msg) {
   return true;
 }
 async function syncOnce(transport) {
-  let pulled = 0, pushed = 0, conflicts = 0;
+  let pulled = 0, pushed = 0, conflicts = 0, deleted = 0, dropped = 0;
   const cursor = await getCursor();
   const outbox = await listOutbox();
   const pending2 = new Set(outbox.map((o) => `${o.entity}:${o.recordId}`));
@@ -16216,7 +16525,11 @@ async function syncOnce(transport) {
   const deferred = [];
   for (const rec of records) {
     if (!isEntity(rec.entity)) continue;
-    if (pending2.has(`${rec.entity}:${rec.recordId}`)) {
+    if (!rec.op) {
+      dropped++;
+      continue;
+    }
+    if (rec.op === "upsert" && pending2.has(`${rec.entity}:${rec.recordId}`)) {
       const local = await snapshot(rec.entity, rec.recordId);
       if (local && JSON.stringify(local.data) !== JSON.stringify(rec.data)) {
         await markConflict(
@@ -16229,8 +16542,10 @@ async function syncOnce(transport) {
       continue;
     }
     try {
-      await applyRemote(rec.entity, rec.recordId, rec.version, rec.data);
-      pulled++;
+      const r = await applyRemote(rec.entity, rec.recordId, rec.version, rec.data, rec.op);
+      if (r === "dropped") dropped++;
+      else if (rec.op === "delete") deleted++;
+      else pulled++;
     } catch {
       deferred.push(rec);
     }
@@ -16240,15 +16555,18 @@ async function syncOnce(transport) {
     const still = [];
     for (const rec of rest) {
       try {
-        await applyRemote(rec.entity, rec.recordId, rec.version, rec.data);
-        pulled++;
+        const r = await applyRemote(rec.entity, rec.recordId, rec.version, rec.data, rec.op ?? "upsert");
+        if (r === "dropped") dropped++;
+        else if (rec.op === "delete") deleted++;
+        else pulled++;
       } catch {
         still.push(rec);
       }
     }
     if (still.length === rest.length) {
       for (const rec of still) {
-        console.warn(`sync: record ${rec.entity}:${rec.recordId} tak bisa diterapkan (induk absen?) \u2014 dilewati`);
+        console.warn(`sync: record ${rec.entity}:${rec.recordId} tak bisa diterapkan \u2014 dilewati`);
+        dropped++;
       }
       break;
     }
@@ -16282,7 +16600,24 @@ async function syncOnce(transport) {
     }
     const snap = await snapshot(item.entity, item.recordId);
     if (!snap) {
-      await clearOutbox(item.entity, item.recordId);
+      const tomb = await findTombstone(item.entity, item.recordId);
+      if (!tomb) {
+        await clearOutbox(item.entity, item.recordId);
+        continue;
+      }
+      const res2 = await transport("POST", "/api/sync/push", {
+        records: [{
+          entity: item.entity,
+          id: item.recordId,
+          baseVersion: Math.max(tomb.version - 1, 0),
+          op: "delete",
+          data: tomb.data
+        }]
+      });
+      if (res2.body?.results?.[0]?.ok) {
+        await clearOutbox(item.entity, item.recordId);
+        pushed++;
+      }
       continue;
     }
     const res = await transport("POST", "/api/sync/push", {
@@ -16298,6 +16633,18 @@ async function syncOnce(transport) {
       await clearOutbox(item.entity, item.recordId);
       pushed++;
     } else if (r?.conflict) {
+      if (r.deleted) {
+        await applyRemote(
+          item.entity,
+          item.recordId,
+          Number(r.deletedVersion ?? snap.version + 1),
+          snap.data,
+          "delete"
+        );
+        await clearOutbox(item.entity, item.recordId);
+        deleted++;
+        continue;
+      }
       const server = r.server;
       if (server && JSON.stringify(server.data) !== JSON.stringify(snap.data)) {
         await markConflict(
@@ -16312,7 +16659,7 @@ async function syncOnce(transport) {
       }
     }
   }
-  return { pulled, pushed, conflicts };
+  return { pulled, pushed, conflicts, deleted, dropped };
 }
 function fetchTransport(base2, token) {
   return async (method, path2, body) => {
@@ -16343,13 +16690,15 @@ async function syncNow(opts) {
   const transport = fetchTransport(base2, token);
   if (!opts?.full) return syncOnce(transport);
   await setCursor("0");
-  const total = { pulled: 0, pushed: 0, conflicts: 0 };
+  const total = { pulled: 0, pushed: 0, conflicts: 0, deleted: 0, dropped: 0 };
   let seen = "0";
   for (let page = 0; page < FULL_PULL_MAX_PAGES; page++) {
     const s2 = await syncOnce(transport);
     total.pulled += s2.pulled;
     total.pushed += s2.pushed;
     total.conflicts += s2.conflicts;
+    total.deleted += s2.deleted;
+    total.dropped += s2.dropped;
     const now = await getCursor();
     if (now === seen) break;
     seen = now;
@@ -16432,6 +16781,8 @@ var init_sync_client = __esm({
     "use strict";
     init_db();
     init_sync();
+    init_tombstone();
+    init_notifications();
     init_conflicts();
     init_outbox();
     init_rename_project();
@@ -24804,11 +25155,42 @@ init_sync();
 async function notifySynced(entity, id) {
   try {
     if (!isEntity(entity)) return;
+    await consumeTombstoneOnRecreate(entity, id);
     if (effectiveStr("SYNC_SERVER_URL")) await enqueueOutbox(entity, id);
     else await publishLocal(entity, id);
   } catch {
   }
 }
+async function notifyDeleted(entity, id) {
+  try {
+    if (!isEntity(entity)) return;
+    if (effectiveStr("SYNC_SERVER_URL")) await enqueueOutbox(entity, id);
+    else await publishDelete(entity, id);
+  } catch {
+  }
+}
+
+// src/services/sync-delete.ts
+init_sync();
+init_tombstone();
+init_outbox();
+async function deleteSynced(entity, id, deviceId) {
+  const snap = await snapshot(entity, id);
+  if (!snap) return false;
+  await deleteRow(entity, id);
+  await writeTombstone(entity, id, snap.version + 1, snap.data, deviceId);
+  await notifyDeleted(entity, id);
+  return true;
+}
+async function listPendingDeletes() {
+  const out3 = [];
+  for (const item of await listOutbox()) {
+    const tomb = await findTombstone(item.entity, item.recordId);
+    if (!tomb) continue;
+    out3.push({ entity: item.entity, recordId: item.recordId, deletedAt: tomb.deletedAt.toISOString() });
+  }
+  return out3;
+}
 
