hanoman 0.1.4 → 0.1.6

package/dist/cli.js

@@ -63,6 +63,13 @@ var init_verify_scope = __esm({
   }
 });
 
+// ../runner/src/goal-spec.ts
+var init_goal_spec = __esm({
+  "../runner/src/goal-spec.ts"() {
+    "use strict";
+  }
+});
+
 // ../runner/src/prompt.ts
 var ESCALATION_CONTRACT, REVERSE_PHASE_GUIDE, SCAFFOLD_PHASE_GUIDE;
 var init_prompt = __esm({
@@ -70,6 +77,7 @@ var init_prompt = __esm({
     "use strict";
     init_reverse_standard();
     init_verify_scope();
+    init_goal_spec();
     ESCALATION_CONTRACT = [
       "REKOMENDASI ESKALASI (wajib, terbaca mesin). Di bagian akhir dokumen audit, tulis bagian",
       "`## Rekomendasi eskalasi` berisi penjelasan singkat untuk manusia, LALU tepat SATU blok ```json",
@@ -126,6 +134,7 @@ var init_goal = __esm({
   "../runner/src/goal.ts"() {
     "use strict";
     init_prompt();
+    init_goal_spec();
   }
 });
 
@@ -213,6 +222,7 @@ var init_src = __esm({
     init_git();
     init_settings();
     init_goal();
+    init_goal_spec();
     init_codex_settings();
     init_agent_cli();
     init_verify_scope();
@@ -220,834 +230,506 @@ var init_src = __esm({
   }
 });
 
-// src/layout.ts
-import { join as join2, resolve as resolve2 } from "node:path";
-function resolveLayout(distDir2, exists) {
-  const pkg = resolve2(distDir2, "..");
-  if (exists(join2(pkg, "prisma", "schema.prisma"))) {
-    return {
-      root: pkg,
-      schema: join2(pkg, "prisma", "schema.prisma"),
-      server: join2(pkg, "dist", "server.js"),
-      web: exists(join2(pkg, "web")) ? join2(pkg, "web") : null
-    };
-  }
-  const repo = resolve2(distDir2, "../..");
-  if (exists(join2(repo, "server", "prisma", "schema.prisma"))) {
-    return {
-      root: repo,
-      schema: join2(repo, "server", "prisma", "schema.prisma"),
-      server: join2(repo, "server", "dist", "server.js"),
-      web: exists(join2(repo, "src", "dist")) ? join2(repo, "src", "dist") : null
+// ../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/util.js
+var util, objectUtil, ZodParsedType, getParsedType;
+var init_util = __esm({
+  "../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/util.js"() {
+    (function(util2) {
+      util2.assertEqual = (_) => {
+      };
+      function assertIs(_arg) {
+      }
+      util2.assertIs = assertIs;
+      function assertNever(_x) {
+        throw new Error();
+      }
+      util2.assertNever = assertNever;
+      util2.arrayToEnum = (items) => {
+        const obj = {};
+        for (const item of items) {
+          obj[item] = item;
+        }
+        return obj;
+      };
+      util2.getValidEnumValues = (obj) => {
+        const validKeys = util2.objectKeys(obj).filter((k) => typeof obj[obj[k]] !== "number");
+        const filtered = {};
+        for (const k of validKeys) {
+          filtered[k] = obj[k];
+        }
+        return util2.objectValues(filtered);
+      };
+      util2.objectValues = (obj) => {
+        return util2.objectKeys(obj).map(function(e) {
+          return obj[e];
+        });
+      };
+      util2.objectKeys = typeof Object.keys === "function" ? (obj) => Object.keys(obj) : (object) => {
+        const keys = [];
+        for (const key in object) {
+          if (Object.prototype.hasOwnProperty.call(object, key)) {
+            keys.push(key);
+          }
+        }
+        return keys;
+      };
+      util2.find = (arr, checker) => {
+        for (const item of arr) {
+          if (checker(item))
+            return item;
+        }
+        return void 0;
+      };
+      util2.isInteger = typeof Number.isInteger === "function" ? (val) => Number.isInteger(val) : (val) => typeof val === "number" && Number.isFinite(val) && Math.floor(val) === val;
+      function joinValues(array, separator = " | ") {
+        return array.map((val) => typeof val === "string" ? `'${val}'` : val).join(separator);
+      }
+      util2.joinValues = joinValues;
+      util2.jsonStringifyReplacer = (_, value) => {
+        if (typeof value === "bigint") {
+          return value.toString();
+        }
+        return value;
+      };
+    })(util || (util = {}));
+    (function(objectUtil2) {
+      objectUtil2.mergeShapes = (first, second) => {
+        return {
+          ...first,
+          ...second
+          // second overwrites first
+        };
+      };
+    })(objectUtil || (objectUtil = {}));
+    ZodParsedType = util.arrayToEnum([
+      "string",
+      "nan",
+      "number",
+      "integer",
+      "float",
+      "boolean",
+      "date",
+      "bigint",
+      "symbol",
+      "function",
+      "undefined",
+      "null",
+      "array",
+      "object",
+      "unknown",
+      "promise",
+      "void",
+      "never",
+      "map",
+      "set"
+    ]);
+    getParsedType = (data) => {
+      const t = typeof data;
+      switch (t) {
+        case "undefined":
+          return ZodParsedType.undefined;
+        case "string":
+          return ZodParsedType.string;
+        case "number":
+          return Number.isNaN(data) ? ZodParsedType.nan : ZodParsedType.number;
+        case "boolean":
+          return ZodParsedType.boolean;
+        case "function":
+          return ZodParsedType.function;
+        case "bigint":
+          return ZodParsedType.bigint;
+        case "symbol":
+          return ZodParsedType.symbol;
+        case "object":
+          if (Array.isArray(data)) {
+            return ZodParsedType.array;
+          }
+          if (data === null) {
+            return ZodParsedType.null;
+          }
+          if (data.then && typeof data.then === "function" && data.catch && typeof data.catch === "function") {
+            return ZodParsedType.promise;
+          }
+          if (typeof Map !== "undefined" && data instanceof Map) {
+            return ZodParsedType.map;
+          }
+          if (typeof Set !== "undefined" && data instanceof Set) {
+            return ZodParsedType.set;
+          }
+          if (typeof Date !== "undefined" && data instanceof Date) {
+            return ZodParsedType.date;
+          }
+          return ZodParsedType.object;
+        default:
+          return ZodParsedType.unknown;
+      }
     };
   }
-  throw new Error(`hanoman: prisma/schema.prisma tak ditemukan dari ${distDir2} \u2014 instalasi rusak?`);
-}
-var init_layout = __esm({
-  "src/layout.ts"() {
-    "use strict";
-  }
 });
 
-// src/commands/start.ts
-var start_exports = {};
-__export(start_exports, {
-  applyMigrations: () => applyMigrations,
-  default: () => start,
-  distDir: () => distDir,
-  ensurePrismaClient: () => ensurePrismaClient,
-  ensureSpawnHelpersExecutable: () => ensureSpawnHelpersExecutable,
-  migrateFailureHint: () => migrateFailureHint,
-  parseStartArgs: () => parseStartArgs,
-  prismaClientUsable: () => prismaClientUsable,
-  repairSpawnHelper: () => repairSpawnHelper,
-  spawnHelperPaths: () => spawnHelperPaths
-});
-import { spawn, execFileSync } from "node:child_process";
-import { createRequire } from "node:module";
-import { existsSync, mkdirSync, readdirSync, statSync, chmodSync } from "node:fs";
-import { dirname as dirname2, join as join3, resolve as resolvePath } from "node:path";
-import { fileURLToPath } from "node:url";
-function parseStartArgs(argv) {
-  const out = { port: null, host: null, db: null, migrate: true };
-  const value = (i, flag, inline) => {
-    const v = inline ?? argv[i + 1];
-    if (v === void 0 || v.startsWith("--")) throw new Error(`${flag} butuh nilai`);
-    return v;
-  };
-  for (let i = 0; i < argv.length; i++) {
-    const raw = argv[i];
-    const eq = raw.indexOf("=");
-    const flag = eq === -1 ? raw : raw.slice(0, eq);
-    const inline = eq === -1 ? void 0 : raw.slice(eq + 1);
-    if (flag === "--no-migrate") {
-      out.migrate = false;
-      continue;
-    }
-    if (flag === "--port") {
-      const v = value(i, "--port", inline);
-      const n = Number(v);
-      if (!Number.isInteger(n) || n <= 0) throw new Error(`--port harus angka, dapat "${v}"`);
-      out.port = n;
-      if (inline === void 0) i++;
-      continue;
-    }
-    if (flag === "--host") {
-      out.host = value(i, "--host", inline);
-      if (inline === void 0) i++;
-      continue;
-    }
-    if (flag === "--db") {
-      out.db = value(i, "--db", inline);
-      if (inline === void 0) i++;
-      continue;
-    }
-    throw new Error(`argumen tak dikenal untuk start: ${raw}`);
-  }
-  return out;
-}
-function distDir() {
-  return dirname2(fileURLToPath(import.meta.url));
-}
-function runPrisma(args, dbUrl) {
-  const prismaCli = prismaCliPath(createRequire(import.meta.url).resolve);
-  try {
-    const out = execFileSync(process.execPath, [prismaCli, ...args], {
-      env: { ...process.env, DATABASE_URL: dbUrl },
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "pipe"]
-    });
-    process.stdout.write(out);
-    return out;
-  } catch (e) {
-    const err = e;
-    const output = `${err.stdout ?? ""}${err.stderr ?? ""}`;
-    process.stderr.write(output);
-    throw Object.assign(new Error("prisma gagal"), { output });
-  }
-}
-function migrateFailureHint(output, dbFile) {
-  if (!output.includes("P3005")) return null;
-  return `hanoman: berkas DB ${dbFile} sudah berisi tabel, tapi tak punya riwayat migrasi hanoman.
-Biasanya ia bukan DB hanoman versi ini \u2014 mis. sisa prototipe lama atau berkas tool lain.
-Pilih salah satu:
-  \u2022 Pindahkan berkas itu, lalu jalankan ulang:  mv "${dbFile}" "${dbFile}.lama"
-  \u2022 Pakai berkas lain:  hanoman --db /path/baru.db  (atau HANOMAN_DATABASE_URL=file:/path/baru.db)
-Isi berkas lama tidak diubah oleh hanoman \u2014 periksa dulu sebelum menghapusnya.`;
-}
-function applyMigrations(schema, dbUrl) {
-  runPrisma(["migrate", "deploy", "--schema", schema], dbUrl);
-}
-async function prismaClientUsable() {
-  try {
-    const { PrismaClient } = await import("@prisma/client");
-    new PrismaClient();
-    return true;
-  } catch {
-    return false;
+// ../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/ZodError.js
+var ZodIssueCode, quotelessJson, ZodError;
+var init_ZodError = __esm({
+  "../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/ZodError.js"() {
+    init_util();
+    ZodIssueCode = util.arrayToEnum([
+      "invalid_type",
+      "invalid_literal",
+      "custom",
+      "invalid_union",
+      "invalid_union_discriminator",
+      "invalid_enum_value",
+      "unrecognized_keys",
+      "invalid_arguments",
+      "invalid_return_type",
+      "invalid_date",
+      "invalid_string",
+      "too_small",
+      "too_big",
+      "invalid_intersection_types",
+      "not_multiple_of",
+      "not_finite"
+    ]);
+    quotelessJson = (obj) => {
+      const json = JSON.stringify(obj, null, 2);
+      return json.replace(/"([^"]+)":/g, "$1:");
+    };
+    ZodError = class _ZodError extends Error {
+      get errors() {
+        return this.issues;
+      }
+      constructor(issues) {
+        super();
+        this.issues = [];
+        this.addIssue = (sub) => {
+          this.issues = [...this.issues, sub];
+        };
+        this.addIssues = (subs = []) => {
+          this.issues = [...this.issues, ...subs];
+        };
+        const actualProto = new.target.prototype;
+        if (Object.setPrototypeOf) {
+          Object.setPrototypeOf(this, actualProto);
+        } else {
+          this.__proto__ = actualProto;
+        }
+        this.name = "ZodError";
+        this.issues = issues;
+      }
+      format(_mapper) {
+        const mapper = _mapper || function(issue) {
+          return issue.message;
+        };
+        const fieldErrors = { _errors: [] };
+        const processError = (error) => {
+          for (const issue of error.issues) {
+            if (issue.code === "invalid_union") {
+              issue.unionErrors.map(processError);
+            } else if (issue.code === "invalid_return_type") {
+              processError(issue.returnTypeError);
+            } else if (issue.code === "invalid_arguments") {
+              processError(issue.argumentsError);
+            } else if (issue.path.length === 0) {
+              fieldErrors._errors.push(mapper(issue));
+            } else {
+              let curr = fieldErrors;
+              let i = 0;
+              while (i < issue.path.length) {
+                const el = issue.path[i];
+                const terminal = i === issue.path.length - 1;
+                if (!terminal) {
+                  curr[el] = curr[el] || { _errors: [] };
+                } else {
+                  curr[el] = curr[el] || { _errors: [] };
+                  curr[el]._errors.push(mapper(issue));
+                }
+                curr = curr[el];
+                i++;
+              }
+            }
+          }
+        };
+        processError(this);
+        return fieldErrors;
+      }
+      static assert(value) {
+        if (!(value instanceof _ZodError)) {
+          throw new Error(`Not a ZodError: ${value}`);
+        }
+      }
+      toString() {
+        return this.message;
+      }
+      get message() {
+        return JSON.stringify(this.issues, util.jsonStringifyReplacer, 2);
+      }
+      get isEmpty() {
+        return this.issues.length === 0;
+      }
+      flatten(mapper = (issue) => issue.message) {
+        const fieldErrors = {};
+        const formErrors = [];
+        for (const sub of this.issues) {
+          if (sub.path.length > 0) {
+            const firstEl = sub.path[0];
+            fieldErrors[firstEl] = fieldErrors[firstEl] || [];
+            fieldErrors[firstEl].push(mapper(sub));
+          } else {
+            formErrors.push(mapper(sub));
+          }
+        }
+        return { formErrors, fieldErrors };
+      }
+      get formErrors() {
+        return this.flatten();
+      }
+    };
+    ZodError.create = (issues) => {
+      const error = new ZodError(issues);
+      return error;
+    };
   }
-}
-async function ensurePrismaClient(schema, dbUrl, ctx) {
-  if (await prismaClientUsable()) return true;
-  ctx.stdout("hanoman \xB7 menyiapkan Prisma client (sekali per instalasi)\n");
-  try {
-    runPrisma(["generate", "--schema", schema], dbUrl);
-    return true;
-  } catch {
-    ctx.stderr("hanoman: `prisma generate` gagal \u2014 jalankan manual di direktori paket, atau pasang ulang tanpa --ignore-scripts\n");
-    return false;
+});
+
+// ../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/locales/en.js
+var errorMap, en_default;
+var init_en = __esm({
+  "../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/locales/en.js"() {
+    init_ZodError();
+    init_util();
+    errorMap = (issue, _ctx) => {
+      let message;
+      switch (issue.code) {
+        case ZodIssueCode.invalid_type:
+          if (issue.received === ZodParsedType.undefined) {
+            message = "Required";
+          } else {
+            message = `Expected ${issue.expected}, received ${issue.received}`;
+          }
+          break;
+        case ZodIssueCode.invalid_literal:
+          message = `Invalid literal value, expected ${JSON.stringify(issue.expected, util.jsonStringifyReplacer)}`;
+          break;
+        case ZodIssueCode.unrecognized_keys:
+          message = `Unrecognized key(s) in object: ${util.joinValues(issue.keys, ", ")}`;
+          break;
+        case ZodIssueCode.invalid_union:
+          message = `Invalid input`;
+          break;
+        case ZodIssueCode.invalid_union_discriminator:
+          message = `Invalid discriminator value. Expected ${util.joinValues(issue.options)}`;
+          break;
+        case ZodIssueCode.invalid_enum_value:
+          message = `Invalid enum value. Expected ${util.joinValues(issue.options)}, received '${issue.received}'`;
+          break;
+        case ZodIssueCode.invalid_arguments:
+          message = `Invalid function arguments`;
+          break;
+        case ZodIssueCode.invalid_return_type:
+          message = `Invalid function return type`;
+          break;
+        case ZodIssueCode.invalid_date:
+          message = `Invalid date`;
+          break;
+        case ZodIssueCode.invalid_string:
+          if (typeof issue.validation === "object") {
+            if ("includes" in issue.validation) {
+              message = `Invalid input: must include "${issue.validation.includes}"`;
+              if (typeof issue.validation.position === "number") {
+                message = `${message} at one or more positions greater than or equal to ${issue.validation.position}`;
+              }
+            } else if ("startsWith" in issue.validation) {
+              message = `Invalid input: must start with "${issue.validation.startsWith}"`;
+            } else if ("endsWith" in issue.validation) {
+              message = `Invalid input: must end with "${issue.validation.endsWith}"`;
+            } else {
+              util.assertNever(issue.validation);
+            }
+          } else if (issue.validation !== "regex") {
+            message = `Invalid ${issue.validation}`;
+          } else {
+            message = "Invalid";
+          }
+          break;
+        case ZodIssueCode.too_small:
+          if (issue.type === "array")
+            message = `Array must contain ${issue.exact ? "exactly" : issue.inclusive ? `at least` : `more than`} ${issue.minimum} element(s)`;
+          else if (issue.type === "string")
+            message = `String must contain ${issue.exact ? "exactly" : issue.inclusive ? `at least` : `over`} ${issue.minimum} character(s)`;
+          else if (issue.type === "number")
+            message = `Number must be ${issue.exact ? `exactly equal to ` : issue.inclusive ? `greater than or equal to ` : `greater than `}${issue.minimum}`;
+          else if (issue.type === "bigint")
+            message = `Number must be ${issue.exact ? `exactly equal to ` : issue.inclusive ? `greater than or equal to ` : `greater than `}${issue.minimum}`;
+          else if (issue.type === "date")
+            message = `Date must be ${issue.exact ? `exactly equal to ` : issue.inclusive ? `greater than or equal to ` : `greater than `}${new Date(Number(issue.minimum))}`;
+          else
+            message = "Invalid input";
+          break;
+        case ZodIssueCode.too_big:
+          if (issue.type === "array")
+            message = `Array must contain ${issue.exact ? `exactly` : issue.inclusive ? `at most` : `less than`} ${issue.maximum} element(s)`;
+          else if (issue.type === "string")
+            message = `String must contain ${issue.exact ? `exactly` : issue.inclusive ? `at most` : `under`} ${issue.maximum} character(s)`;
+          else if (issue.type === "number")
+            message = `Number must be ${issue.exact ? `exactly` : issue.inclusive ? `less than or equal to` : `less than`} ${issue.maximum}`;
+          else if (issue.type === "bigint")
+            message = `BigInt must be ${issue.exact ? `exactly` : issue.inclusive ? `less than or equal to` : `less than`} ${issue.maximum}`;
+          else if (issue.type === "date")
+            message = `Date must be ${issue.exact ? `exactly` : issue.inclusive ? `smaller than or equal to` : `smaller than`} ${new Date(Number(issue.maximum))}`;
+          else
+            message = "Invalid input";
+          break;
+        case ZodIssueCode.custom:
+          message = `Invalid input`;
+          break;
+        case ZodIssueCode.invalid_intersection_types:
+          message = `Intersection results could not be merged`;
+          break;
+        case ZodIssueCode.not_multiple_of:
+          message = `Number must be a multiple of ${issue.multipleOf}`;
+          break;
+        case ZodIssueCode.not_finite:
+          message = "Number must be finite";
+          break;
+        default:
+          message = _ctx.defaultError;
+          util.assertNever(issue);
+      }
+      return { message };
+    };
+    en_default = errorMap;
   }
+});
+
+// ../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/errors.js
+function setErrorMap(map) {
+  overrideErrorMap = map;
 }
-function spawnHelperPaths(ptyDir, listDir, exists) {
-  const dirs = [join3(ptyDir, "build", "Release")];
-  for (const name of listDir(join3(ptyDir, "prebuilds"))) dirs.push(join3(ptyDir, "prebuilds", name));
-  return dirs.map((d) => join3(d, "spawn-helper")).filter(exists);
+function getErrorMap() {
+  return overrideErrorMap;
 }
-function ensureSpawnHelpersExecutable(paths2, ops) {
-  const fixed = [];
-  for (const p of paths2) {
-    try {
-      const mode = ops.mode(p) & 4095;
-      if ((mode & 73) === 73) continue;
-      ops.chmod(p, mode | 73);
-      fixed.push(p);
-    } catch {
-    }
-  }
-  return fixed;
-}
-function repairSpawnHelper(ctx) {
-  let ptyDir;
-  try {
-    ptyDir = dirname2(createRequire(import.meta.url).resolve("node-pty/package.json"));
-  } catch {
-    return;
-  }
-  const paths2 = spawnHelperPaths(ptyDir, (d) => {
-    try {
-      return readdirSync(d);
-    } catch {
-      return [];
-    }
-  }, existsSync);
-  const fixed = ensureSpawnHelpersExecutable(paths2, {
-    mode: (p) => statSync(p).mode,
-    chmod: (p, m) => chmodSync(p, m)
-  });
-  if (fixed.length) ctx.stdout("hanoman \xB7 memperbaiki izin `spawn-helper` node-pty (sekali per instalasi)\n");
-}
-async function start(argv, ctx) {
-  let opts;
-  try {
-    opts = parseStartArgs(argv);
-  } catch (e) {
-    ctx.stderr(`${e.message}
-`);
-    return 2;
-  }
-  let layout;
-  let dbUrl;
-  try {
-    layout = resolveLayout(distDir(), existsSync);
-    dbUrl = opts.db ? `file:${resolvePath(opts.db)}` : resolveDbUrl(ctx.env, dirname2(layout.schema));
-  } catch (e) {
-    ctx.stderr(`${e.message}
-`);
-    return 1;
-  }
-  const notice = dbUrlNotice(ctx.env);
-  if (notice) ctx.stderr(`${notice}
-`);
-  const home = resolveHome(ctx.env);
-  mkdirSync(home, { recursive: true });
-  mkdirSync(dirname2(dbFilePath(dbUrl)), { recursive: true });
-  if (!existsSync(layout.server)) {
-    ctx.stderr(`hanoman: bundle server tak ada di ${layout.server} \u2014 jalankan \`pnpm build\` dulu
-`);
-    return 1;
-  }
-  if (!await ensurePrismaClient(layout.schema, dbUrl, ctx)) return 1;
-  repairSpawnHelper(ctx);
-  if (opts.migrate) {
-    ctx.stdout(`hanoman \xB7 menerapkan migrasi ke ${dbFilePath(dbUrl)}
-`);
-    try {
-      applyMigrations(layout.schema, dbUrl);
-    } catch (e) {
-      const hint = migrateFailureHint(String(e.output ?? ""), dbFilePath(dbUrl));
-      ctx.stderr(hint ? `
-${hint}
-` : "hanoman: `prisma migrate deploy` gagal \u2014 lihat keluaran di atas\n");
-      return 1;
-    }
-  }
-  const port = opts.port ?? Number(ctx.env.PORT ?? 8787);
-  const host = opts.host ?? ctx.env.HOST ?? "127.0.0.1";
-  ctx.stdout(`hanoman \xB7 http://${host === "0.0.0.0" ? "127.0.0.1" : host}:${port}
-`);
-  const child = spawn(process.execPath, [layout.server], {
-    stdio: "inherit",
-    env: {
-      ...process.env,
-      NODE_ENV: "production",
-      DATABASE_URL: dbUrl,
-      PORT: String(port),
-      HOST: host,
-      HANOMAN_HOME: home,
-      ...layout.web ? { HANOMAN_WEB_DIR: layout.web } : {}
-    }
-  });
-  for (const sig of ["SIGINT", "SIGTERM"]) process.on(sig, () => child.kill(sig));
-  return await new Promise((res) => child.on("exit", (code) => res(code ?? 0)));
-}
-var init_start = __esm({
-  "src/commands/start.ts"() {
-    "use strict";
-    init_src();
-    init_layout();
+var overrideErrorMap;
+var init_errors = __esm({
+  "../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/errors.js"() {
+    init_en();
+    overrideErrorMap = en_default;
   }
 });
 
-// src/commands/doctor.ts
-var doctor_exports = {};
-__export(doctor_exports, {
-  default: () => doctor,
-  doctorReport: () => doctorReport
-});
-import { execFileSync as execFileSync2 } from "node:child_process";
-import { accessSync, constants, existsSync as existsSync2 } from "node:fs";
-import { dirname as dirname3 } from "node:path";
-function doctorReport(p) {
-  const major = Number(/^v?(\d+)/.exec(p.node)?.[1] ?? 0);
-  const rows = [
-    { mark: major >= 20 ? "\u2713" : "\u2717", text: `node ${p.node} (butuh \u2265 20)`, fatal: major < 20 },
-    { mark: p.git ? "\u2713" : "\u2717", text: p.git ?? "git \u2014 TAK ADA (wajib: worktree per sesi)", fatal: !p.git },
-    { mark: p.tmux ? "\u2713" : "\u2717", text: p.tmux ?? "tmux \u2014 TAK ADA (wajib: sesi agen hidup di tmux)", fatal: !p.tmux },
-    { mark: p.claude ? "\u2713" : "\xB7", text: p.claude ? `claude ${p.claude}` : "claude \u2014 tak ada", fatal: false },
-    { mark: p.codex ? "\u2713" : "\xB7", text: p.codex ? `codex ${p.codex}` : "codex \u2014 tak ada", fatal: false },
-    { mark: p.homeWritable ? "\u2713" : "\u2717", text: `data dir ${p.homeWritable ? "bisa ditulis" : "TAK bisa ditulis"}`, fatal: !p.homeWritable },
-    { mark: p.web ? "\u2713" : "!", text: p.web ? "aset dashboard ada" : "aset dashboard tak ada \u2014 API jalan, dashboard tidak", fatal: false },
-    { mark: "\xB7", text: `db ${p.db}`, fatal: false }
-  ];
-  if (!p.claude && !p.codex) {
-    rows.push({ mark: "\u2717", text: "tak ada CLI agen (claude ATAU codex wajib ada)", fatal: true });
-  }
-  return { lines: rows.map((r) => `  ${r.mark} ${r.text}`), ok: !rows.some((r) => r.fatal) };
-}
-function version(bin, args) {
-  try {
-    return execFileSync2(bin, args, { encoding: "utf8", timeout: 1e4, stdio: ["ignore", "pipe", "ignore"] }).trim().split("\n")[0] ?? null;
-  } catch {
-    return null;
-  }
-}
-async function doctor(_argv, ctx) {
-  let layout;
-  let db;
-  try {
-    layout = resolveLayout(distDir(), existsSync2);
-    db = dbFilePath(resolveDbUrl(ctx.env, dirname3(layout.schema)));
-  } catch (e) {
-    ctx.stderr(`${e.message}
-`);
-    return 1;
-  }
-  const home = resolveHome(ctx.env);
-  let homeWritable = false;
-  try {
-    accessSync(existsSync2(home) ? home : dirname3(home), constants.W_OK);
-    homeWritable = true;
-  } catch {
-  }
-  const r = doctorReport({
-    node: process.version,
-    git: version("git", ["--version"]),
-    tmux: version("tmux", ["-V"]),
-    claude: version(ctx.env.HANOMAN_CLAUDE_BIN ?? "claude", ["--version"]),
-    codex: version(ctx.env.HANOMAN_CODEX_BIN ?? "codex", ["--version"]),
-    homeWritable,
-    web: layout.web !== null,
-    db
+// ../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/parseUtil.js
+function addIssueToContext(ctx, issueData) {
+  const overrideMap = getErrorMap();
+  const issue = makeIssue({
+    issueData,
+    data: ctx.data,
+    path: ctx.path,
+    errorMaps: [
+      ctx.common.contextualErrorMap,
+      // contextual error map is first priority
+      ctx.schemaErrorMap,
+      // then schema-bound map if available
+      overrideMap,
+      // then global override map
+      overrideMap === en_default ? void 0 : en_default
+      // then global default map
+    ].filter((x) => !!x)
   });
-  ctx.stdout(`hanoman doctor
-${r.lines.join("\n")}
-`);
-  const notice = dbUrlNotice(ctx.env);
-  if (notice) ctx.stdout(`
-${notice}
-`);
-  if (!r.ok) ctx.stderr("\nada prasyarat yang belum terpenuhi \u2014 hanoman tak akan bisa menjalankan sesi\n");
-  return r.ok ? 0 : 1;
+  ctx.common.issues.push(issue);
 }
-var init_doctor = __esm({
-  "src/commands/doctor.ts"() {
-    "use strict";
-    init_src();
-    init_layout();
-    init_start();
-  }
-});
-
-// ../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/util.js
-var util, objectUtil, ZodParsedType, getParsedType;
-var init_util = __esm({
-  "../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/util.js"() {
-    (function(util2) {
-      util2.assertEqual = (_) => {
+var makeIssue, EMPTY_PATH, ParseStatus, INVALID, DIRTY, OK, isAborted, isDirty, isValid, isAsync;
+var init_parseUtil = __esm({
+  "../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/parseUtil.js"() {
+    init_errors();
+    init_en();
+    makeIssue = (params) => {
+      const { data, path, errorMaps, issueData } = params;
+      const fullPath = [...path, ...issueData.path || []];
+      const fullIssue = {
+        ...issueData,
+        path: fullPath
       };
-      function assertIs(_arg) {
+      if (issueData.message !== void 0) {
+        return {
+          ...issueData,
+          path: fullPath,
+          message: issueData.message
+        };
       }
-      util2.assertIs = assertIs;
-      function assertNever(_x) {
-        throw new Error();
+      let errorMessage = "";
+      const maps = errorMaps.filter((m) => !!m).slice().reverse();
+      for (const map of maps) {
+        errorMessage = map(fullIssue, { data, defaultError: errorMessage }).message;
       }
-      util2.assertNever = assertNever;
-      util2.arrayToEnum = (items) => {
-        const obj = {};
-        for (const item of items) {
-          obj[item] = item;
-        }
-        return obj;
+      return {
+        ...issueData,
+        path: fullPath,
+        message: errorMessage
       };
-      util2.getValidEnumValues = (obj) => {
-        const validKeys = util2.objectKeys(obj).filter((k) => typeof obj[obj[k]] !== "number");
-        const filtered = {};
-        for (const k of validKeys) {
-          filtered[k] = obj[k];
+    };
+    EMPTY_PATH = [];
+    ParseStatus = class _ParseStatus {
+      constructor() {
+        this.value = "valid";
+      }
+      dirty() {
+        if (this.value === "valid")
+          this.value = "dirty";
+      }
+      abort() {
+        if (this.value !== "aborted")
+          this.value = "aborted";
+      }
+      static mergeArray(status, results) {
+        const arrayValue = [];
+        for (const s of results) {
+          if (s.status === "aborted")
+            return INVALID;
+          if (s.status === "dirty")
+            status.dirty();
+          arrayValue.push(s.value);
         }
-        return util2.objectValues(filtered);
-      };
-      util2.objectValues = (obj) => {
-        return util2.objectKeys(obj).map(function(e) {
-          return obj[e];
-        });
-      };
-      util2.objectKeys = typeof Object.keys === "function" ? (obj) => Object.keys(obj) : (object) => {
-        const keys = [];
-        for (const key in object) {
-          if (Object.prototype.hasOwnProperty.call(object, key)) {
-            keys.push(key);
-          }
-        }
-        return keys;
-      };
-      util2.find = (arr, checker) => {
-        for (const item of arr) {
-          if (checker(item))
-            return item;
-        }
-        return void 0;
-      };
-      util2.isInteger = typeof Number.isInteger === "function" ? (val) => Number.isInteger(val) : (val) => typeof val === "number" && Number.isFinite(val) && Math.floor(val) === val;
-      function joinValues(array, separator = " | ") {
-        return array.map((val) => typeof val === "string" ? `'${val}'` : val).join(separator);
-      }
-      util2.joinValues = joinValues;
-      util2.jsonStringifyReplacer = (_, value) => {
-        if (typeof value === "bigint") {
-          return value.toString();
-        }
-        return value;
-      };
-    })(util || (util = {}));
-    (function(objectUtil2) {
-      objectUtil2.mergeShapes = (first, second) => {
-        return {
-          ...first,
-          ...second
-          // second overwrites first
-        };
-      };
-    })(objectUtil || (objectUtil = {}));
-    ZodParsedType = util.arrayToEnum([
-      "string",
-      "nan",
-      "number",
-      "integer",
-      "float",
-      "boolean",
-      "date",
-      "bigint",
-      "symbol",
-      "function",
-      "undefined",
-      "null",
-      "array",
-      "object",
-      "unknown",
-      "promise",
-      "void",
-      "never",
-      "map",
-      "set"
-    ]);
-    getParsedType = (data) => {
-      const t = typeof data;
-      switch (t) {
-        case "undefined":
-          return ZodParsedType.undefined;
-        case "string":
-          return ZodParsedType.string;
-        case "number":
-          return Number.isNaN(data) ? ZodParsedType.nan : ZodParsedType.number;
-        case "boolean":
-          return ZodParsedType.boolean;
-        case "function":
-          return ZodParsedType.function;
-        case "bigint":
-          return ZodParsedType.bigint;
-        case "symbol":
-          return ZodParsedType.symbol;
-        case "object":
-          if (Array.isArray(data)) {
-            return ZodParsedType.array;
-          }
-          if (data === null) {
-            return ZodParsedType.null;
-          }
-          if (data.then && typeof data.then === "function" && data.catch && typeof data.catch === "function") {
-            return ZodParsedType.promise;
-          }
-          if (typeof Map !== "undefined" && data instanceof Map) {
-            return ZodParsedType.map;
-          }
-          if (typeof Set !== "undefined" && data instanceof Set) {
-            return ZodParsedType.set;
-          }
-          if (typeof Date !== "undefined" && data instanceof Date) {
-            return ZodParsedType.date;
-          }
-          return ZodParsedType.object;
-        default:
-          return ZodParsedType.unknown;
-      }
-    };
-  }
-});
-
-// ../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/ZodError.js
-var ZodIssueCode, quotelessJson, ZodError;
-var init_ZodError = __esm({
-  "../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/ZodError.js"() {
-    init_util();
-    ZodIssueCode = util.arrayToEnum([
-      "invalid_type",
-      "invalid_literal",
-      "custom",
-      "invalid_union",
-      "invalid_union_discriminator",
-      "invalid_enum_value",
-      "unrecognized_keys",
-      "invalid_arguments",
-      "invalid_return_type",
-      "invalid_date",
-      "invalid_string",
-      "too_small",
-      "too_big",
-      "invalid_intersection_types",
-      "not_multiple_of",
-      "not_finite"
-    ]);
-    quotelessJson = (obj) => {