 // src/services/branches.ts
 import { execFile as execFile2 } from "node:child_process";
@@ -24962,7 +25344,7 @@ async function projects_default(app2) {
     if (!await prisma.project.findUnique({ where: { id } })) return reply.code(404).send({ error: "not found" });
     const active = listSessions().filter((s2) => s2.projectId === id && !s2.exited).length;
     if (active) return reply.code(409).send({ error: `project "${id}" masih punya ${active} sesi aktif` });
-    await prisma.project.delete({ where: { id } });
+    await deleteSynced("project", id);
     return reply.code(204).send();
   });
   app2.get("/projects/:id/branches", async (req, reply) => {
@@ -25413,120 +25795,64 @@ function appendSourceHistory(current, entry) {
   return [...Array.isArray(current) ? current : [], entry];
 }
 
-// src/services/notifications.ts
+// src/routes/specs.ts
+init_notifications();
+
+// src/services/spec-complete.ts
 init_db();
-init_pty();
-async function recordDrift(vpsId, vpsName, drift, snapshotId) {
-  if (drift.length === 0) return;
-  const ids = drift.map((d) => d.itemId);
-  const shown = ids.slice(0, 5).join(", ") + (ids.length > 5 ? `, +${ids.length - 5} lagi` : "");
-  const title = `Drift di "${vpsName}": ${drift.length} item regresi (${shown})`;
-  await prisma.notification.create({
-    data: { type: "drift", key: `drift:${vpsId}:${snapshotId}`, title, projectId: null }
-  }).catch(() => {
-  });
-}
-async function recordCompletion(specId, title, projectId) {
-  await prisma.spec.updateMany({ where: { id: specId, doneAt: null }, data: { doneAt: /* @__PURE__ */ new Date() } }).catch(() => {
-  });
-  const sessionId2 = specId.toLowerCase().replace(/[^a-z0-9_-]/g, "_");
-  await prisma.notification.create({
-    data: { type: "done", key: `done:${specId}`, specId, sessionId: sessionId2, title, projectId }
-  }).catch(() => {
-  });
-}
-async function recordFailure(specId, title, projectId, reason) {
-  const sessionId2 = specId.toLowerCase().replace(/[^a-z0-9_-]/g, "_");
-  await prisma.notification.create({
-    data: { type: "fail", key: `fail:${specId}`, specId, sessionId: sessionId2, title: `Gagal: ${title} \u2014 ${reason}`, projectId }
-  }).catch(() => {
-  });
-}
-async function recordAutoMerge(specId, projectId, title) {
-  const sessionId2 = specId.toLowerCase().replace(/[^a-z0-9_-]/g, "_");
-  await prisma.notification.create({
-    data: { type: "automerge", key: `automerge:${specId}`, specId, sessionId: sessionId2, title, projectId }
-  }).catch(() => {
-  });
-}
-async function recordCleanupFailure(sessionId2, projectId, entry, reason) {
-  await prisma.notification.create({
-    data: {
-      type: "cleanup",
-      key: `cleanup:${entry}`,
-      sessionId: sessionId2,
-      projectId,
-      title: `Worktree sesi ${sessionId2} gagal dibersihkan \u2014 ${reason}`
-    }
-  }).catch(() => {
-  });
-}
-async function recordSourceChange(specId, projectId, title, from, to, seq) {
-  const sessionId2 = specId.toLowerCase().replace(/[^a-z0-9_-]/g, "_");
-  await prisma.notification.create({
-    data: {
-      type: "spec-source",
-      key: `source:${specId}:${seq}`,
-      specId,
-      sessionId: sessionId2,
-      title: `${specId} \xB7 type ${from} \u2192 ${to} \u2014 ${title}`,
-      projectId
-    }
-  }).catch(() => {
-  });
-}
-async function recordNewTicket(ticketId, projectId, projectName, category, title) {
-  const short = title.length > 80 ? title.slice(0, 77) + "\u2026" : title;
-  const t = `Keluhan baru di "${projectName}": ${category}: ${short}`;
-  await prisma.notification.create({
-    data: { type: "ticket", key: `ticket:${ticketId}`, projectId, title: t }
-  }).catch(() => {
-  });
+init_notifications();
+
+// src/services/session-result.ts
+init_db();
+import { randomUUID as randomUUID3 } from "node:crypto";
+var WHITELIST = [
+  "projectId",
+  "specId",
+  "oldStage",
+  "newStage",
+  "commitSha",
+  "branch",
+  "prUrl",
+  "status",
+  "deviceId",
+  "author"
+];
+async function recordSessionResult(input) {
+  const id = randomUUID3();
+  const data = { id };
+  for (const f of WHITELIST) if (input[f] !== void 0 && input[f] !== null) data[f] = input[f];
+  if (data.status === void 0) data.status = "done";
+  if (data.projectId === void 0) throw new Error("session result butuh projectId");
+  await prisma.sessionResult.create({ data });
+  await notifySynced("sessionResult", id);
+  return { id };
 }
-async function recordLeadDecision(decisionId, title, projectId, specId, sessionId2) {
-  await prisma.notification.create({
-    data: { type: "lead", key: `lead:${decisionId}`, specId, sessionId: sessionId2, projectId, title }
-  }).catch(() => {
+
+// src/services/spec-complete.ts
+async function completeSpecManually(spec, input) {
+  const at = input.at ?? /* @__PURE__ */ new Date();
+  const manualDone = {
+    at: at.toISOString(),
+    by: input.by,
+    ...input.reason ? { reason: input.reason } : {}
+  };
+  const { count } = await prisma.spec.updateMany({
+    where: { id: spec.id, stage: { not: "done" } },
+    data: { stage: "done", manualDone }
   });
-}
-async function recordCronRun(cronId, cronName, projectId, dueAt, status, note) {
-  const verb = status === "launched" ? "berjalan" : status === "skipped" ? "dilewati" : "gagal";
-  const title = `Cron "${cronName}" ${verb}${note ? ` \u2014 ${note}` : ""}`;
-  await prisma.notification.create({
-    data: { type: "cron", key: `cron:${cronId}:${dueAt.toISOString()}`, title, projectId }
+  if (count === 0) return { ok: false };
+  await recordCompletion(spec.id, spec.title, spec.projectId);
+  await recordSessionResult({
+    projectId: spec.projectId,
+    specId: spec.id,
+    oldStage: spec.stage,
+    newStage: "done",
+    status: "done",
+    author: input.by
   }).catch(() => {
   });
-}
-var awaiting = /* @__PURE__ */ new Set();
-async function scanDecisions(read2 = liveDecisions) {
-  const next = /* @__PURE__ */ new Set();
-  const fresh = [];
-  for (const s2 of read2()) {
-    if (!markerFilled(s2.decisionFile)) continue;
-    next.add(s2.id);
-    if (!awaiting.has(s2.id)) fresh.push(s2);
-  }
-  awaiting = next;
-  for (const s2 of fresh) {
-    const title = s2.specId ? (await prisma.spec.findUnique({ where: { id: s2.specId }, select: { title: true } }))?.title ?? s2.specId : s2.id;
-    await prisma.notification.create({
-      data: { type: "decision", specId: s2.specId ?? null, sessionId: s2.id, projectId: s2.projectId || null, title }
-    });
-  }
-}
-var DEFAULT_FEED_TAKE = 50;
-async function notificationsFeed(p = {}) {
-  await scanDecisions();
-  const pageSize = p.limit ? Math.max(1, Math.floor(+p.limit) || 1) : DEFAULT_FEED_TAKE;
-  const page = p.page ? Math.max(1, Math.floor(+p.page) || 1) : 1;
-  const total = await prisma.notification.count();
-  const items = await prisma.notification.findMany({
-    orderBy: { createdAt: "desc" },
-    skip: (page - 1) * pageSize,
-    take: pageSize
-  });
-  const unread = await prisma.notification.count({ where: { readAt: null } });
-  return { items, unread, total, page, pageSize };
+  await notifySynced("spec", spec.id);
+  return { ok: true, spec: await prisma.spec.findUnique({ where: { id: spec.id } }) };
 }
 
 // src/routes/specs.ts
@@ -28187,6 +28513,7 @@ init_db();
 init_pty();
 init_session_phases();
 init_stage_machine();
+init_notifications();
 
 // src/services/spec-head.ts
 init_db();
@@ -28449,6 +28776,23 @@ ${item.context}` : item.context;
     await notifySynced("spec", id);
     return updated;
   });
+  app2.post("/specs/:id/done", async (req, reply) => {
+    const { id } = req.params;
+    const parsed = zMarkSpecDone.safeParse(req.body ?? {});
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    const spec = await prisma.spec.findUnique({ where: { id } });
+    if (!spec) return reply.code(404).send({ error: "not found" });
+    if (spec.stage === "done") return reply.code(409).send({ error: "backlog item sudah selesai" });
+    const live = listSessions().find((s2) => s2.specId === id && !s2.exited);
+    if (live && parsed.data.confirm !== true)
+      return reply.code(409).send({ error: "confirm-required", session: { id: live.id, agent: live.agent } });
+    const res = await completeSpecManually(spec, {
+      by: req.user?.email ?? "system",
+      reason: parsed.data.reason || void 0
+    });
+    if (!res.ok) return reply.code(409).send({ error: "backlog item sudah selesai" });
+    return res.spec;
+  });
   app2.get("/specs/:id/docs", async (req) => ({ files: await listSpecDocs(req.params.id) }));
   app2.get("/specs/:id/docs/*", async (req, reply) => {
     const { id } = req.params;
@@ -28469,7 +28813,7 @@ ${item.context}` : item.context;
   app2.delete("/specs/:id", async (req, reply) => {
     const { id } = req.params;
     const gone = await prisma.spec.findUnique({ where: { id }, select: { projectId: true } });
-    await prisma.spec.delete({ where: { id } }).catch(() => {
+    await deleteSynced("spec", id).catch(() => {
     });
     if (gone) {
       const rows = await prisma.spec.findMany({
@@ -28555,6 +28899,7 @@ ${item.context}` : item.context;
 
 // src/routes/notifications.ts
 init_db();
+init_notifications();
 async function notifications_default(app2) {
   app2.get("/notifications", async (req) => notificationsFeed(req.query));
   app2.post("/notifications/read", async (_req, reply) => {
@@ -30176,6 +30521,7 @@ import { execFile as execFile8 } from "node:child_process";
 import { readdir as readdir2, rm as rm2 } from "node:fs/promises";
 import { promisify as promisify9 } from "node:util";
 import { join as join9, resolve as resolve14 } from "node:path";
+init_notifications();
 var TICK_MS = 6e4;
 var trashDirOf = (repoDir) => resolve14(repoDir, ".worktrees", ".trash");
 var exec8 = promisify9(execFile8);
@@ -30274,33 +30620,8 @@ function startWorktreeReaper(deps = prodReaperDeps) {
   timer.unref();
 }
 
-// src/services/session-result.ts
-init_db();
-import { randomUUID as randomUUID3 } from "node:crypto";
-var WHITELIST = [
-  "projectId",
-  "specId",
-  "oldStage",
-  "newStage",
-  "commitSha",
-  "branch",
-  "prUrl",
-  "status",
-  "deviceId",
-  "author"
-];
-async function recordSessionResult(input) {
-  const id = randomUUID3();
-  const data = { id };
-  for (const f of WHITELIST) if (input[f] !== void 0 && input[f] !== null) data[f] = input[f];
-  if (data.status === void 0) data.status = "done";
-  if (data.projectId === void 0) throw new Error("session result butuh projectId");
-  await prisma.sessionResult.create({ data });
-  await notifySynced("sessionResult", id);
-  return { id };
-}
-
 // src/routes/terminal.ts
+init_notifications();
 init_stage_machine();
 init_pty();
 var TERMINAL_WS_MESSAGES_PER_MINUTE = 6e3;
@@ -31011,6 +31332,7 @@ function computeDrift(prev, curr) {
 }
 