-      const json = JSON.stringify(obj, null, 2);
-      return json.replace(/"([^"]+)":/g, "$1:");
-    };
-    ZodError = class _ZodError extends Error {
-      get errors() {
-        return this.issues;
-      }
-      constructor(issues) {
-        super();
-        this.issues = [];
-        this.addIssue = (sub) => {
-          this.issues = [...this.issues, sub];
-        };
-        this.addIssues = (subs = []) => {
-          this.issues = [...this.issues, ...subs];
-        };
-        const actualProto = new.target.prototype;
-        if (Object.setPrototypeOf) {
-          Object.setPrototypeOf(this, actualProto);
-        } else {
-          this.__proto__ = actualProto;
-        }
-        this.name = "ZodError";
-        this.issues = issues;
-      }
-      format(_mapper) {
-        const mapper = _mapper || function(issue) {
-          return issue.message;
-        };
-        const fieldErrors = { _errors: [] };
-        const processError = (error) => {
-          for (const issue of error.issues) {
-            if (issue.code === "invalid_union") {
-              issue.unionErrors.map(processError);
-            } else if (issue.code === "invalid_return_type") {
-              processError(issue.returnTypeError);
-            } else if (issue.code === "invalid_arguments") {
-              processError(issue.argumentsError);
-            } else if (issue.path.length === 0) {
-              fieldErrors._errors.push(mapper(issue));
-            } else {
-              let curr = fieldErrors;
-              let i = 0;
-              while (i < issue.path.length) {
-                const el = issue.path[i];
-                const terminal = i === issue.path.length - 1;
-                if (!terminal) {
-                  curr[el] = curr[el] || { _errors: [] };
-                } else {
-                  curr[el] = curr[el] || { _errors: [] };
-                  curr[el]._errors.push(mapper(issue));
-                }
-                curr = curr[el];
-                i++;
-              }
-            }
-          }
-        };
-        processError(this);
-        return fieldErrors;
+        return { status: status.value, value: arrayValue };
       }
-      static assert(value) {
-        if (!(value instanceof _ZodError)) {
-          throw new Error(`Not a ZodError: ${value}`);
+      static async mergeObjectAsync(status, pairs) {
+        const syncPairs = [];
+        for (const pair of pairs) {
+          const key = await pair.key;
+          const value = await pair.value;
+          syncPairs.push({
+            key,
+            value
+          });
         }
+        return _ParseStatus.mergeObjectSync(status, syncPairs);
       }
-      toString() {
-        return this.message;
-      }
-      get message() {
-        return JSON.stringify(this.issues, util.jsonStringifyReplacer, 2);
-      }
-      get isEmpty() {
-        return this.issues.length === 0;
-      }
-      flatten(mapper = (issue) => issue.message) {
-        const fieldErrors = {};
-        const formErrors = [];
-        for (const sub of this.issues) {
-          if (sub.path.length > 0) {
-            const firstEl = sub.path[0];
-            fieldErrors[firstEl] = fieldErrors[firstEl] || [];
-            fieldErrors[firstEl].push(mapper(sub));
-          } else {
-            formErrors.push(mapper(sub));
+      static mergeObjectSync(status, pairs) {
+        const finalObject = {};
+        for (const pair of pairs) {
+          const { key, value } = pair;
+          if (key.status === "aborted")
+            return INVALID;
+          if (value.status === "aborted")
+            return INVALID;
+          if (key.status === "dirty")
+            status.dirty();
+          if (value.status === "dirty")
+            status.dirty();
+          if (key.value !== "__proto__" && (typeof value.value !== "undefined" || pair.alwaysSet)) {
+            finalObject[key.value] = value.value;
           }
         }
-        return { formErrors, fieldErrors };
-      }
-      get formErrors() {
-        return this.flatten();
+        return { status: status.value, value: finalObject };
       }
     };
-    ZodError.create = (issues) => {
-      const error = new ZodError(issues);
-      return error;
-    };
-  }
-});
-
-// ../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/locales/en.js
-var errorMap, en_default;
-var init_en = __esm({
-  "../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/locales/en.js"() {
-    init_ZodError();
-    init_util();
-    errorMap = (issue, _ctx) => {
-      let message;
-      switch (issue.code) {
-        case ZodIssueCode.invalid_type:
-          if (issue.received === ZodParsedType.undefined) {
-            message = "Required";
-          } else {
-            message = `Expected ${issue.expected}, received ${issue.received}`;
-          }
-          break;
-        case ZodIssueCode.invalid_literal:
-          message = `Invalid literal value, expected ${JSON.stringify(issue.expected, util.jsonStringifyReplacer)}`;
-          break;
-        case ZodIssueCode.unrecognized_keys:
-          message = `Unrecognized key(s) in object: ${util.joinValues(issue.keys, ", ")}`;
-          break;
-        case ZodIssueCode.invalid_union:
-          message = `Invalid input`;
-          break;
-        case ZodIssueCode.invalid_union_discriminator:
-          message = `Invalid discriminator value. Expected ${util.joinValues(issue.options)}`;
-          break;
-        case ZodIssueCode.invalid_enum_value:
-          message = `Invalid enum value. Expected ${util.joinValues(issue.options)}, received '${issue.received}'`;
-          break;
-        case ZodIssueCode.invalid_arguments:
-          message = `Invalid function arguments`;
-          break;
-        case ZodIssueCode.invalid_return_type:
-          message = `Invalid function return type`;
-          break;
-        case ZodIssueCode.invalid_date:
-          message = `Invalid date`;
-          break;
-        case ZodIssueCode.invalid_string:
-          if (typeof issue.validation === "object") {
-            if ("includes" in issue.validation) {
-              message = `Invalid input: must include "${issue.validation.includes}"`;
-              if (typeof issue.validation.position === "number") {
-                message = `${message} at one or more positions greater than or equal to ${issue.validation.position}`;
-              }
-            } else if ("startsWith" in issue.validation) {
-              message = `Invalid input: must start with "${issue.validation.startsWith}"`;
-            } else if ("endsWith" in issue.validation) {
-              message = `Invalid input: must end with "${issue.validation.endsWith}"`;
-            } else {
-              util.assertNever(issue.validation);
-            }
-          } else if (issue.validation !== "regex") {
-            message = `Invalid ${issue.validation}`;
-          } else {
-            message = "Invalid";
-          }
-          break;
-        case ZodIssueCode.too_small:
-          if (issue.type === "array")
-            message = `Array must contain ${issue.exact ? "exactly" : issue.inclusive ? `at least` : `more than`} ${issue.minimum} element(s)`;
-          else if (issue.type === "string")
-            message = `String must contain ${issue.exact ? "exactly" : issue.inclusive ? `at least` : `over`} ${issue.minimum} character(s)`;
-          else if (issue.type === "number")
-            message = `Number must be ${issue.exact ? `exactly equal to ` : issue.inclusive ? `greater than or equal to ` : `greater than `}${issue.minimum}`;
-          else if (issue.type === "bigint")
-            message = `Number must be ${issue.exact ? `exactly equal to ` : issue.inclusive ? `greater than or equal to ` : `greater than `}${issue.minimum}`;
-          else if (issue.type === "date")
-            message = `Date must be ${issue.exact ? `exactly equal to ` : issue.inclusive ? `greater than or equal to ` : `greater than `}${new Date(Number(issue.minimum))}`;
-          else
-            message = "Invalid input";
-          break;
-        case ZodIssueCode.too_big:
-          if (issue.type === "array")
-            message = `Array must contain ${issue.exact ? `exactly` : issue.inclusive ? `at most` : `less than`} ${issue.maximum} element(s)`;
-          else if (issue.type === "string")
-            message = `String must contain ${issue.exact ? `exactly` : issue.inclusive ? `at most` : `under`} ${issue.maximum} character(s)`;
-          else if (issue.type === "number")
-            message = `Number must be ${issue.exact ? `exactly` : issue.inclusive ? `less than or equal to` : `less than`} ${issue.maximum}`;
-          else if (issue.type === "bigint")
-            message = `BigInt must be ${issue.exact ? `exactly` : issue.inclusive ? `less than or equal to` : `less than`} ${issue.maximum}`;
-          else if (issue.type === "date")
-            message = `Date must be ${issue.exact ? `exactly` : issue.inclusive ? `smaller than or equal to` : `smaller than`} ${new Date(Number(issue.maximum))}`;
-          else
-            message = "Invalid input";
-          break;
-        case ZodIssueCode.custom:
-          message = `Invalid input`;
-          break;
-        case ZodIssueCode.invalid_intersection_types:
-          message = `Intersection results could not be merged`;
-          break;
-        case ZodIssueCode.not_multiple_of:
-          message = `Number must be a multiple of ${issue.multipleOf}`;
-          break;
-        case ZodIssueCode.not_finite:
-          message = "Number must be finite";
-          break;
-        default:
-          message = _ctx.defaultError;
-          util.assertNever(issue);
-      }
-      return { message };
-    };
-    en_default = errorMap;
-  }
-});
-
-// ../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/errors.js
-function setErrorMap(map) {
-  overrideErrorMap = map;
-}
-function getErrorMap() {
-  return overrideErrorMap;
-}
-var overrideErrorMap;
-var init_errors = __esm({
-  "../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/errors.js"() {
-    init_en();
-    overrideErrorMap = en_default;
-  }
-});
-
-// ../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/parseUtil.js
-function addIssueToContext(ctx, issueData) {
-  const overrideMap = getErrorMap();
-  const issue = makeIssue({
-    issueData,
-    data: ctx.data,
-    path: ctx.path,
-    errorMaps: [
-      ctx.common.contextualErrorMap,
-      // contextual error map is first priority
-      ctx.schemaErrorMap,
-      // then schema-bound map if available
-      overrideMap,
-      // then global override map
-      overrideMap === en_default ? void 0 : en_default
-      // then global default map
-    ].filter((x) => !!x)
-  });
-  ctx.common.issues.push(issue);
-}
-var makeIssue, EMPTY_PATH, ParseStatus, INVALID, DIRTY, OK, isAborted, isDirty, isValid, isAsync;
-var init_parseUtil = __esm({
-  "../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/parseUtil.js"() {
-    init_errors();
-    init_en();
-    makeIssue = (params) => {
-      const { data, path, errorMaps, issueData } = params;
-      const fullPath = [...path, ...issueData.path || []];
-      const fullIssue = {
-        ...issueData,
-        path: fullPath
-      };
-      if (issueData.message !== void 0) {
-        return {
-          ...issueData,
-          path: fullPath,
-          message: issueData.message
-        };
-      }
-      let errorMessage = "";
-      const maps = errorMaps.filter((m) => !!m).slice().reverse();
-      for (const map of maps) {
-        errorMessage = map(fullIssue, { data, defaultError: errorMessage }).message;
-      }
-      return {
-        ...issueData,
-        path: fullPath,
-        message: errorMessage
-      };
-    };
-    EMPTY_PATH = [];
-    ParseStatus = class _ParseStatus {
-      constructor() {
-        this.value = "valid";
-      }
-      dirty() {
-        if (this.value === "valid")
-          this.value = "dirty";
-      }
-      abort() {
-        if (this.value !== "aborted")
-          this.value = "aborted";
-      }
-      static mergeArray(status, results) {
-        const arrayValue = [];
-        for (const s of results) {
-          if (s.status === "aborted")
-            return INVALID;
-          if (s.status === "dirty")
-            status.dirty();
-          arrayValue.push(s.value);
-        }
-        return { status: status.value, value: arrayValue };
-      }
-      static async mergeObjectAsync(status, pairs) {
-        const syncPairs = [];
-        for (const pair of pairs) {
-          const key = await pair.key;
-          const value = await pair.value;
-          syncPairs.push({
-            key,
-            value
-          });
-        }
-        return _ParseStatus.mergeObjectSync(status, syncPairs);
-      }
-      static mergeObjectSync(status, pairs) {
-        const finalObject = {};
-        for (const pair of pairs) {
-          const { key, value } = pair;
-          if (key.status === "aborted")
-            return INVALID;
-          if (value.status === "aborted")
-            return INVALID;
-          if (key.status === "dirty")
-            status.dirty();
-          if (value.status === "dirty")
-            status.dirty();
-          if (key.value !== "__proto__" && (typeof value.value !== "undefined" || pair.alwaysSet)) {
-            finalObject[key.value] = value.value;
-          }
-        }
-        return { status: status.value, value: finalObject };
-      }
-    };
-    INVALID = Object.freeze({
-      status: "aborted"
-    });
-    DIRTY = (value) => ({ status: "dirty", value });
-    OK = (value) => ({ status: "valid", value });
-    isAborted = (x) => x.status === "aborted";
-    isDirty = (x) => x.status === "dirty";
-    isValid = (x) => x.status === "valid";
-    isAsync = (x) => typeof Promise !== "undefined" && x instanceof Promise;
+    INVALID = Object.freeze({
+      status: "aborted"
+    });
+    DIRTY = (value) => ({ status: "dirty", value });
+    OK = (value) => ({ status: "valid", value });
+    isAborted = (x) => x.status === "aborted";
+    isDirty = (x) => x.status === "dirty";
+    isValid = (x) => x.status === "valid";
+    isAsync = (x) => typeof Promise !== "undefined" && x instanceof Promise;
   }
 });
 
@@ -4661,7 +4343,7 @@ var init_enums = __esm({
     "use strict";
     init_zod();
     zStage = external_exports.enum(["brainstorming", "objective", "spec-ready", "planned", "executing", "done"]);
-    zSpecSource = external_exports.enum(["brief", "qa", "audit", "cross-audit", "help"]);
+    zSpecSource = external_exports.enum(["brief", "qa", "audit", "cross-audit", "help", "goal"]);
     zDocStatus = external_exports.enum(["ok", "drift", "broken"]);
     zPriority = external_exports.enum(["tinggi", "sedang", "rendah"]);
     zProjectKind = external_exports.enum(["from-scratch", "existing"]);
@@ -4677,7 +4359,7 @@ var init_enums = __esm({
 });
 
 // ../shared/src/entities.ts
-var zProject, zBriefPayload, zQaPayload, zSpec, NOTIFY_SOUNDS, zCodex, CODEX_DEFAULTS, zSourceCommon, zScheduler, SCHEDULER_DEFAULTS, zGoal, GOAL_DEFAULTS, zConflict, CONFLICT_DEFAULTS, zSetting, zNotification, zDocFile, zDeviceTokenView;
+var zProject, zBriefPayload, zQaPayload, zGoalPayload, zSpec, NOTIFY_SOUNDS, zCodex, CODEX_DEFAULTS, zSourceCommon, zScheduler, SCHEDULER_DEFAULTS, zGoal, GOAL_DEFAULTS, zConflict, CONFLICT_DEFAULTS, zLeadEngine, zLead, LEAD_DEFAULTS, zSetting, zNotification, zDocFile, zDeviceTokenView;
 var init_entities = __esm({
   "../shared/src/entities.ts"() {
     "use strict";
@@ -4716,6 +4398,12 @@ var init_entities = __esm({
       // SPEC-244 · qa dinaikkan dari audit → sinyal skip fase Audit (ADR-0059)
       fromErrorGroup: external_exports.string().optional()
     });
+    zGoalPayload = external_exports.object({
+      goal: external_exports.string(),
+      done: external_exports.string(),
+      constraints: external_exports.string(),
+      priority: zPriority
+    });
     zSpec = external_exports.object({
       id: external_exports.string(),
       projectId: external_exports.string(),
@@ -4725,11 +4413,16 @@ var init_entities = __esm({
       priority: zPriority,
       author: external_exports.string(),
       objective: external_exports.string(),
-      payload: external_exports.union([zBriefPayload, zQaPayload]).nullable(),
+      payload: external_exports.union([zBriefPayload, zQaPayload, zGoalPayload]).nullable(),
+      // SPEC-407 · +goal
       branchFrom: external_exports.string().nullable(),
       // SPEC-143 · null = default project (main)
-      baseSha: external_exports.string().nullable()
+      baseSha: external_exports.string().nullable(),
       // SPEC-186 · null = belum pernah ada sesi (belum dimulai)
+      // SPEC-408 · ADR-0090 · stempel waktu backlog (ISO string di wire — kolom DateTime di DB).