 // src/services/vps-audit.ts
+init_notifications();
 var CRITICAL = [
   "sudo_ok",
   "os_supported",
@@ -31274,12 +31596,9 @@ async function vps_default(app2) {
     return updated;
   });
   app2.delete("/vps/:id", async (req, reply) => {
-    try {
-      await prisma.vps.delete({ where: { id: req.params.id } });
-      return reply.code(204).send();
-    } catch {
-      return reply.code(404).send({ error: "not found" });
-    }
+    const { id } = req.params;
+    if (!await deleteSynced("vps", id)) return reply.code(404).send({ error: "not found" });
+    return reply.code(204).send();
   });
   app2.post("/vps/:id/audit", async (req, reply) => {
     const v = await prisma.vps.findUnique({ where: { id: req.params.id } });
@@ -31807,6 +32126,7 @@ async function update(app2) {
 
 // src/services/events.ts
 init_pty();
+init_notifications();
 
 // src/services/lead/deciding.ts
 var deciding = /* @__PURE__ */ new Set();
@@ -31975,7 +32295,7 @@ async function events_default(app2, opts) {
 // src/routes/device-tokens.ts
 init_src();
 init_db();
-var view = (t) => ({
+var view2 = (t) => ({
   id: t.id,
   name: t.name,
   createdAt: t.createdAt.toISOString(),
@@ -31983,7 +32303,7 @@ var view = (t) => ({
   revokedAt: t.revokedAt?.toISOString() ?? null
 });
 async function device_tokens_default(app2) {
-  app2.get("/device-tokens", async (req) => (await prisma.deviceToken.findMany({ where: { userId: req.user.id }, orderBy: { createdAt: "desc" } })).map(view));
+  app2.get("/device-tokens", async (req) => (await prisma.deviceToken.findMany({ where: { userId: req.user.id }, orderBy: { createdAt: "desc" } })).map(view2));
   app2.post("/device-tokens", async (req, reply) => {
     const p = zIssueDeviceToken.safeParse(req.body);
     if (!p.success) return reply.code(400).send({ error: p.error.flatten() });
@@ -32133,7 +32453,10 @@ var zPush = external_exports.object({
     entity: external_exports.string(),
     id: external_exports.string(),
     baseVersion: external_exports.number().int().nonnegative(),
-    data: external_exports.record(external_exports.unknown())
+    data: external_exports.record(external_exports.unknown()),
+    // SPEC-799 · ADR-0119 · absen = "upsert" (client versi lama). Hub versi lama membuang field ini
+    // dan sekadar memperlakukan push delete sebagai update — status quo, bukan galat.
+    op: external_exports.enum(["upsert", "delete"]).optional()
   }))
 });
 var AUTHORED = ["spec", "sessionResult"];
@@ -32163,7 +32486,7 @@ async function sync_default(app2) {
       }
       const data = { ...rec.data };
       if (AUTHORED.includes(rec.entity) && !data.author && user) data.author = user.email;
-      const r = await applyPush(rec.entity, rec.id, rec.baseVersion, data, req.device.id);
+      const r = await applyPush(rec.entity, rec.id, rec.baseVersion, data, req.device.id, rec.op ?? "upsert");
       results.push({ id: rec.id, ...r });
     }
     return { results };
@@ -32175,6 +32498,10 @@ async function sync_default(app2) {
     return { ok: true, full, ...stats2 };
   });
   app2.get("/sync/conflicts", async () => ({ conflicts: await listConflicts() }));
+  app2.get("/sync/pending", async () => {
+    const deletes = await listPendingDeletes();
+    return { deletes, total: deletes.length };
+  });
   const zResolve = external_exports.object({ choice: external_exports.enum(["local", "server"]) });
   app2.post("/sync/conflicts/:entity/:recordId/resolve", async (req, reply) => {
     const { entity, recordId } = req.params;
@@ -32225,7 +32552,7 @@ async function sync_default(app2) {
 
 // src/routes/session-results.ts
 init_db();
-var view2 = (r) => ({
+var view3 = (r) => ({
   id: r.id,
   projectId: r.projectId,
   specId: r.specId,
@@ -32248,7 +32575,7 @@ async function session_results_default(app2) {
       orderBy: { createdAt: "desc" },
       take: take2
     });
-    return rows.map(view2);
+    return rows.map(view3);
   });
   app2.delete("/session-results", async (req, reply) => {
     const { projectId, before: before2 } = req.query;
@@ -32260,8 +32587,10 @@ async function session_results_default(app2) {
       if (Number.isNaN(d.getTime())) return reply.code(400).send({ error: "before bukan tanggal valid" });
       where.createdAt = { lt: d };
     }
-    const { count } = await prisma.sessionResult.deleteMany({ where });
-    return { purged: count };
+    const rows = await prisma.sessionResult.findMany({ where, select: { id: true } });
+    let purged = 0;
+    for (const r of rows) if (await deleteSynced("sessionResult", r.id)) purged++;
+    return { purged };
   });
 }
 
@@ -32314,7 +32643,7 @@ async function deleteTranscript(key) {
 }
 
 // src/services/session-history.ts
-var view3 = (r) => ({
+var view4 = (r) => ({
   id: r.id,
   sessionId: r.sessionId,
   projectId: r.projectId,
@@ -32398,11 +32727,11 @@ async function listHistory(q) {
     skip: (page - 1) * pageSize,
     take: pageSize
   });
-  return { items: rows.map(view3), total, page, pageSize };
+  return { items: rows.map(view4), total, page, pageSize };
 }
 async function getHistory(id) {
   const r = await prisma.sessionHistory.findUnique({ where: { id } });
-  return r ? { ...view3(r), hasTranscript: !!r.transcriptKey } : null;
+  return r ? { ...view4(r), hasTranscript: !!r.transcriptKey } : null;
 }
 async function transcriptOf(id) {
   const r = await prisma.sessionHistory.findUnique({ where: { id }, select: { transcriptKey: true } });
@@ -32478,7 +32807,7 @@ init_config_apply();
 init_sync_client();
 var isSecret2 = (e) => e.kind === "secret";
 var agentBlocked = (req, e) => Boolean(req.agent) && e.category === "credential";
-function view4(e) {
+function view5(e) {
   const eff = effectiveStr(e.key);
   const base2 = {
     key: e.key,
@@ -32498,7 +32827,7 @@ function view4(e) {
 }
 async function config_default(app2) {
   app2.get("/config", async () => ({
-    entries: CONFIG_REGISTRY.map(view4),
+    entries: CONFIG_REGISTRY.map(view5),
     sync: syncStatus()
   }));
   app2.put("/config", async (req, reply) => {
@@ -32510,7 +32839,7 @@ async function config_default(app2) {
     const raw2 = b.value ?? "";
     if (isSecret2(entry) && raw2.trim() === "") {
       if (rawDbValue(entry.key) === void 0) return reply.code(400).send({ error: "tak boleh kosong" });
-      return view4(entry);
+      return view5(entry);
     }
     const parsed = parseConfigValue(entry, raw2);
     if (!parsed.ok) return reply.code(400).send({ error: parsed.error });
@@ -32520,11 +32849,11 @@ async function config_default(app2) {
       } catch (error) {
         return reply.code(400).send({ error: error.message });
       }
-      return view4(entry);
+      return view5(entry);
     }
     await setConfig(entry.key, parsed.value);
     await applyConfigSideEffect(entry.key);
-    return view4(entry);
+    return view5(entry);
   });
   app2.delete("/config/:key", async (req, reply) => {
     const { key } = req.params;
@@ -32590,6 +32919,7 @@ async function pruneOldTickets(now = Date.now()) {
 
 // src/services/ticket-intake.ts
 init_db();
+init_notifications();
 
 // src/services/upload-pipeline.ts
 import { randomUUID as randomUUID6 } from "node:crypto";
@@ -33823,25 +34153,25 @@ var cachedDecoders = {
 };
 var cachedEncoder = new globalThis.TextEncoder();
 var byteToHexLookupTable = Array.from({ length: 256 }, (_, index) => index.toString(16).padStart(2, "0"));
-function getUintBE(view11) {
-  const { byteLength } = view11;
+function getUintBE(view12) {
+  const { byteLength } = view12;
   if (byteLength === 6) {
-    return view11.getUint16(0) * 2 ** 32 + view11.getUint32(2);
+    return view12.getUint16(0) * 2 ** 32 + view12.getUint32(2);
   }
   if (byteLength === 5) {
-    return view11.getUint8(0) * 2 ** 32 + view11.getUint32(1);
+    return view12.getUint8(0) * 2 ** 32 + view12.getUint32(1);
   }
   if (byteLength === 4) {
-    return view11.getUint32(0);
+    return view12.getUint32(0);
   }
   if (byteLength === 3) {
-    return view11.getUint8(0) * 2 ** 16 + view11.getUint16(1);
+    return view12.getUint8(0) * 2 ** 16 + view12.getUint16(1);
   }
   if (byteLength === 2) {
-    return view11.getUint16(0);
+    return view12.getUint16(0);
   }
   if (byteLength === 1) {
-    return view11.getUint8(0);
+    return view12.getUint8(0);
   }
 }
 
@@ -40231,9 +40561,9 @@ async function help_default(app2) {
     return reply.code(201).send({ number: ticket.number, key, statusPath });
   });
   app2.get("/help/:slug/tickets/:key", async (req, reply) => {
-    const { slug, key } = req.params;
+    const { key } = req.params;
     const t = await prisma.ticket.findFirst({
-      where: { projectId: slug, OR: [{ accessKeyHash: hashAccessKey(key) }, { shareToken: key }] }
+      where: { OR: [{ accessKeyHash: hashAccessKey(key) }, { shareToken: key }] }
     });
     if (!t) return reply.code(404).send({ error: "not found" });
     let stage = null;
@@ -40326,7 +40656,7 @@ async function acceptTicket(t, opts) {
 
 // src/routes/tickets.ts
 init_src();
-var view5 = (t) => ({
+var view6 = (t) => ({
   id: t.id,
   projectId: t.projectId,
   number: t.number,
@@ -40338,7 +40668,7 @@ var view5 = (t) => ({
   attachmentCount: t._count?.attachments ?? 0,
   createdAt: t.createdAt.toISOString()
 });
-async function tickets_default(app2) {
+async function tickets_default(app2, opts = {}) {
   app2.get("/tickets", async (req) => {
     const { project, status, q, page, limit } = req.query;
     const where = {};
@@ -40354,7 +40684,7 @@ async function tickets_default(app2) {
       rows = rows.filter((t) => `${t.title} ${t.reporterEmail}`.toLowerCase().includes(n2));
     }
     const unreviewed = rows.filter((t) => t.status === "new").length;
-    return { ...paginate(rows.map(view5), page, limit), unreviewed };
+    return { ...paginate(rows.map(view6), page, limit), unreviewed };
   });
   app2.get("/tickets/:id", async (req, reply) => {
     const { id } = req.params;
@@ -40369,10 +40699,10 @@ async function tickets_default(app2) {
       shareToken = generateShareToken();
       await prisma.ticket.update({ where: { id }, data: { shareToken } });
     }
-    const base2 = `${req.protocol}://${req.headers.host ?? "localhost"}`;
+    const base2 = opts.publicBase ?? `${req.protocol}://${req.headers.host ?? "localhost"}`;
     const publicStatusUrl = `${base2}/help/${encodeURIComponent(t.projectId)}/status/${shareToken}`;
     return {
-      ...view5(t),
+      ...view6(t),
       detail: t.detail,
       attachments: t.attachments.map((a) => ({ id: a.id, filename: a.filename, mimeType: a.mimeType, size: a.size })),
       spec,
@@ -40432,7 +40762,7 @@ async function tickets_default(app2) {
     });
     const spec = updated.specId ? await prisma.spec.findUnique({ where: { id: updated.specId } }) : null;
     return {
-      ...view5(updated),
+      ...view6(updated),
       detail: updated.detail,
       attachments: updated.attachments.map((a) => ({ id: a.id, filename: a.filename, mimeType: a.mimeType, size: a.size })),
       spec
@@ -40443,7 +40773,7 @@ async function tickets_default(app2) {
     const t = await prisma.ticket.findUnique({ where: { id }, include: { attachments: true } });
     if (!t) return reply.code(404).send({ error: "not found" });
     for (const a of t.attachments) await deleteUpload(a.storageKey);
-    await prisma.ticket.delete({ where: { id } });
+    await deleteSynced("ticket", id);
     return { ok: true };
   });
 }
@@ -40550,6 +40880,7 @@ async function isQueued(id) {
 // src/services/scheduler/cron.ts
 init_db();
 init_src();
+init_notifications();
 var GRACE_MS = 30 * 6e4;
 function computeNextRun(expr, after) {
   const spec = parseCron(expr);
@@ -40900,6 +41231,7 @@ async function leadProjects() {
 init_src();
 init_db();
 init_pty();
+init_notifications();
 