+      // `startedAt` null = belum pernah dikerjakan; ia tak pernah ditulis ulang saat sesi dilanjutkan.
+      createdAt: external_exports.string(),
+      startedAt: external_exports.string().nullable()
     });
     NOTIFY_SOUNDS = [
       "off",
@@ -4782,6 +4475,31 @@ var init_entities = __esm({
       effort: external_exports.string().default("xhigh")
     });
     CONFLICT_DEFAULTS = zConflict.parse({});
+    zLeadEngine = external_exports.object({
+      enabled: external_exports.boolean().default(false),
+      agent: zAgent.default("claude"),
+      model: external_exports.string().default("claude-opus-5"),
+      effort: external_exports.string().default("xhigh")
+    });
+    zLead = external_exports.object({
+      enabled: external_exports.boolean().default(false),
+      // master switch (AC-30)
+      paused: external_exports.boolean().default(false),
+      // rem darurat global (AC-27)
+      pausedProjects: external_exports.array(external_exports.string()).default([]),
+      // rem per project (AC-15/US-4)
+      everyMin: external_exports.number().int().min(1).max(1440).default(5),
+      // denyut proaktif (OQ-2)
+      timeoutSec: external_exports.number().int().min(10).max(900).default(120),
+      // batas waktu satu putusan (AC-4/35)
+      // AC-11 / OQ-10 · berapa jawaban otomatis berturut-turut untuk SATU sesi sebelum lead berhenti.
+      maxAutoAnswers: external_exports.number().int().min(1).max(20).default(3),
+      // OQ-3 · syarat objektif sebelum lead boleh mengintegrasikan ke branch utama. Default MENYALA:
+      // risiko "kode masuk main tanpa mata manusia" diterima sadar, tapi syaratnya tetap terukur.
+      requireGreenBeforeIntegrate: external_exports.boolean().default(true),
+      engine: zLeadEngine.default({})
+    });
+    LEAD_DEFAULTS = zLead.parse({});
     zSetting = external_exports.object({
       model: external_exports.string().default("claude-opus-5"),
       effort: external_exports.string().default("xhigh"),
@@ -4808,13 +4526,17 @@ var init_entities = __esm({
       // SPEC-338 · ADR-0074 · model/effort codex
       verifyScope: zVerifyScope.default("changed"),
       // SPEC-376 · ADR-0080 · scope verifikasi sesi
-      conflict: zConflict.default(CONFLICT_DEFAULTS)
+      conflict: zConflict.default(CONFLICT_DEFAULTS),
       // SPEC-383 · ADR-0081 · default sesi konflik rebase/merge
+      lead: zLead.default(LEAD_DEFAULTS)
+      // SPEC-409 · ADR-0091 · hanoman-lead (default mati)
     });
     zNotification = external_exports.object({
       id: external_exports.string(),
-      type: external_exports.enum(["done", "decision", "error", "ticket", "fail"]).default("done"),
       // SPEC-249 · +error; SPEC-253 · +ticket; SPEC-298 · +fail (sesi scheduler gagal/limit)
+      // SPEC-409 · +lead (ADR-0091): keputusan berbobot / ragu / tindakan terkunci ditolak. MEMBERI
+      // TAHU, bukan meminta izin — tak ada pekerjaan yang menunggu notifikasi ini dibaca (AC-25).
+      type: external_exports.enum(["done", "decision", "error", "ticket", "fail", "lead"]).default("done"),
       specId: external_exports.string().nullable(),
       sessionId: external_exports.string().nullable(),
       title: external_exports.string(),
@@ -4864,7 +4586,13 @@ var init_agent = __esm({
       "support:read",
       "support:write",
       "notifications:read",
-      "notifications:write"
+      "notifications:write",
+      // SPEC-409 · ADR-0091 · minta putusan ke hanoman-lead + baca jejak keputusan. Domain TERSENDIRI,
+      // bukan menumpang prefix baca yang sudah ada: meminta putusan adalah operasi TULIS (ia melahirkan
+      // baris jejak & bisa menggerakkan sesi), dan SPEC-405 sudah membuktikan apa yang terjadi saat
+      // endpoint tulis menumpang prefix status yang dipetakan tanpa melihat method (AC-5).
+      "lead:read",
+      "lead:write"
     ];
     zCapability = external_exports.enum(CAPABILITY_IDS);
     zCapabilityInfo = external_exports.object({
@@ -4898,13 +4626,77 @@ var init_agent = __esm({
   }
 });
 
-// ../shared/src/dto.ts
-var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zCreateLink, zUpdateProject, zCreateSpec, zPatchSpec, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerState, zFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, zLogin, zSignup, zChangePassword, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, zStackFrame, zSymbolicatedFrame, zSourceMapUpload, zIngestPayload, zErrorGroupView, zErrorEventView, zErrorGroupDetail, zIngestKeyView, zTicketView, zTicketAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus;
-var init_dto = __esm({
-  "../shared/src/dto.ts"() {
+// ../shared/src/lead.ts
+var zLeadGate, zLeadKind, zLeadConfidence, zLeadStatus, LEAD_ACTIONS, zLeadAction, zLeadVerdict, zLeadAsk, zLeadOverride;
+var init_lead = __esm({
+  "../shared/src/lead.ts"() {
+    "use strict";
+    init_zod();
+    zLeadGate = external_exports.enum(["contract", "detected", "pulse"]);
+    zLeadKind = external_exports.enum(["answer", "order", "collision", "quality", "refusal"]);
+    zLeadConfidence = external_exports.enum(["tinggi", "sedang", "ragu"]);
+    zLeadStatus = external_exports.enum(["berlaku", "ditimpa", "dibatalkan", "gagal"]);
+    LEAD_ACTIONS = [
+      "none",
+      // keputusan murni jawaban; tak ada tindakan menyusul
+      "answer-session",
+      // ketik jawaban ke pane sesi (pintu deteksi otomatis)
+      "start-session",
+      // mulai sesi untuk sebuah backlog (lewat antrean scheduler)
+      "stop-session",
+      // hentikan sesi — worktree DIBIARKAN utuh (AC-32a)
+      "resume-session",
+      // lanjutkan sesi terputus (jalur ADR-0084)
+      "restart-session",
+      // ulangi pekerjaan dari awal
+      "order-queue",
+      // tata urutan antrean yang sudah ada (ADR-0072) — bukan antrean kedua
+      "hold-work",
+      // tunda satu pekerjaan karena tabrakan area kerja
+      "push-branch",
+      // dorong perubahan ke branch
+      "integrate-main",
+      // integrasikan ke branch utama (risiko yang diterima sadar, PRD §Risiko)
+      "run-migration"
+      // jalankan migration pada basis data LOKAL operator
+    ];
+    zLeadAction = external_exports.enum(LEAD_ACTIONS);
+    zLeadVerdict = external_exports.object({
+      decision: external_exports.string().min(1),
+      reason: external_exports.string().min(1),
+      refs: external_exports.array(external_exports.string()).default([]),
+      confidence: zLeadConfidence.default("sedang"),
+      // Sengaja `string`, BUKAN `zLeadAction`: tindakan di luar allowlist harus bisa MASUK supaya
+      // server menolaknya secara sadar — mencatat penolakan & menotifikasi operator (AC-33). Kalau
+      // enum yang menyaring di sini, permintaan "deploy ke produksi" hanya akan tampak sebagai
+      // keluaran rusak, dan justru peristiwa paling layak dilaporkan itulah yang hilang dari jejak.
+      action: external_exports.string().default("none"),
+      /** Teks yang benar-benar diketik ke pane sesi (pintu deteksi otomatis). */
+      reply: external_exports.string().default("")
+    });
+    zLeadAsk = external_exports.object({
+      projectId: external_exports.string().min(1),
+      specId: external_exports.string().nullish(),
+      sessionId: external_exports.string().nullish(),
+      question: external_exports.string().min(1).max(8e3),
+      options: external_exports.array(external_exports.string().max(2e3)).max(20).default([]),
+      context: external_exports.string().max(2e4).default("")
+    });
+    zLeadOverride = external_exports.object({
+      answer: external_exports.string().min(1).max(8e3),
+      reason: external_exports.string().max(8e3).default("")
+    });
+  }
+});
+
+// ../shared/src/dto.ts
+var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zCreateLink, zUpdateProject, zCreateSpec, zPatchSpec, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerState, zLeadDecisionView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, zLogin, zSignup, zChangePassword, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, UPDATE_RESTART_EXIT, zUpdateApplyBody, zStackFrame, zSymbolicatedFrame, zSourceMapUpload, zIngestPayload, zErrorGroupView, zErrorEventView, zErrorGroupDetail, zIngestKeyView, zTicketView, zTicketAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus;
+var init_dto = __esm({
+  "../shared/src/dto.ts"() {
     "use strict";
     init_zod();
     init_entities();
+    init_lead();
     init_enums();
     zIssueDeviceToken = external_exports.object({ name: external_exports.string().min(1) });
     zSessionResult = external_exports.object({
@@ -4960,19 +4752,22 @@ var init_dto = __esm({
       // SPEC-213 · set git remote resmi project
       repoDir: external_exports.string().nullable().optional(),
       // SPEC-217 · path default/server editable (null = kosongkan)
-      schedulerOptIn: external_exports.boolean().optional()
+      schedulerOptIn: external_exports.boolean().optional(),
       // SPEC-294 · opt-in scheduler otonom (lokal, tak disync)
+      leadOptIn: external_exports.boolean().optional()
+      // SPEC-409 · ADR-0091 · opt-in hanoman-lead (lokal, tak disync)
     });
     zCreateSpec = external_exports.object({
       project: external_exports.string(),
       source: zSpecSource,
       title: external_exports.string().min(1),
       priority: zPriority,
-      payload: external_exports.union([zBriefPayload, zQaPayload]),
+      payload: external_exports.union([zBriefPayload, zQaPayload, zGoalPayload]),
       branchFrom: external_exports.string().min(1).optional()
     }).superRefine((o, ctx) => {
-      const isQa = "severity" in o.payload;
-      if (o.source === "qa" !== isQa)
+      const shape = "severity" in o.payload ? "qa" : "goal" in o.payload ? "goal" : "brief";
+      const want = o.source === "qa" ? "qa" : o.source === "goal" ? "goal" : "brief";
+      if (shape !== want)
         ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["payload"], message: "bentuk payload tak cocok dengan source" });
     });
     zPatchSpec = external_exports.object({
@@ -4982,7 +4777,8 @@ var init_dto = __esm({
       // SPEC-186 · edit konten selagi item belum dimulai. Ditolak server bila sudah mulai.
       title: external_exports.string().min(1).optional(),
       priority: zPriority.optional(),
-      payload: external_exports.union([zBriefPayload, zQaPayload]).optional()
+      payload: external_exports.union([zBriefPayload, zQaPayload, zGoalPayload]).optional()
+      // SPEC-407 · +goal
     });
     zIntegrate = external_exports.object({
       op: external_exports.enum(["merge", "rebase"]),
@@ -5007,7 +4803,9 @@ var init_dto = __esm({
       // SPEC-249 · hint prefix DSN (bukan hash/rahasia)
       helpEnabled: external_exports.boolean().default(false),
       // SPEC-253 · Help Center publik aktif
-      schedulerOptIn: external_exports.boolean().default(false)
+      schedulerOptIn: external_exports.boolean().default(false),
+      // SPEC-294 · opt-in scheduler otonom
+      leadOptIn: external_exports.boolean().default(false)
     });
     zSchedulerQueueItem = external_exports.object({
       id: external_exports.string(),
@@ -5047,7 +4845,51 @@ var init_dto = __esm({
       queue: external_exports.array(zSchedulerQueueItem),
       sessions: external_exports.array(zSchedulerSessionView)
     });
-    zFlow = external_exports.enum(["feature", "qa", "scaffold", "reverse", "prd", "audit", "breakdown", "cross-audit"]);
+    zLeadDecisionView = external_exports.object({
+      id: external_exports.string(),
+      projectId: external_exports.string(),
+      specId: external_exports.string().nullable(),
+      sessionId: external_exports.string().nullable(),
+      gate: zLeadGate,
+      kind: zLeadKind,
+      question: external_exports.string(),
+      answer: external_exports.string(),
+      reason: external_exports.string(),
+      refs: external_exports.array(external_exports.string()),
+      confidence: zLeadConfidence,
+      action: zLeadAction,
+      status: zLeadStatus,
+      weighty: external_exports.boolean(),
+      supersededById: external_exports.string().nullable(),
+      createdAt: external_exports.string()
+    });
+    zLeadAnswer = external_exports.object({
+      id: external_exports.string(),
+      decision: external_exports.string(),
+      reason: external_exports.string(),
+      refs: external_exports.array(external_exports.string()),
+      confidence: zLeadConfidence,
+      action: zLeadAction
+    });
+    zLeadProjectStatus = external_exports.object({
+      projectId: external_exports.string(),
+      name: external_exports.string(),
+      optIn: external_exports.boolean(),
+      paused: external_exports.boolean(),
+      decisions24h: external_exports.number(),
+      openSessions: external_exports.number()
+    });
+    zLeadStatusView = external_exports.object({
+      config: zLead,
+      projects: external_exports.array(zLeadProjectStatus),
+      queue: external_exports.array(zSchedulerQueueItem),
+      deciding: external_exports.array(external_exports.string()),
+      // id sesi yang sedang disusun keputusannya (AC-3)
+      waiting: external_exports.array(external_exports.string()),
+      // id sesi ber-marker keputusan terisi
+      lastPulseAt: external_exports.string().nullable()
+    });
+    zFlow = external_exports.enum(["feature", "qa", "scaffold", "reverse", "prd", "audit", "breakdown", "cross-audit", "goal"]);
     zPrdBrief = external_exports.object({
       title: external_exports.string().min(1),
       context: external_exports.string(),
@@ -5193,6 +5035,8 @@ var init_dto = __esm({
     });
     zAttest = external_exports.object({ note: external_exports.string().max(500).optional() });
     zRemediate = external_exports.object({ items: external_exports.array(external_exports.string()).min(1).max(64) });
+    UPDATE_RESTART_EXIT = 75;
+    zUpdateApplyBody = external_exports.object({ confirm: external_exports.boolean().optional() });
     zStackFrame = external_exports.object({
       function: external_exports.string().max(500).optional(),
       filename: external_exports.string().max(2e3).optional(),
@@ -5303,515 +5147,940 @@ var init_dto = __esm({
       createdAt: external_exports.string()
     });
   }
-});
-
-// ../shared/src/api.ts
-var API, paths;
-var init_api = __esm({
-  "../shared/src/api.ts"() {
+});
+
+// ../shared/src/api.ts
+var API, paths;
+var init_api = __esm({
+  "../shared/src/api.ts"() {
+    "use strict";
+    API = "/api";
+    paths = {
+      projects: `${API}/projects`,
+      project: (id) => `${API}/projects/${id}`,
+      // SPEC-255 · ADR-0064 · rename slug project (efek: DSN, Help Center, sync).
+      projectRename: (id) => `${API}/projects/${encodeURIComponent(id)}/rename`,
+      branches: (id) => `${API}/projects/${id}/branches`,
+      // SPEC-360 · ADR-0077 · branch ter-merge (nilai turunan git) + hapus batch local/origin.
+      branchesUnused: (id, base) => `${API}/projects/${id}/branches/unused${base ? `?base=${encodeURIComponent(base)}` : ""}`,
+      branchesDelete: (id) => `${API}/projects/${id}/branches/delete`,
+      // SPEC-217 · path per-mesin (LocalBinding, tak disync) + clone dari gitRemote
+      binding: (id) => `${API}/projects/${id}/binding`,
+      clone: (id) => `${API}/projects/${id}/clone`,
+      specs: `${API}/specs`,
+      spec: (id) => `${API}/specs/${id}`,
+      specDocs: (id) => `${API}/specs/${id}/docs`,
+      specDocFile: (id, path) => `${API}/specs/${id}/docs/${path}`,
+      // SPEC-340 · ADR-0076 · rekomendasi tindak lanjut audit (turunan blok json dokumen audit).
+      specEscalation: (id) => `${API}/specs/${id}/escalation`,
+      specIntegrate: (id) => `${API}/specs/${id}/integrate`,
+      specReview: (id) => `${API}/specs/${id}/review`,
+      specReviewFile: (id, path) => `${API}/specs/${id}/review/${path}`,
+      settings: `${API}/settings`,
+      notifications: `${API}/notifications`,
+      limits: `${API}/limits`,
+      // SPEC-339 · versi codex CLI (peringatan lunak model GPT-5.6).
+      codexVersion: `${API}/codex/version`,
+      docs: (id) => `${API}/projects/${id}/docs`,
+      docFile: (id, path) => `${API}/projects/${id}/docs/${path}`,
+      // SPEC-210 · dokumen PRD project (freshest-wins: worktree sesi prd hidup > repoDir)
+      prds: (id) => `${API}/projects/${id}/prds`,
+      allPrds: `${API}/prds`,
+      // perbaikan SPEC-210 · daftar PRD lintas-project (filter "Semua project")
+      prdFile: (id, path) => `${API}/projects/${id}/prds/${path}`,
+      // SPEC-273 · manifest breakdown sebuah PRD (freshest-wins) + materialize batch.
+      breakdown: (id, prd) => `${API}/projects/${id}/breakdown?prd=${encodeURIComponent(prd)}`,
+      specsBatch: `${API}/specs/batch`,
+      // SPEC-182 · IDE Visual
+      ideTree: (id, ref = "") => `${API}/projects/${id}/tree${ref ? `?ref=${encodeURIComponent(ref)}` : ""}`,
+      ideFile: (id, path, ref = "") => `${API}/projects/${id}/file${path ? `?path=${encodeURIComponent(path)}${ref ? `&ref=${encodeURIComponent(ref)}` : ""}` : ""}`,
+      ideGraph: (id, limit = 200, opts) => {
+        const p = new URLSearchParams({ limit: String(limit) });
+        if (opts?.branches?.length) p.set("branches", opts.branches.join(","));
+        if (opts?.showRemote === false) p.set("showRemote", "false");
+        if (opts?.showTags === false) p.set("showTags", "false");
+        return `${API}/projects/${id}/graph?${p.toString()}`;
+      },
+      ideStatus: (id) => `${API}/projects/${id}/status`,
+      // SPEC-233 · status working tree
+      ideSearch: (id, q, by = "all") => `${API}/projects/${id}/graph/search?q=${encodeURIComponent(q)}&by=${by}`,
+      // SPEC-233
+      ideStashes: (id) => `${API}/projects/${id}/stashes`,
+      // SPEC-233 · daftar stash
+      // SPEC-233 · remote mgmt + pr-url + archive
+      ideRemotes: (id) => `${API}/projects/${id}/remotes`,
+      ideRemote: (id, name) => `${API}/projects/${id}/remotes/${encodeURIComponent(name)}`,
+      idePrUrl: (id, branch, base) => `${API}/projects/${id}/pr-url?branch=${encodeURIComponent(branch)}${base ? `&base=${encodeURIComponent(base)}` : ""}`,
+      ideArchive: (id, ref, format = "zip") => `${API}/projects/${id}/archive?ref=${encodeURIComponent(ref)}&format=${format}`,
+      ideCommit: (id, sha) => `${API}/projects/${id}/commit/${sha}`,
+      // SPEC-233 · diff satu file di commit (vs parent)
+      ideCommitFile: (id, sha, path) => `${API}/projects/${id}/commit/${sha}/file?path=${encodeURIComponent(path)}`,
+      // SPEC-233 · compare dua commit
+      ideCompare: (id, from, to) => `${API}/projects/${id}/compare?from=${encodeURIComponent(from)}&to=${encodeURIComponent(to)}`,
+      ideCompareFile: (id, from, to, path) => `${API}/projects/${id}/compare/file?from=${encodeURIComponent(from)}&to=${encodeURIComponent(to)}&path=${encodeURIComponent(path)}`,
+      ideGit: (id) => `${API}/projects/${id}/git`,
+      ideGitMerge: (id) => `${API}/projects/${id}/git/merge`,
+      // SPEC-229 · merge git graph isolasi
+      // SPEC-234 · status working tree (staged/unstaged) + diff satu file working tree
+      // catat: /working-status dibedakan dari /status milik SPEC-233 (repoStatus graph) — beda bentuk respons.
+      ideWorkingStatus: (id) => `${API}/projects/${id}/working-status`,
+      ideFileDiff: (id, path, staged) => `${API}/projects/${id}/file-diff?path=${encodeURIComponent(path)}${staged ? "&staged=1" : ""}`,
+      ideGitRebase: (id) => `${API}/projects/${id}/git/rebase`,
+      // SPEC-233 · rebase isolasi
+      ideGitPull: (id) => `${API}/projects/${id}/git/pull`,
+      // SPEC-233 · pull isolasi
+      ideGitDrop: (id) => `${API}/projects/${id}/git/drop`,
+      // SPEC-233 · drop commit isolasi
+      fsBrowse: (path) => `${API}/fs/browse${path ? `?path=${encodeURIComponent(path)}` : ""}`,
+      terminalSessions: `${API}/terminal/sessions`,
+      terminalSession: (id) => `${API}/terminal/sessions/${id}`,
+      terminalPhases: (id) => `${API}/terminal/sessions/${id}/phases`,
+      // SPEC-230 · review + integrate ber-skop sesi (sesi project-level PRD, tanpa Spec).
+      sessionReview: (id) => `${API}/terminal/sessions/${id}/review`,
+      sessionReviewFile: (id, path) => `${API}/terminal/sessions/${id}/review/${path}`,
+      sessionIntegrate: (id) => `${API}/terminal/sessions/${id}/integrate`,
+      terminalWs: (id) => `${API}/terminal/sessions/${id}/ws`,
+      // SPEC-362 · ADR-0079 · riwayat sesi. Di bawah prefix /terminal supaya ikut capability
+      // `sessions` yang sudah ada (services/agent-capabilities.ts) tanpa menambah domain baru.
+      sessionHistory: (qs = "") => `${API}/terminal/history${qs}`,
+      sessionHistoryItem: (id) => `${API}/terminal/history/${encodeURIComponent(id)}`,
+      sessionTranscript: (id) => `${API}/terminal/history/${encodeURIComponent(id)}/transcript`,
+      eventsWs: `${API}/events/ws`,
+      // SPEC-199 · WebSocket siar dashboard (global, bukan per-sesi)
+      vps: `${API}/vps`,
+      vpsOne: (id) => `${API}/vps/${id}`,
+      vpsAudit: (id) => `${API}/vps/${id}/audit`,
+      vpsHarden: (id) => `${API}/vps/${id}/harden`,
+      vpsSession: (id) => `${API}/vps/${id}/session`,
+      vpsTest: (id) => `${API}/vps/${id}/test`,
+      vpsConsole: (id) => `${API}/vps/${id}/console`,
+      // SPEC-220 · kepatuhan checklist
+      vpsChecklist: (id) => `${API}/vps/${id}/checklist`,
+      vpsItemNa: (id, itemId) => `${API}/vps/${id}/items/${itemId}/na`,
+      vpsItemNaBulk: (id) => `${API}/vps/${id}/items/na-bulk`,
+      vpsItemAttest: (id, itemId) => `${API}/vps/${id}/items/${itemId}/attest`,
+      vpsRemediatePreview: (id) => `${API}/vps/${id}/remediate/preview`,
+      vpsRemediate: (id) => `${API}/vps/${id}/remediate`,
+      // SPEC-169 · auth
+      authStatus: `${API}/auth/status`,
+      authSetup: `${API}/auth/setup`,
+      authLogin: `${API}/auth/login`,
+      authLogout: `${API}/auth/logout`,
+      authUsers: `${API}/auth/users`,
+      authUser: (id) => `${API}/auth/users/${id}`,
+      authChangePassword: `${API}/auth/change-password`,
+      // SPEC-213 · device token + activity log
+      deviceTokens: `${API}/device-tokens`,
+      deviceToken: (id) => `${API}/device-tokens/${id}`,
+      sessionResults: (projectId) => `${API}/session-results${projectId ? `?projectId=${encodeURIComponent(projectId)}` : ""}`,
+      // SPEC-215 · config runtime
+      config: `${API}/config`,
+      configKey: (key) => `${API}/config/${encodeURIComponent(key)}`,
+      // SPEC-299 · panel scheduler (daun #6) — konsumen read-only fondasi SPEC-294/ADR-0072.
+      schedulerConfig: `${API}/scheduler/config`,
+      schedulerState: `${API}/scheduler/state`,
+      // SPEC-409 · ADR-0091 · hanoman-lead. Semua HTTP (polling) — tak ada kanal WS baru (AC-26).
+      leadConfig: `${API}/lead/config`,
+      leadStatus: `${API}/lead/status`,
+      leadDecisions: `${API}/lead/decisions`,
+      leadDecisionOverride: (id) => `${API}/lead/decisions/${encodeURIComponent(id)}/override`,
+      leadDecisionCancel: (id) => `${API}/lead/decisions/${encodeURIComponent(id)}/cancel`,
+      // SPEC-268 · ADR-0066 · pemicu sync manual (cookie-authed)
+      syncNow: `${API}/sync/now`,
+      // SPEC-270 · ADR-0067 · antrean konflik rekonsil (cookie-authed)
+      syncConflicts: `${API}/sync/conflicts`,
+      syncConflictResolve: (entity, recordId) => `${API}/sync/conflicts/${encodeURIComponent(entity)}/${encodeURIComponent(recordId)}/resolve`,
+      // SPEC-257 · ADR-0065 · agent token (kelola cookie-only) + katalog capability
+      agentTokens: `${API}/agent-tokens`,
+      agentToken: (id) => `${API}/agent-tokens/${id}`,
+      agentCapabilities: `${API}/agent-tokens/capabilities`,
+      // SPEC-249 · error monitoring. ingest publik ber-DSN (bypass gate cookie, ADR-0060).
+      ingest: (slug) => `${API}/ingest/${encodeURIComponent(slug)}`,
+      errors: `${API}/errors`,
+      errorsGuide: `${API}/errors/integration-guide`,
+      error: (id) => `${API}/errors/${id}`,
+      errorEscalate: (id) => `${API}/errors/${id}/escalate`,
+      errorUnlink: (id) => `${API}/errors/${id}/unlink`,
+      // SPEC-271 · lepas tautan backlog
+      projectIngestKey: (id) => `${API}/projects/${encodeURIComponent(id)}/ingest-key`,
+      // SPEC-253 · Help Center publik (bypass gate cookie; otorisasi helpEnabled + kunci opaque tiket).
+      help: (slug) => `${API}/help/${encodeURIComponent(slug)}`,
+      helpTickets: (slug) => `${API}/help/${encodeURIComponent(slug)}/tickets`,
+      helpStatus: (slug, key) => `${API}/help/${encodeURIComponent(slug)}/tickets/${encodeURIComponent(key)}`,
+      // SPEC-253 · triase (di belakang gate cookie)
+      projectHelpCenter: (id) => `${API}/projects/${encodeURIComponent(id)}/help-center`,
+      tickets: `${API}/tickets`,
+      ticket: (id) => `${API}/tickets/${id}`,
+      ticketAttachment: (id, attId) => `${API}/tickets/${id}/attachments/${attId}`,
+      ticketAccept: (id) => `${API}/tickets/${id}/accept`,
+      ticketUnlink: (id) => `${API}/tickets/${id}/unlink`,
+      // SPEC-271 · lepas tautan backlog
+      ticketReject: (id) => `${API}/tickets/${id}/reject`,
+      // SPEC-337 · ADR-0075 · relasi integrasi antar project (LOCAL-only) + log lintas project.
+      projectLinks: (id) => `${API}/projects/${encodeURIComponent(id)}/links`,
+      projectLink: (id, linkId) => `${API}/projects/${encodeURIComponent(id)}/links/${encodeURIComponent(linkId)}`,
+      // SPEC-361 · ADR-0078 · unduh dokumen: query ditempelkan ke URL endpoint dokumen yang sudah ada
+      // (tak ada endpoint ekspor terpisah). `base` bisa sudah membawa query, mis. ideFile(?path=…).