 // src/services/lead/prompt.ts
 init_src();
@@ -41671,6 +42003,7 @@ init_src();
 init_db();
 init_pty();
 init_session_phases();
+init_notifications();
 
 // src/services/webhooks/actor.ts
 init_src();
@@ -41823,6 +42156,7 @@ Bukti integrasi: ${evidence.join("; ")} \u2192 ${verdict}.` }
 init_src();
 init_pty();
 init_tui_dialog();
+init_notifications();
 import { writeFileSync as writeFileSync6 } from "node:fs";
 
 // src/services/lead/pane.ts
@@ -42143,6 +42477,7 @@ function sweep(liveIds) {
 init_db();
 init_pty();
 init_session_phases();
+init_notifications();
 var moduleOf = (p) => p.split("/").slice(0, 2).join("/");
 function findCollisions(areas) {
   const out3 = [];
@@ -42410,6 +42745,7 @@ async function orderProject(projectId, deps) {
 }
 
 // src/services/lead/engine.ts
+init_notifications();
 var TICK_MS2 = 5e3;
 var busyDetect = false;
 var busyPulse = false;
@@ -42924,7 +43260,7 @@ async function generateChangelog(projectId, req, deps = {}) {
 }
 
 // src/routes/changelog.ts
-var view6 = (c) => ({
+var view7 = (c) => ({
   id: c.id,
   projectId: c.projectId,
   mode: c.mode,
@@ -42964,7 +43300,7 @@ async function changelog_default(app2) {
     if (!await prisma.project.findUnique({ where: { id } })) return reply.code(404).send({ error: "not found" });
     const { page, limit, q } = req.query;
     const rows = await prisma.changelog.findMany({ where: { projectId: id }, orderBy: { createdAt: "desc" } });
-    return paginate(rows.filter((r) => changelogMatches(r, q ?? "")).map(view6), page, limit);
+    return paginate(rows.filter((r) => changelogMatches(r, q ?? "")).map(view7), page, limit);
   });
   app2.get("/projects/:id/changelog/:cid", async (req, reply) => {
     const { id, cid } = req.params;
@@ -42978,7 +43314,7 @@ async function changelog_default(app2) {
       eyebrow: `hanoman \xB7 ${id} \xB7 changelog`,
       path: row.title
     });
-    return view6(row);
+    return view7(row);
   });
   app2.post("/projects/:id/changelog", async (req, reply) => {
     const { id } = req.params;
@@ -42987,7 +43323,7 @@ async function changelog_default(app2) {
     if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
     const r = await generateChangelog(id, parsed.data);
     if (!r.ok) return reply.code(422).send({ error: r.reason });
-    return reply.code(201).send(view6(r.row));
+    return reply.code(201).send(view7(r.row));
   });
   app2.delete("/projects/:id/changelog/:cid", async (req, reply) => {
     const { id, cid } = req.params;
@@ -43126,7 +43462,7 @@ async function installCustomAgents() {
 
 // src/routes/custom-agents.ts
 var rowsOf = async () => await prisma.customAgent.findMany();
-var view7 = (r, projectId) => ({
+var view8 = (r, projectId) => ({
   id: r.id,
   projectId: r.projectId,
   name: r.name,
@@ -43171,7 +43507,7 @@ async function custom_agents_default(app2) {
     const byName = /* @__PURE__ */ new Map();
     for (const r of rows) if (r.projectId === null) byName.set(r.name, r);
     for (const r of rows) if (r.projectId !== null) byName.set(r.name, r);
-    return [...byName.values()].sort((a, b) => a.name.localeCompare(b.name)).map((r) => view7(r, projectId));
+    return [...byName.values()].sort((a, b) => a.name.localeCompare(b.name)).map((r) => view8(r, projectId));
   });
   app2.post("/custom-agents", async (req, reply) => {
     const parsed = zCreateCustomAgent.safeParse(req.body);
@@ -43218,7 +43554,7 @@ async function custom_agents_default(app2) {
     } });
     await loadCustomAgents();
     await notifySynced("customAgent", id);
-    return reply.code(201).send(view7(row));
+    return reply.code(201).send(view8(row));
   });
   app2.patch("/custom-agents/:id", async (req, reply) => {
     const { id } = req.params;
@@ -43265,13 +43601,13 @@ async function custom_agents_default(app2) {
     } });
     await loadCustomAgents();
     await notifySynced("customAgent", id);
-    return view7(row);
+    return view8(row);
   });
   app2.delete("/custom-agents/:id", async (req, reply) => {
     const { id } = req.params;
     const existing = await prisma.customAgent.findUnique({ where: { id } });
     if (!existing) return reply.code(404).send({ error: "not found" });
-    await prisma.customAgent.delete({ where: { id } });
+    await deleteSynced("customAgent", id);
     const name2 = existing.name;
     for (const r of await rowsOf()) {
       const m = mentionsOf(r.mentions);
@@ -43606,7 +43942,7 @@ var STATUS = {
   unauthorized: 401,
   other: 502
 };
-var view8 = (i) => ({
+var view9 = (i) => ({
   id: i.id,
   projectId: i.projectId,
   repoSlug: i.repoSlug,
@@ -43641,7 +43977,7 @@ async function githubIssues(app2) {
       where: { projectId: id, ...status ? { status } : {} },
       orderBy: [{ number: "desc" }]
     });
-    return reply.send(paginate(items.map(view8), page, limit));
+    return reply.send(paginate(items.map(view9), page, limit));
   });
   app2.post("/github-issues/accept", async (req, reply) => {
     const parsed = zAcceptMany.safeParse(req.body ?? {});
@@ -44401,7 +44737,7 @@ async function portal_default(app2) {
 // src/routes/client-accounts.ts
 init_src();
 init_db();
-var view9 = (u) => ({
+var view10 = (u) => ({
   id: u.id,
   email: u.email,
   disabled: u.disabled,
@@ -44432,7 +44768,7 @@ async function client_accounts_default(app2) {
       orderBy: { createdAt: "asc" },
       include: { projectAccess: { select: { projectId: true } } }
     });
-    return { items: rows.map(view9) };
+    return { items: rows.map(view10) };
   });
   app2.post("/client-accounts", async (req, reply) => {
     const p = zCreateClientAccount.safeParse(req.body);
@@ -44446,7 +44782,7 @@ async function client_accounts_default(app2) {
       await prisma.user.delete({ where: { id: user.id } });
       return reply.code(400).send({ error: "ada project yang tidak dikenal" });
     }
-    return reply.code(201).send(view9(await load(user.id)));
+    return reply.code(201).send(view10(await load(user.id)));
   });
   app2.patch("/client-accounts/:id", async (req, reply) => {
     const { id } = req.params;
@@ -44460,7 +44796,7 @@ async function client_accounts_default(app2) {
     if (p.data.password)
       await prisma.user.update({ where: { id }, data: { passwordHash: await hashPassword(p.data.password) } });
     if (p.data.disabled || p.data.password) await deleteUserSessions(id);
-    return view9(await load(id));
+    return view10(await load(id));
   });
   app2.delete("/client-accounts/:id", async (req, reply) => {
     const { id } = req.params;
@@ -44556,7 +44892,7 @@ async function consumeSetupToken(home3) {
 