+      download: (base, fmt) => `${base}${base.includes("?") ? "&" : "?"}download=${fmt}`
+    };
+  }
+});
+
+// ../shared/src/coverage.ts
+function coverageOf(docs) {
+  const byCat = /* @__PURE__ */ new Map();
+  for (const d of docs) byCat.set(d.category, (byCat.get(d.category) ?? true) && d.linked);
+  if (byCat.size === 0) return 0;
+  const linked = [...byCat.values()].filter(Boolean).length;
+  return Math.round(linked / byCat.size * 100);
+}
+function isExternalLink(target) {
+  return !target || /^(https?:|#|mailto:)/.test(target);
+}
+function resolveLink(fromRel, target) {
+  const clean = target.trim().split(/\s+/)[0].split("#")[0].split("\\").join("/");
+  if (!clean) return "";
+  if (clean.startsWith("/")) return clean.slice(1).split("/").filter((p) => p && p !== ".").join("/");
+  const dir = fromRel.includes("/") ? fromRel.slice(0, fromRel.lastIndexOf("/")) : "";
+  const parts = (dir ? dir.split("/") : []).concat(clean.replace(/^\.\//, "").split("/"));
+  const out = [];
+  for (const p of parts) {
+    if (p === "" || p === ".") continue;
+    if (p === "..") out.pop();
+    else out.push(p);
+  }
+  return out.join("/");
+}
+function linkedSetFrom(indexRel, docs, read) {
+  const inCorpus = new Set(docs);
+  const seen = /* @__PURE__ */ new Set();
+  const queue = [indexRel];
+  let i = 0;
+  while (i < queue.length) {
+    const cur = queue[i++];
+    if (seen.has(cur)) continue;
+    seen.add(cur);
+    const md = read(cur);
+    if (md === null) continue;
+    for (const m of md.matchAll(LINK_RE)) {
+      const target = m[1].trim();
+      if (isExternalLink(target)) continue;
+      const rel = resolveLink(cur, target);
+      if (rel && inCorpus.has(rel) && !seen.has(rel)) queue.push(rel);
+    }
+  }
+  return new Set([...seen].filter((p) => inCorpus.has(p)));
+}
+var LINK_RE;
+var init_coverage = __esm({
+  "../shared/src/coverage.ts"() {
+    "use strict";
+    LINK_RE = /\]\(([^)]+)\)/g;
+  }
+});
+
+// ../shared/src/ticket-status.ts
+var init_ticket_status = __esm({
+  "../shared/src/ticket-status.ts"() {
+    "use strict";
+  }
+});
+
+// ../shared/src/session-kind.ts
+var SESSION_KINDS, zSessionKind;
+var init_session_kind = __esm({
+  "../shared/src/session-kind.ts"() {
+    "use strict";
+    init_zod();
+    SESSION_KINDS = [
+      "spec",
+      "reverse",
+      "prd",
+      "scaffold",
+      "breakdown",
+      "cross-audit",
+      "vps",
+      "shell",
+      "worktree",
+      "terminal"
+    ];
+    zSessionKind = external_exports.enum(SESSION_KINDS);
+  }
+});
+
+// ../shared/src/config.ts
+var zHanomanConfig;
+var init_config = __esm({
+  "../shared/src/config.ts"() {
+    "use strict";
+    init_zod();
+    zHanomanConfig = external_exports.object({
+      docsDir: external_exports.string().default("internal/docs")
+    });
+  }
+});
+
+// ../shared/src/config-registry.ts
+var CONFIG_REGISTRY, BY_KEY;
+var init_config_registry = __esm({
+  "../shared/src/config-registry.ts"() {
+    "use strict";
+    CONFIG_REGISTRY = [
+      // sync
+      {
+        key: "SYNC_SERVER_URL",
+        group: "sync",
+        label: "URL hub",
+        kind: "url",
+        apply: "live",
+        category: "knob",
+        help: "Base URL hub tujuan sync (REST + WS). Kosong = instance ini murni HUB."
+      },
+      {
+        key: "SYNC_DEVICE_TOKEN",
+        group: "sync",
+        label: "Device token",
+        kind: "secret",
+        apply: "live",
+        category: "credential",
+        help: "Token yang diterbitkan hub (tab Perangkat di hub). Dikirim sebagai Bearer."
+      },
+      {
+        key: "SYNC_TICK_MS",
+        group: "sync",
+        label: "Interval sync (ms)",
+        kind: "int",
+        apply: "live",
+        category: "knob",
+        default: "15000",
+        min: 1e3
+      },
+      // claude
+      {
+        key: "CLAUDE_CODE_OAUTH_TOKEN",
+        group: "claude",
+        label: "Claude OAuth token",
+        kind: "secret",
+        apply: "new-session",
+        category: "credential",
+        inheritEnv: true,
+        help: "Token `claude setup-token`. Diwarisi proses claude yang di-spawn."
+      },
+      { key: "ANTHROPIC_API_KEY", group: "claude", label: "Anthropic API key", kind: "secret", apply: "new-session", category: "credential", inheritEnv: true },
+      { key: "HANOMAN_CLAUDE_BIN", group: "claude", label: "Biner claude", kind: "path", apply: "new-session", category: "knob", default: "claude" },
+      // codex (SPEC-338 · ADR-0074)
+      { key: "HANOMAN_CODEX_BIN", group: "claude", label: "Biner codex", kind: "path", apply: "new-session", category: "knob", default: "codex" },
+      {
+        key: "CLAUDE_CONFIG_DIR",
+        group: "claude",
+        label: "Dir config Claude",
+        kind: "path",
+        apply: "new-session",
+        category: "knob",
+        help: "Default ~/.claude. Sumber .credentials.json untuk panel usage/limit."
+      },
+      // vps
+      { key: "HANOMAN_SSH_KEY_DIR", group: "vps", label: "Dir key SSH", kind: "path", apply: "new-session", category: "knob", help: "Default ~/.hanoman." },
+      { key: "HANOMAN_SSH_BIN", group: "vps", label: "Biner ssh", kind: "path", apply: "new-session", category: "knob", default: "ssh" },
+      // runtime
+      { key: "HANOMAN_EVENTS_TICK_MS", group: "runtime", label: "Interval events (ms)", kind: "int", apply: "live", category: "knob", default: "1000", min: 100 },
+      { key: "HANOMAN_UPDATE_FETCH", group: "runtime", label: "Deteksi update saat boot", kind: "bool", apply: "live", category: "knob", default: "1" },
+      // SPEC-398 · ADR-0087 · deteksi update kini membandingkan semver dengan registry npm, bukan
+      // menghitung commit di repo git (HANOMAN_REPO_ROOT dicabut bersama jalur git itu).
+      {
+        key: "HANOMAN_NPM_REGISTRY",
+        group: "runtime",
+        label: "Registry npm",
+        kind: "string",
+        apply: "live",
+        category: "knob",
+        default: "https://registry.npmjs.org",
+        help: "Sumber versi terbaru paket `hanoman`."
+      },
+      {
+        key: "HANOMAN_TMUX_SOCKET",
+        group: "runtime",
+        label: "Socket tmux",
+        kind: "string",
+        apply: "restart",
+        category: "knob",
+        default: "hanoman",
+        help: "Mengubah ini TIDAK memindahkan sesi tmux yang sudah hidup \u2014 berlaku setelah restart."
+      },
+      // gitGraph (SPEC-233 · preferensi tampilan git graph; semua live, dikonsumsi client)
+      { key: "gitGraph.style", group: "gitGraph", label: "Gaya graph", kind: "string", apply: "live", category: "knob", default: "rounded", help: "rounded | angular" },
+      { key: "gitGraph.colours", group: "gitGraph", label: "Warna lane (CSV)", kind: "string", apply: "live", category: "knob", help: "Daftar warna hex dipisah koma; kosong = palet bawaan." },
+      { key: "gitGraph.dateType", group: "gitGraph", label: "Jenis tanggal", kind: "string", apply: "live", category: "knob", default: "author", help: "author | commit" },
+      { key: "gitGraph.commitsInitialLoad", group: "gitGraph", label: "Muat awal", kind: "int", apply: "live", category: "knob", default: "200", min: 1 },
+      { key: "gitGraph.commitsLoadMore", group: "gitGraph", label: "Muat lagi", kind: "int", apply: "live", category: "knob", default: "100", min: 1 },
+      { key: "gitGraph.showRemoteBranches", group: "gitGraph", label: "Tampilkan remote", kind: "bool", apply: "live", category: "knob", default: "1" },
+      { key: "gitGraph.showTags", group: "gitGraph", label: "Tampilkan tag", kind: "bool", apply: "live", category: "knob", default: "1" },
+      { key: "gitGraph.showStashes", group: "gitGraph", label: "Tampilkan stash", kind: "bool", apply: "live", category: "knob", default: "1" },
+      { key: "gitGraph.showUncommitted", group: "gitGraph", label: "Tampilkan uncommitted", kind: "bool", apply: "live", category: "knob", default: "1" },
+      { key: "gitGraph.muteMergeCommits", group: "gitGraph", label: "Redupkan merge commit", kind: "bool", apply: "live", category: "knob", default: "1" },
+      { key: "gitGraph.fetchAvatars", group: "gitGraph", label: "Ambil avatar (gravatar)", kind: "bool", apply: "live", category: "knob", default: "0", help: "Jaringan eksternal ke gravatar.com." },
+      { key: "gitGraph.combineLocalRemote", group: "gitGraph", label: "Gabung label local+remote", kind: "bool", apply: "live", category: "knob", default: "0" },
+      { key: "gitGraph.markdown", group: "gitGraph", label: "Render markdown pesan", kind: "bool", apply: "live", category: "knob", default: "1" },
+      { key: "gitGraph.emoji", group: "gitGraph", label: "Render emoji shortcode", kind: "bool", apply: "live", category: "knob", default: "1" },
+      { key: "gitGraph.issueLinkPattern", group: "gitGraph", label: "Pola link issue", kind: "string", apply: "live", category: "knob", help: "URL dengan $1 untuk nomor issue, mis. https://github.com/acme/app/issues/$1" },
+      // bootstrap (read-only)
+      { key: "DATABASE_URL", group: "bootstrap", label: "DATABASE_URL", kind: "secret", apply: "restart", category: "bootstrap" },
+      { key: "TEST_DATABASE_URL", group: "bootstrap", label: "TEST_DATABASE_URL", kind: "secret", apply: "restart", category: "bootstrap" },
+      { key: "PORT", group: "bootstrap", label: "PORT", kind: "int", apply: "restart", category: "bootstrap", default: "8787" },
+      { key: "HOST", group: "bootstrap", label: "HOST", kind: "string", apply: "restart", category: "bootstrap", default: "127.0.0.1" },
+      { key: "NODE_ENV", group: "bootstrap", label: "NODE_ENV", kind: "string", apply: "restart", category: "bootstrap" },
+      // SPEC-398 · ADR-0086/0087 · lokasi data & aset, dibaca sekali saat boot (CLI yang menyetelnya).
+      { key: "HANOMAN_HOME", group: "bootstrap", label: "HANOMAN_HOME", kind: "path", apply: "restart", category: "bootstrap" },
+      { key: "HANOMAN_WEB_DIR", group: "bootstrap", label: "HANOMAN_WEB_DIR", kind: "path", apply: "restart", category: "bootstrap" }
+    ];
+    BY_KEY = new Map(CONFIG_REGISTRY.map((e) => [e.key, e]));
+  }
+});
+
+// ../shared/src/semver.ts
+function parse(v) {
+  const m = RE.exec(v.trim());
+  return m ? { nums: [Number(m[1]), Number(m[2]), Number(m[3])], pre: m[4] ?? null } : null;
+}
+function preKey(pre) {
+  return pre.split(".").map((s) => /^\d+$/.test(s) ? s.padStart(12, "0") : s).join(".");
+}
+function compareSemver(a, b) {
+  const pa = parse(a), pb = parse(b);
+  if (!pa || !pb) return 0;
+  for (let i = 0; i < 3; i++) {
+    const d = pa.nums[i] - pb.nums[i];
+    if (d !== 0) return d < 0 ? -1 : 1;
+  }
+  if (pa.pre === pb.pre) return 0;
+  if (pa.pre === null) return 1;
+  if (pb.pre === null) return -1;
+  const ka = preKey(pa.pre), kb = preKey(pb.pre);
+  return ka < kb ? -1 : ka > kb ? 1 : 0;
+}
+var RE;
+var init_semver = __esm({
+  "../shared/src/semver.ts"() {
+    "use strict";
+    RE = /^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?/;
+  }
+});
+
+// ../shared/src/index.ts
+var init_src2 = __esm({
+  "../shared/src/index.ts"() {
+    "use strict";
+    init_enums();
+    init_entities();
+    init_agent();
+    init_lead();
+    init_dto();
+    init_api();
+    init_coverage();
+    init_ticket_status();
+    init_session_kind();
+    init_config();
+    init_config_registry();
+    init_semver();
+  }
+});
+
+// src/layout.ts
+import { join as join2, resolve as resolve2 } from "node:path";
+function resolveLayout(distDir2, exists) {
+  const pkg = resolve2(distDir2, "..");
+  if (exists(join2(pkg, "prisma", "schema.prisma"))) {
+    return {
+      root: pkg,
+      schema: join2(pkg, "prisma", "schema.prisma"),
+      server: join2(pkg, "dist", "server.js"),
+      web: exists(join2(pkg, "web")) ? join2(pkg, "web") : null
+    };
+  }
+  const repo = resolve2(distDir2, "../..");
+  if (exists(join2(repo, "server", "prisma", "schema.prisma"))) {
+    return {
+      root: repo,
+      schema: join2(repo, "server", "prisma", "schema.prisma"),
+      server: join2(repo, "server", "dist", "server.js"),
+      web: exists(join2(repo, "src", "dist")) ? join2(repo, "src", "dist") : null
+    };
+  }
+  throw new Error(`hanoman: prisma/schema.prisma tak ditemukan dari ${distDir2} \u2014 instalasi rusak?`);
+}
+var init_layout = __esm({
+  "src/layout.ts"() {
+    "use strict";
+  }
+});
+
+// src/commands/update.ts
+var update_exports = {};
+__export(update_exports, {
+  INSTALL_ARGS: () => INSTALL_ARGS,
+  PKG: () => PKG,
+  default: () => update,
+  planUpdate: () => planUpdate
+});
+import { execFileSync } from "node:child_process";
+function planUpdate(current, latest) {
+  if (!latest) return { action: "unknown", current, latest: null };
+  return compareSemver(latest, current) > 0 ? { action: "install", current, latest } : { action: "up-to-date", current, latest };
+}
+async function latestVersion(registry) {
+  try {
+    const res = await fetch(`${registry.replace(/\/+$/, "")}/${PKG}/latest`, { signal: AbortSignal.timeout(1e4) });
+    if (!res.ok) return null;
+    const body = await res.json();
+    return typeof body.version === "string" ? body.version : null;
+  } catch {
+    return null;
+  }
+}
+async function update(argv, ctx) {
+  const check = argv.includes("--check");
+  const current = currentVersion();
+  const latest = await latestVersion(ctx.env.HANOMAN_NPM_REGISTRY ?? DEFAULT_REGISTRY);
+  const plan = planUpdate(current, latest);
+  if (plan.action === "unknown") {
+    ctx.stderr(`hanoman ${current} \xB7 registry npm tak terjangkau \u2014 coba lagi nanti
+`);
+    return 1;
+  }
+  if (plan.action === "up-to-date") {
+    ctx.stdout(`hanoman ${current} sudah terkini
+`);
+    return 0;
+  }
+  ctx.stdout(`hanoman ${plan.current} \u2192 ${plan.latest}
+`);
+  if (check) {
+    ctx.stdout(`jalankan: npm ${INSTALL_ARGS.join(" ")}
+`);
+    return 0;
+  }
+  try {
+    execFileSync("npm", [...INSTALL_ARGS], { stdio: "inherit" });
+  } catch {
+    ctx.stderr("npm i -g gagal \u2014 jalankan manual (mungkin butuh sudo)\n");
+    return 1;
+  }
+  ctx.stdout(`terpasang hanoman ${plan.latest} \xB7 restart instance yang berjalan
+`);
+  return 0;
+}
+var PKG, INSTALL_ARGS, DEFAULT_REGISTRY;
+var init_update = __esm({
+  "src/commands/update.ts"() {
     "use strict";
-    API = "/api";
-    paths = {
-      projects: `${API}/projects`,
-      project: (id) => `${API}/projects/${id}`,
-      // SPEC-255 · ADR-0064 · rename slug project (efek: DSN, Help Center, sync).
-      projectRename: (id) => `${API}/projects/${encodeURIComponent(id)}/rename`,
-      branches: (id) => `${API}/projects/${id}/branches`,
-      // SPEC-360 · ADR-0077 · branch ter-merge (nilai turunan git) + hapus batch local/origin.
-      branchesUnused: (id, base) => `${API}/projects/${id}/branches/unused${base ? `?base=${encodeURIComponent(base)}` : ""}`,
-      branchesDelete: (id) => `${API}/projects/${id}/branches/delete`,
-      // SPEC-217 · path per-mesin (LocalBinding, tak disync) + clone dari gitRemote
-      binding: (id) => `${API}/projects/${id}/binding`,
-      clone: (id) => `${API}/projects/${id}/clone`,
-      specs: `${API}/specs`,
-      spec: (id) => `${API}/specs/${id}`,
-      specDocs: (id) => `${API}/specs/${id}/docs`,
-      specDocFile: (id, path) => `${API}/specs/${id}/docs/${path}`,
-      // SPEC-340 · ADR-0076 · rekomendasi tindak lanjut audit (turunan blok json dokumen audit).
-      specEscalation: (id) => `${API}/specs/${id}/escalation`,
-      specIntegrate: (id) => `${API}/specs/${id}/integrate`,
-      specReview: (id) => `${API}/specs/${id}/review`,
-      specReviewFile: (id, path) => `${API}/specs/${id}/review/${path}`,
-      settings: `${API}/settings`,
-      notifications: `${API}/notifications`,
-      limits: `${API}/limits`,
-      // SPEC-339 · versi codex CLI (peringatan lunak model GPT-5.6).
-      codexVersion: `${API}/codex/version`,
-      docs: (id) => `${API}/projects/${id}/docs`,
-      docFile: (id, path) => `${API}/projects/${id}/docs/${path}`,
-      // SPEC-210 · dokumen PRD project (freshest-wins: worktree sesi prd hidup > repoDir)
-      prds: (id) => `${API}/projects/${id}/prds`,
-      allPrds: `${API}/prds`,
-      // perbaikan SPEC-210 · daftar PRD lintas-project (filter "Semua project")
-      prdFile: (id, path) => `${API}/projects/${id}/prds/${path}`,
-      // SPEC-273 · manifest breakdown sebuah PRD (freshest-wins) + materialize batch.
-      breakdown: (id, prd) => `${API}/projects/${id}/breakdown?prd=${encodeURIComponent(prd)}`,
-      specsBatch: `${API}/specs/batch`,
-      // SPEC-182 · IDE Visual
-      ideTree: (id, ref = "") => `${API}/projects/${id}/tree${ref ? `?ref=${encodeURIComponent(ref)}` : ""}`,
-      ideFile: (id, path, ref = "") => `${API}/projects/${id}/file${path ? `?path=${encodeURIComponent(path)}${ref ? `&ref=${encodeURIComponent(ref)}` : ""}` : ""}`,
-      ideGraph: (id, limit = 200, opts) => {
-        const p = new URLSearchParams({ limit: String(limit) });
-        if (opts?.branches?.length) p.set("branches", opts.branches.join(","));
-        if (opts?.showRemote === false) p.set("showRemote", "false");
-        if (opts?.showTags === false) p.set("showTags", "false");
-        return `${API}/projects/${id}/graph?${p.toString()}`;
-      },
-      ideStatus: (id) => `${API}/projects/${id}/status`,
-      // SPEC-233 · status working tree
-      ideSearch: (id, q, by = "all") => `${API}/projects/${id}/graph/search?q=${encodeURIComponent(q)}&by=${by}`,
-      // SPEC-233
-      ideStashes: (id) => `${API}/projects/${id}/stashes`,
-      // SPEC-233 · daftar stash
-      // SPEC-233 · remote mgmt + pr-url + archive
-      ideRemotes: (id) => `${API}/projects/${id}/remotes`,
-      ideRemote: (id, name) => `${API}/projects/${id}/remotes/${encodeURIComponent(name)}`,
-      idePrUrl: (id, branch, base) => `${API}/projects/${id}/pr-url?branch=${encodeURIComponent(branch)}${base ? `&base=${encodeURIComponent(base)}` : ""}`,
-      ideArchive: (id, ref, format = "zip") => `${API}/projects/${id}/archive?ref=${encodeURIComponent(ref)}&format=${format}`,
-      ideCommit: (id, sha) => `${API}/projects/${id}/commit/${sha}`,
-      // SPEC-233 · diff satu file di commit (vs parent)
-      ideCommitFile: (id, sha, path) => `${API}/projects/${id}/commit/${sha}/file?path=${encodeURIComponent(path)}`,
-      // SPEC-233 · compare dua commit
-      ideCompare: (id, from, to) => `${API}/projects/${id}/compare?from=${encodeURIComponent(from)}&to=${encodeURIComponent(to)}`,
-      ideCompareFile: (id, from, to, path) => `${API}/projects/${id}/compare/file?from=${encodeURIComponent(from)}&to=${encodeURIComponent(to)}&path=${encodeURIComponent(path)}`,
-      ideGit: (id) => `${API}/projects/${id}/git`,
-      ideGitMerge: (id) => `${API}/projects/${id}/git/merge`,
-      // SPEC-229 · merge git graph isolasi
-      // SPEC-234 · status working tree (staged/unstaged) + diff satu file working tree
-      // catat: /working-status dibedakan dari /status milik SPEC-233 (repoStatus graph) — beda bentuk respons.
-      ideWorkingStatus: (id) => `${API}/projects/${id}/working-status`,
-      ideFileDiff: (id, path, staged) => `${API}/projects/${id}/file-diff?path=${encodeURIComponent(path)}${staged ? "&staged=1" : ""}`,
-      ideGitRebase: (id) => `${API}/projects/${id}/git/rebase`,
-      // SPEC-233 · rebase isolasi
-      ideGitPull: (id) => `${API}/projects/${id}/git/pull`,
-      // SPEC-233 · pull isolasi
-      ideGitDrop: (id) => `${API}/projects/${id}/git/drop`,
-      // SPEC-233 · drop commit isolasi
-      fsBrowse: (path) => `${API}/fs/browse${path ? `?path=${encodeURIComponent(path)}` : ""}`,
-      terminalSessions: `${API}/terminal/sessions`,
-      terminalSession: (id) => `${API}/terminal/sessions/${id}`,
-      terminalPhases: (id) => `${API}/terminal/sessions/${id}/phases`,
-      // SPEC-230 · review + integrate ber-skop sesi (sesi project-level PRD, tanpa Spec).
-      sessionReview: (id) => `${API}/terminal/sessions/${id}/review`,
-      sessionReviewFile: (id, path) => `${API}/terminal/sessions/${id}/review/${path}`,
-      sessionIntegrate: (id) => `${API}/terminal/sessions/${id}/integrate`,
-      terminalWs: (id) => `${API}/terminal/sessions/${id}/ws`,
-      // SPEC-362 · ADR-0079 · riwayat sesi. Di bawah prefix /terminal supaya ikut capability
-      // `sessions` yang sudah ada (services/agent-capabilities.ts) tanpa menambah domain baru.
-      sessionHistory: (qs = "") => `${API}/terminal/history${qs}`,
-      sessionHistoryItem: (id) => `${API}/terminal/history/${encodeURIComponent(id)}`,
-      sessionTranscript: (id) => `${API}/terminal/history/${encodeURIComponent(id)}/transcript`,
-      eventsWs: `${API}/events/ws`,
-      // SPEC-199 · WebSocket siar dashboard (global, bukan per-sesi)
-      vps: `${API}/vps`,
-      vpsOne: (id) => `${API}/vps/${id}`,
-      vpsAudit: (id) => `${API}/vps/${id}/audit`,
-      vpsHarden: (id) => `${API}/vps/${id}/harden`,
-      vpsSession: (id) => `${API}/vps/${id}/session`,
-      vpsTest: (id) => `${API}/vps/${id}/test`,
-      vpsConsole: (id) => `${API}/vps/${id}/console`,
-      // SPEC-220 · kepatuhan checklist
-      vpsChecklist: (id) => `${API}/vps/${id}/checklist`,
-      vpsItemNa: (id, itemId) => `${API}/vps/${id}/items/${itemId}/na`,
-      vpsItemNaBulk: (id) => `${API}/vps/${id}/items/na-bulk`,
-      vpsItemAttest: (id, itemId) => `${API}/vps/${id}/items/${itemId}/attest`,
-      vpsRemediatePreview: (id) => `${API}/vps/${id}/remediate/preview`,
-      vpsRemediate: (id) => `${API}/vps/${id}/remediate`,
-      // SPEC-169 · auth
-      authStatus: `${API}/auth/status`,
-      authSetup: `${API}/auth/setup`,
-      authLogin: `${API}/auth/login`,
-      authLogout: `${API}/auth/logout`,
-      authUsers: `${API}/auth/users`,
-      authUser: (id) => `${API}/auth/users/${id}`,
-      authChangePassword: `${API}/auth/change-password`,
-      // SPEC-213 · device token + activity log
-      deviceTokens: `${API}/device-tokens`,
-      deviceToken: (id) => `${API}/device-tokens/${id}`,
-      sessionResults: (projectId) => `${API}/session-results${projectId ? `?projectId=${encodeURIComponent(projectId)}` : ""}`,
-      // SPEC-215 · config runtime
-      config: `${API}/config`,
-      configKey: (key) => `${API}/config/${encodeURIComponent(key)}`,
-      // SPEC-299 · panel scheduler (daun #6) — konsumen read-only fondasi SPEC-294/ADR-0072.
-      schedulerConfig: `${API}/scheduler/config`,
-      schedulerState: `${API}/scheduler/state`,
-      // SPEC-268 · ADR-0066 · pemicu sync manual (cookie-authed)
-      syncNow: `${API}/sync/now`,
-      // SPEC-270 · ADR-0067 · antrean konflik rekonsil (cookie-authed)
-      syncConflicts: `${API}/sync/conflicts`,
-      syncConflictResolve: (entity, recordId) => `${API}/sync/conflicts/${encodeURIComponent(entity)}/${encodeURIComponent(recordId)}/resolve`,
-      // SPEC-257 · ADR-0065 · agent token (kelola cookie-only) + katalog capability
-      agentTokens: `${API}/agent-tokens`,
-      agentToken: (id) => `${API}/agent-tokens/${id}`,
-      agentCapabilities: `${API}/agent-tokens/capabilities`,
-      // SPEC-249 · error monitoring. ingest publik ber-DSN (bypass gate cookie, ADR-0060).
-      ingest: (slug) => `${API}/ingest/${encodeURIComponent(slug)}`,
-      errors: `${API}/errors`,
-      errorsGuide: `${API}/errors/integration-guide`,
-      error: (id) => `${API}/errors/${id}`,
-      errorEscalate: (id) => `${API}/errors/${id}/escalate`,
-      errorUnlink: (id) => `${API}/errors/${id}/unlink`,
-      // SPEC-271 · lepas tautan backlog
-      projectIngestKey: (id) => `${API}/projects/${encodeURIComponent(id)}/ingest-key`,
-      // SPEC-253 · Help Center publik (bypass gate cookie; otorisasi helpEnabled + kunci opaque tiket).
-      help: (slug) => `${API}/help/${encodeURIComponent(slug)}`,
-      helpTickets: (slug) => `${API}/help/${encodeURIComponent(slug)}/tickets`,
-      helpStatus: (slug, key) => `${API}/help/${encodeURIComponent(slug)}/tickets/${encodeURIComponent(key)}`,
-      // SPEC-253 · triase (di belakang gate cookie)
-      projectHelpCenter: (id) => `${API}/projects/${encodeURIComponent(id)}/help-center`,
-      tickets: `${API}/tickets`,
-      ticket: (id) => `${API}/tickets/${id}`,
-      ticketAttachment: (id, attId) => `${API}/tickets/${id}/attachments/${attId}`,
-      ticketAccept: (id) => `${API}/tickets/${id}/accept`,
-      ticketUnlink: (id) => `${API}/tickets/${id}/unlink`,
-      // SPEC-271 · lepas tautan backlog
-      ticketReject: (id) => `${API}/tickets/${id}/reject`,
-      // SPEC-337 · ADR-0075 · relasi integrasi antar project (LOCAL-only) + log lintas project.
-      projectLinks: (id) => `${API}/projects/${encodeURIComponent(id)}/links`,
-      projectLink: (id, linkId) => `${API}/projects/${encodeURIComponent(id)}/links/${encodeURIComponent(linkId)}`,
-      // SPEC-361 · ADR-0078 · unduh dokumen: query ditempelkan ke URL endpoint dokumen yang sudah ada
-      // (tak ada endpoint ekspor terpisah). `base` bisa sudah membawa query, mis. ideFile(?path=…).
-      download: (base, fmt) => `${base}${base.includes("?") ? "&" : "?"}download=${fmt}`
-    };
+    init_src2();
+    init_router();
+    PKG = "hanoman";
+    INSTALL_ARGS = ["i", "-g", `${PKG}@latest`];
+    DEFAULT_REGISTRY = "https://registry.npmjs.org";
   }
 });
 
-// ../shared/src/coverage.ts
-function coverageOf(docs) {
-  const byCat = /* @__PURE__ */ new Map();
-  for (const d of docs) byCat.set(d.category, (byCat.get(d.category) ?? true) && d.linked);
-  if (byCat.size === 0) return 0;
-  const linked = [...byCat.values()].filter(Boolean).length;
-  return Math.round(linked / byCat.size * 100);
+// src/commands/start.ts
+var start_exports = {};
+__export(start_exports, {
+  MAX_UPDATE_RESTARTS: () => MAX_UPDATE_RESTARTS,
+  applyMigrations: () => applyMigrations,
+  default: () => start,
+  distDir: () => distDir,
+  ensurePrismaClient: () => ensurePrismaClient,
+  ensureSpawnHelpersExecutable: () => ensureSpawnHelpersExecutable,
+  installLatest: () => installLatest,
+  migrateFailureHint: () => migrateFailureHint,
+  parseStartArgs: () => parseStartArgs,
+  planSupervisorStep: () => planSupervisorStep,
+  prismaClientUsable: () => prismaClientUsable,
+  repairSpawnHelper: () => repairSpawnHelper,
+  serverEnv: () => serverEnv,
+  spawnHelperPaths: () => spawnHelperPaths
+});
+import { spawn, execFileSync as execFileSync2 } from "node:child_process";
+import { createRequire } from "node:module";
+import { existsSync, mkdirSync, readdirSync, statSync, chmodSync } from "node:fs";
+import { dirname as dirname2, join as join3, resolve as resolvePath } from "node:path";
+import { fileURLToPath } from "node:url";
+function parseStartArgs(argv) {
+  const out = { port: null, host: null, db: null, migrate: true };
+  const value = (i, flag, inline) => {
+    const v = inline ?? argv[i + 1];
+    if (v === void 0 || v.startsWith("--")) throw new Error(`${flag} butuh nilai`);
+    return v;
+  };
+  for (let i = 0; i < argv.length; i++) {
+    const raw = argv[i];
+    const eq = raw.indexOf("=");
+    const flag = eq === -1 ? raw : raw.slice(0, eq);
+    const inline = eq === -1 ? void 0 : raw.slice(eq + 1);
+    if (flag === "--no-migrate") {
+      out.migrate = false;
+      continue;
+    }
+    if (flag === "--port") {
+      const v = value(i, "--port", inline);
+      const n = Number(v);
+      if (!Number.isInteger(n) || n <= 0) throw new Error(`--port harus angka, dapat "${v}"`);
+      out.port = n;
+      if (inline === void 0) i++;
+      continue;
+    }
+    if (flag === "--host") {
+      out.host = value(i, "--host", inline);
+      if (inline === void 0) i++;
+      continue;
+    }
+    if (flag === "--db") {
+      out.db = value(i, "--db", inline);
+      if (inline === void 0) i++;
+      continue;
+    }
+    throw new Error(`argumen tak dikenal untuk start: ${raw}`);
+  }
+  return out;
 }
-function isExternalLink(target) {
-  return !target || /^(https?:|#|mailto:)/.test(target);
+function distDir() {
+  return dirname2(fileURLToPath(import.meta.url));
 }
-function resolveLink(fromRel, target) {
-  const clean = target.trim().split(/\s+/)[0].split("#")[0].split("\\").join("/");
-  if (!clean) return "";
-  if (clean.startsWith("/")) return clean.slice(1).split("/").filter((p) => p && p !== ".").join("/");
-  const dir = fromRel.includes("/") ? fromRel.slice(0, fromRel.lastIndexOf("/")) : "";
-  const parts = (dir ? dir.split("/") : []).concat(clean.replace(/^\.\//, "").split("/"));
-  const out = [];
-  for (const p of parts) {
-    if (p === "" || p === ".") continue;
-    if (p === "..") out.pop();
-    else out.push(p);
+function runPrisma(args, dbUrl) {
+  const prismaCli = prismaCliPath(createRequire(import.meta.url).resolve);
+  try {
+    const out = execFileSync2(process.execPath, [prismaCli, ...args], {
+      env: { ...process.env, DATABASE_URL: dbUrl },
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+    process.stdout.write(out);
+    return out;
+  } catch (e) {
+    const err = e;
+    const output = `${err.stdout ?? ""}${err.stderr ?? ""}`;
+    process.stderr.write(output);
+    throw Object.assign(new Error("prisma gagal"), { output });
   }
-  return out.join("/");
 }
-function linkedSetFrom(indexRel, docs, read) {
-  const inCorpus = new Set(docs);
-  const seen = /* @__PURE__ */ new Set();
-  const queue = [indexRel];
-  let i = 0;
-  while (i < queue.length) {
-    const cur = queue[i++];
-    if (seen.has(cur)) continue;
-    seen.add(cur);
-    const md = read(cur);
-    if (md === null) continue;
-    for (const m of md.matchAll(LINK_RE)) {
-      const target = m[1].trim();
-      if (isExternalLink(target)) continue;
-      const rel = resolveLink(cur, target);
-      if (rel && inCorpus.has(rel) && !seen.has(rel)) queue.push(rel);
-    }
-  }
-  return new Set([...seen].filter((p) => inCorpus.has(p)));
+function migrateFailureHint(output, dbFile) {
+  if (!output.includes("P3005")) return null;
+  return `hanoman: berkas DB ${dbFile} sudah berisi tabel, tapi tak punya riwayat migrasi hanoman.