 // src/routes/auth.ts
 var BOOTSTRAP_USER_ID = "bootstrap-admin";
-var view10 = (u) => ({ id: u.id, email: u.email, role: u.role, createdAt: u.createdAt.toISOString() });
+var view11 = (u) => ({ id: u.id, email: u.email, role: u.role, createdAt: u.createdAt.toISOString() });
 async function issue(reply, userId) {
   const token = await createSession2(userId);
   reply.setCookie(COOKIE_NAME, token, cookieOpts());
@@ -44596,7 +44932,7 @@ async function auth_default(app2, opts) {
     if (opts.bootstrapRequired) await consumeSetupToken(opts.home);
     setupAttempts.clear(req.ip);
     await issue(reply, user.id);
-    return { user: view10(user) };
+    return { user: view11(user) };
   });
   app2.post("/auth/login", async (req, reply) => {
     if (loginThrottle(req.ip).blocked) return reply.code(429).send({ error: "too many attempts" });
@@ -44609,7 +44945,7 @@ async function auth_default(app2, opts) {
     }
     clearLoginFails(req.ip);
     await issue(reply, user.id);
-    return { user: view10(user) };
+    return { user: view11(user) };
   });
   app2.post("/auth/logout", async (req, reply) => {
     const token = req.cookies?.[COOKIE_NAME];
@@ -44617,7 +44953,7 @@ async function auth_default(app2, opts) {
     reply.clearCookie(COOKIE_NAME, { path: "/" });
     return reply.code(204).send();
   });
-  app2.get("/auth/users", async () => (await prisma.user.findMany({ orderBy: { createdAt: "asc" } })).map(view10));
+  app2.get("/auth/users", async () => (await prisma.user.findMany({ orderBy: { createdAt: "asc" } })).map(view11));
   app2.post("/auth/users", async (req, reply) => {
     const p = zSignup.safeParse(req.body);
     if (!p.success) return reply.code(400).send({ error: p.error.flatten() });
@@ -44628,7 +44964,7 @@ async function auth_default(app2, opts) {
       // (/api/client-accounts) supaya "undang rekan" dan "beri akses klien" tak pernah tertukar.
       data: { email: p.data.email, passwordHash: await hashPassword(p.data.password), role: "admin" }
     });
-    return view10(user);
+    return view11(user);
   });
   app2.delete("/auth/users/:id", async (req, reply) => {
     const target2 = await prisma.user.findUnique({ where: { id: req.params.id } });
@@ -44651,7 +44987,7 @@ async function auth_default(app2, opts) {
     });
     await deleteUserSessions(user.id);
     await issue(reply, user.id);
-    return { user: view10(user) };
+    return { user: view11(user) };
   });
 }
 
@@ -44664,15 +45000,15 @@ async function agent_tokens_default(app2) {
   app2.post("/agent-tokens", async (req, reply) => {
     const p = zAgentTokenCreate.safeParse(req.body);
     if (!p.success) return reply.code(400).send({ error: p.error.flatten() });
-    const { view: view11, token } = await issueAgentToken({ ...p.data, createdBy: req.user?.id });
-    return reply.code(201).send({ ...view11, token });
+    const { view: view12, token } = await issueAgentToken({ ...p.data, createdBy: req.user?.id });
+    return reply.code(201).send({ ...view12, token });
   });
   app2.patch("/agent-tokens/:id", async (req, reply) => {
     const p = zAgentTokenPatch.safeParse(req.body);
     if (!p.success) return reply.code(400).send({ error: p.error.flatten() });
     const { id } = req.params;
-    const view11 = await patchAgentToken(id, p.data);
-    return view11 ? reply.send(view11) : reply.code(404).send({ error: "not found" });
+    const view12 = await patchAgentToken(id, p.data);
+    return view12 ? reply.send(view12) : reply.code(404).send({ error: "not found" });
   });
   app2.delete("/agent-tokens/:id", async (req, reply) => {
     const { id } = req.params;
@@ -44881,22 +45217,31 @@ init_runtime();
 
 // src/services/ingress-policy.ts
 function origins(value, key) {
-  const out3 = /* @__PURE__ */ new Set();
+  const out3 = [];
   for (const raw2 of value?.split(",") ?? []) {
     const input = raw2.trim();
     if (!input) continue;
     const parsed = new URL(input);
     if (!/^https?:$/.test(parsed.protocol) || parsed.username || parsed.password || parsed.pathname !== "/")
       throw new Error(`${key} harus berisi exact http(s) origin`);
-    out3.add(parsed.host.toLowerCase());
+    out3.push({ host: parsed.host.toLowerCase(), base: `${parsed.protocol}//${parsed.host}` });
   }
   return out3;
 }
 function loadIngressPolicy(env) {
-  const publicHosts = origins(env.HANOMAN_PUBLIC_ORIGINS, "HANOMAN_PUBLIC_ORIGINS");
-  const controlHosts = origins(env.HANOMAN_CONTROL_ORIGINS, "HANOMAN_CONTROL_ORIGINS");
+  const pub = origins(env.HANOMAN_PUBLIC_ORIGINS, "HANOMAN_PUBLIC_ORIGINS");
+  const control = origins(env.HANOMAN_CONTROL_ORIGINS, "HANOMAN_CONTROL_ORIGINS");
+  const publicHosts = new Set(pub.map((o) => o.host));
+  const controlHosts = new Set(control.map((o) => o.host));
   for (const host2 of publicHosts) if (controlHosts.has(host2)) throw new Error("public dan control origin harus berbeda");
-  return { publicHosts, controlHosts, enforce: publicHosts.size > 0 || controlHosts.size > 0 };
+  return {
+    publicHosts,
+    controlHosts,
+    // SPEC-805 · origin publik pertama, lengkap dengan scheme-nya: satu-satunya basis sah untuk
+    // link status yang dibagikan operator, yang selalu lahir di request ber-host control.
+    publicBase: pub[0]?.base ?? null,
+    enforce: publicHosts.size > 0 || controlHosts.size > 0
+  };
 }
 function publicPath(method, path2) {
   if (method === "GET" && path2 === "/api/health") return true;
@@ -44908,7 +45253,8 @@ function classifyIngress(req, policy) {
   const host2 = req.host.trim().toLowerCase();
   const path2 = req.url.split("?")[0] ?? req.url;
   if (policy.publicHosts.has(host2)) return publicPath(req.method, path2) ? "public" : "denied";
-  if (policy.controlHosts.has(host2)) return publicPath(req.method, path2) && path2.startsWith("/api/help") ? "denied" : "control";
+  if (policy.controlHosts.has(host2))
+    return policy.publicBase && path2.startsWith("/api/help") ? "denied" : "control";
   return "denied";
 }
 function trustProxyFromEnv(env) {
@@ -44941,6 +45287,8 @@ function buildApp({ requireAuth = true, agentDocFile, env = process.env } = {})
   app2.addHook("onRequest", async (req, reply) => {
     const role = classifyIngress({ host: req.headers.host ?? "", method: req.method, url: req.url }, ingress);
     if (role === "denied") return reply.code(404).send({ error: "not found" });
+    if (role === "control" && ingress.publicBase && req.url.startsWith("/help/"))
+      return reply.redirect(`${ingress.publicBase}${req.url}`, 302);
   });
   app2.addContentTypeParser("application/json", { parseAs: "string" }, (_req, body, done) => {
     if (!body) return done(null, void 0);
@@ -44971,7 +45319,7 @@ function buildApp({ requireAuth = true, agentDocFile, env = process.env } = {})
         if (PUBLIC.has(`${req.method} ${path2}`)) return;
         if (user?.role === "client" && !clientRouteAllowed(req.method, path2))
           return reply.code(403).send({ error: "portal klien: baca-saja" });
-        if (path2.startsWith("/api/sync") && path2 !== "/api/sync/now" && !path2.startsWith("/api/sync/conflicts")) return;
+        if (path2.startsWith("/api/sync") && path2 !== "/api/sync/now" && path2 !== "/api/sync/pending" && !path2.startsWith("/api/sync/conflicts")) return;
         if (path2.startsWith("/api/help")) return;
         if (user) return;
         const agentTok = agentTokenFromReq(req);
@@ -45020,7 +45368,7 @@ function buildApp({ requireAuth = true, agentDocFile, env = process.env } = {})
     await api.register(session_history_default);
     await api.register(config_default);
     await api.register(help_default);
-    await api.register(tickets_default);
+    await api.register(tickets_default, { publicBase: ingress.publicBase });
     await api.register(scheduler_default);
     await api.register(codex);
     await api.register(methods);
@@ -45085,6 +45433,7 @@ init_src();
 
 // src/services/scheduler/governor.ts
 init_db();
+init_notifications();
 var ALREADY_DONE_NOTE = "spec sudah selesai \u2014 tak diluncurkan";
 var canceledRaceNote = (sessionId2) => `dibatalkan saat sesi ${sessionId2} sudah terlanjur lahir \u2014 sesi dibiarkan hidup, tutup dari Terminal bila tak diperlukan`;
 var CAP_FULL_NOTE = "cap penuh \u2014 tak ada slot sesi";
@@ -45219,6 +45568,7 @@ async function startCronSession(cron) {
 // src/services/scheduler/reconcile.ts
 init_db();
 init_src2();
+init_notifications();
 init_stage_machine();
 init_pty();
 init_session_phases();
@@ -45282,6 +45632,7 @@ var reconcileProdDeps = {
 };
 
 // src/services/scheduler/engine.ts
+init_notifications();
 init_pty();
 var prodEnd = {
   reconcile: () => reconcile(reconcileProdDeps),
@@ -45656,6 +46007,7 @@ init_src();
 init_db();
 import { execFile as execFile13 } from "node:child_process";
 import { promisify as promisify12 } from "node:util";
+init_notifications();
 var AUTO_MERGE_WINDOW_MS = 24 * 60 * 60 * 1e3;
 var AUTO_MERGE_GRACE_MS = 15 * 60 * 1e3;
 var TICK_MS5 = 6e4;
@@ -45709,6 +46061,7 @@ async function sweepAutoMerge(deps = prodAutoMergeDeps, now = /* @__PURE__ */ ne
 async function settleOne(c, deps, now) {
   const spec = await prisma.spec.findUnique({ where: { id: c.specId } });
   if (!spec || spec.stage !== "done") return false;
+  if (spec.manualDone) return false;
   const project = await prisma.project.findUnique({ where: { id: spec.projectId } });
   if (!project) return false;
   const policy = resolveAutoMerge(