+Biasanya ia bukan DB hanoman versi ini \u2014 mis. sisa prototipe lama atau berkas tool lain.
+Pilih salah satu:
+  \u2022 Pindahkan berkas itu, lalu jalankan ulang:  mv "${dbFile}" "${dbFile}.lama"
+  \u2022 Pakai berkas lain:  hanoman --db /path/baru.db  (atau HANOMAN_DATABASE_URL=file:/path/baru.db)
+Isi berkas lama tidak diubah oleh hanoman \u2014 periksa dulu sebelum menghapusnya.`;
 }
-var LINK_RE;
-var init_coverage = __esm({
-  "../shared/src/coverage.ts"() {
-    "use strict";
-    LINK_RE = /\]\(([^)]+)\)/g;
-  }
-});
-
-// ../shared/src/ticket-status.ts
-var init_ticket_status = __esm({
-  "../shared/src/ticket-status.ts"() {
-    "use strict";
-  }
-});
-
-// ../shared/src/session-kind.ts
-var SESSION_KINDS, zSessionKind;
-var init_session_kind = __esm({
-  "../shared/src/session-kind.ts"() {
-    "use strict";
-    init_zod();
-    SESSION_KINDS = [
-      "spec",
-      "reverse",
-      "prd",
-      "scaffold",
-      "breakdown",
-      "cross-audit",
-      "vps",
-      "shell",
-      "worktree",
-      "terminal"
-    ];
-    zSessionKind = external_exports.enum(SESSION_KINDS);
+function applyMigrations(schema, dbUrl) {
+  runPrisma(["migrate", "deploy", "--schema", schema], dbUrl);
+}
+async function prismaClientUsable() {
+  try {
+    const { PrismaClient } = await import("@prisma/client");
+    new PrismaClient();
+    return true;
+  } catch {
+    return false;
   }
-});
-
-// ../shared/src/config.ts
-var zHanomanConfig;
-var init_config = __esm({
-  "../shared/src/config.ts"() {
-    "use strict";
-    init_zod();
-    zHanomanConfig = external_exports.object({
-      docsDir: external_exports.string().default("internal/docs")
-    });
+}
+async function ensurePrismaClient(schema, dbUrl, ctx) {
+  if (await prismaClientUsable()) return true;
+  ctx.stdout("hanoman \xB7 menyiapkan Prisma client (sekali per instalasi)\n");
+  try {
+    runPrisma(["generate", "--schema", schema], dbUrl);
+    return true;
+  } catch {
+    ctx.stderr("hanoman: `prisma generate` gagal \u2014 jalankan manual di direktori paket, atau pasang ulang tanpa --ignore-scripts\n");
+    return false;
   }
-});
-
-// ../shared/src/config-registry.ts
-var CONFIG_REGISTRY, BY_KEY;
-var init_config_registry = __esm({
-  "../shared/src/config-registry.ts"() {
-    "use strict";
-    CONFIG_REGISTRY = [
-      // sync
-      {
-        key: "SYNC_SERVER_URL",
-        group: "sync",
-        label: "URL hub",
-        kind: "url",
-        apply: "live",
-        category: "knob",
-        help: "Base URL hub tujuan sync (REST + WS). Kosong = instance ini murni HUB."
-      },
-      {
-        key: "SYNC_DEVICE_TOKEN",
-        group: "sync",
-        label: "Device token",
-        kind: "secret",
-        apply: "live",
-        category: "credential",
-        help: "Token yang diterbitkan hub (tab Perangkat di hub). Dikirim sebagai Bearer."
-      },
-      {
-        key: "SYNC_TICK_MS",
-        group: "sync",
-        label: "Interval sync (ms)",
-        kind: "int",
-        apply: "live",
-        category: "knob",
-        default: "15000",
-        min: 1e3
-      },
-      // claude
-      {
-        key: "CLAUDE_CODE_OAUTH_TOKEN",
-        group: "claude",
-        label: "Claude OAuth token",
-        kind: "secret",
-        apply: "new-session",
-        category: "credential",
-        inheritEnv: true,
-        help: "Token `claude setup-token`. Diwarisi proses claude yang di-spawn."
-      },
-      { key: "ANTHROPIC_API_KEY", group: "claude", label: "Anthropic API key", kind: "secret", apply: "new-session", category: "credential", inheritEnv: true },
-      { key: "HANOMAN_CLAUDE_BIN", group: "claude", label: "Biner claude", kind: "path", apply: "new-session", category: "knob", default: "claude" },
-      // codex (SPEC-338 · ADR-0074)
-      { key: "HANOMAN_CODEX_BIN", group: "claude", label: "Biner codex", kind: "path", apply: "new-session", category: "knob", default: "codex" },
-      {
-        key: "CLAUDE_CONFIG_DIR",
-        group: "claude",
-        label: "Dir config Claude",
-        kind: "path",
-        apply: "new-session",
-        category: "knob",
-        help: "Default ~/.claude. Sumber .credentials.json untuk panel usage/limit."
-      },
-      // vps
-      { key: "HANOMAN_SSH_KEY_DIR", group: "vps", label: "Dir key SSH", kind: "path", apply: "new-session", category: "knob", help: "Default ~/.hanoman." },
-      { key: "HANOMAN_SSH_BIN", group: "vps", label: "Biner ssh", kind: "path", apply: "new-session", category: "knob", default: "ssh" },
-      // runtime
-      { key: "HANOMAN_EVENTS_TICK_MS", group: "runtime", label: "Interval events (ms)", kind: "int", apply: "live", category: "knob", default: "1000", min: 100 },
-      { key: "HANOMAN_UPDATE_FETCH", group: "runtime", label: "Deteksi update saat boot", kind: "bool", apply: "live", category: "knob", default: "1" },
-      // SPEC-398 · ADR-0087 · deteksi update kini membandingkan semver dengan registry npm, bukan
-      // menghitung commit di repo git (HANOMAN_REPO_ROOT dicabut bersama jalur git itu).
-      {
-        key: "HANOMAN_NPM_REGISTRY",
-        group: "runtime",
-        label: "Registry npm",
-        kind: "string",
-        apply: "live",
-        category: "knob",
-        default: "https://registry.npmjs.org",
-        help: "Sumber versi terbaru paket `hanoman`."
-      },
-      {
-        key: "HANOMAN_TMUX_SOCKET",
-        group: "runtime",
-        label: "Socket tmux",
-        kind: "string",
-        apply: "restart",
-        category: "knob",
-        default: "hanoman",
-        help: "Mengubah ini TIDAK memindahkan sesi tmux yang sudah hidup \u2014 berlaku setelah restart."
-      },
-      // gitGraph (SPEC-233 · preferensi tampilan git graph; semua live, dikonsumsi client)
-      { key: "gitGraph.style", group: "gitGraph", label: "Gaya graph", kind: "string", apply: "live", category: "knob", default: "rounded", help: "rounded | angular" },
-      { key: "gitGraph.colours", group: "gitGraph", label: "Warna lane (CSV)", kind: "string", apply: "live", category: "knob", help: "Daftar warna hex dipisah koma; kosong = palet bawaan." },
-      { key: "gitGraph.dateType", group: "gitGraph", label: "Jenis tanggal", kind: "string", apply: "live", category: "knob", default: "author", help: "author | commit" },
-      { key: "gitGraph.commitsInitialLoad", group: "gitGraph", label: "Muat awal", kind: "int", apply: "live", category: "knob", default: "200", min: 1 },
-      { key: "gitGraph.commitsLoadMore", group: "gitGraph", label: "Muat lagi", kind: "int", apply: "live", category: "knob", default: "100", min: 1 },
-      { key: "gitGraph.showRemoteBranches", group: "gitGraph", label: "Tampilkan remote", kind: "bool", apply: "live", category: "knob", default: "1" },
-      { key: "gitGraph.showTags", group: "gitGraph", label: "Tampilkan tag", kind: "bool", apply: "live", category: "knob", default: "1" },
-      { key: "gitGraph.showStashes", group: "gitGraph", label: "Tampilkan stash", kind: "bool", apply: "live", category: "knob", default: "1" },
-      { key: "gitGraph.showUncommitted", group: "gitGraph", label: "Tampilkan uncommitted", kind: "bool", apply: "live", category: "knob", default: "1" },
-      { key: "gitGraph.muteMergeCommits", group: "gitGraph", label: "Redupkan merge commit", kind: "bool", apply: "live", category: "knob", default: "1" },
-      { key: "gitGraph.fetchAvatars", group: "gitGraph", label: "Ambil avatar (gravatar)", kind: "bool", apply: "live", category: "knob", default: "0", help: "Jaringan eksternal ke gravatar.com." },
-      { key: "gitGraph.combineLocalRemote", group: "gitGraph", label: "Gabung label local+remote", kind: "bool", apply: "live", category: "knob", default: "0" },
-      { key: "gitGraph.markdown", group: "gitGraph", label: "Render markdown pesan", kind: "bool", apply: "live", category: "knob", default: "1" },
-      { key: "gitGraph.emoji", group: "gitGraph", label: "Render emoji shortcode", kind: "bool", apply: "live", category: "knob", default: "1" },
-      { key: "gitGraph.issueLinkPattern", group: "gitGraph", label: "Pola link issue", kind: "string", apply: "live", category: "knob", help: "URL dengan $1 untuk nomor issue, mis. https://github.com/acme/app/issues/$1" },
-      // bootstrap (read-only)
-      { key: "DATABASE_URL", group: "bootstrap", label: "DATABASE_URL", kind: "secret", apply: "restart", category: "bootstrap" },
-      { key: "TEST_DATABASE_URL", group: "bootstrap", label: "TEST_DATABASE_URL", kind: "secret", apply: "restart", category: "bootstrap" },
-      { key: "PORT", group: "bootstrap", label: "PORT", kind: "int", apply: "restart", category: "bootstrap", default: "8787" },
-      { key: "HOST", group: "bootstrap", label: "HOST", kind: "string", apply: "restart", category: "bootstrap", default: "127.0.0.1" },
-      { key: "NODE_ENV", group: "bootstrap", label: "NODE_ENV", kind: "string", apply: "restart", category: "bootstrap" },
-      // SPEC-398 · ADR-0086/0087 · lokasi data & aset, dibaca sekali saat boot (CLI yang menyetelnya).
-      { key: "HANOMAN_HOME", group: "bootstrap", label: "HANOMAN_HOME", kind: "path", apply: "restart", category: "bootstrap" },
-      { key: "HANOMAN_WEB_DIR", group: "bootstrap", label: "HANOMAN_WEB_DIR", kind: "path", apply: "restart", category: "bootstrap" }
-    ];
-    BY_KEY = new Map(CONFIG_REGISTRY.map((e) => [e.key, e]));
+}
+function spawnHelperPaths(ptyDir, listDir, exists) {
+  const dirs = [join3(ptyDir, "build", "Release")];
+  for (const name of listDir(join3(ptyDir, "prebuilds"))) dirs.push(join3(ptyDir, "prebuilds", name));
+  return dirs.map((d) => join3(d, "spawn-helper")).filter(exists);
+}
+function ensureSpawnHelpersExecutable(paths2, ops) {
+  const fixed = [];
+  for (const p of paths2) {
+    try {
+      const mode = ops.mode(p) & 4095;
+      if ((mode & 73) === 73) continue;
+      ops.chmod(p, mode | 73);
+      fixed.push(p);
+    } catch {
+    }
   }
-});
-
-// ../shared/src/semver.ts
-function parse(v) {
-  const m = RE.exec(v.trim());
-  return m ? { nums: [Number(m[1]), Number(m[2]), Number(m[3])], pre: m[4] ?? null } : null;
+  return fixed;
 }
-function preKey(pre) {
-  return pre.split(".").map((s) => /^\d+$/.test(s) ? s.padStart(12, "0") : s).join(".");
+function repairSpawnHelper(ctx) {
+  let ptyDir;
+  try {
+    ptyDir = dirname2(createRequire(import.meta.url).resolve("node-pty/package.json"));
+  } catch {
+    return;
+  }
+  const paths2 = spawnHelperPaths(ptyDir, (d) => {
+    try {
+      return readdirSync(d);
+    } catch {
+      return [];
+    }
+  }, existsSync);
+  const fixed = ensureSpawnHelpersExecutable(paths2, {
+    mode: (p) => statSync(p).mode,
+    chmod: (p, m) => chmodSync(p, m)
+  });
+  if (fixed.length) ctx.stdout("hanoman \xB7 memperbaiki izin `spawn-helper` node-pty (sekali per instalasi)\n");
 }
-function compareSemver(a, b) {
-  const pa = parse(a), pb = parse(b);
-  if (!pa || !pb) return 0;
-  for (let i = 0; i < 3; i++) {
-    const d = pa.nums[i] - pb.nums[i];
-    if (d !== 0) return d < 0 ? -1 : 1;
+function planSupervisorStep(code, restartsUsed) {
+  if (code !== UPDATE_RESTART_EXIT) return { action: "exit", code };
+  if (restartsUsed >= MAX_UPDATE_RESTARTS) return { action: "exit", code };
+  return { action: "update" };
+}
+function serverEnv(o) {
+  return {
+    NODE_ENV: "production",
+    DATABASE_URL: o.dbUrl,
+    PORT: String(o.port),
+    HOST: o.host,
+    HANOMAN_HOME: o.home,
+    HANOMAN_SUPERVISOR: "1",
+    ...o.web ? { HANOMAN_WEB_DIR: o.web } : {}
+  };
+}
+function installLatest() {
+  try {
+    execFileSync2("npm", [...INSTALL_ARGS], { stdio: "inherit" });
+    return { ok: true };
+  } catch (e) {
+    return { ok: false, reason: e.message || "npm i -g gagal" };
   }
-  if (pa.pre === pb.pre) return 0;
-  if (pa.pre === null) return 1;
-  if (pb.pre === null) return -1;
-  const ka = preKey(pa.pre), kb = preKey(pb.pre);
-  return ka < kb ? -1 : ka > kb ? 1 : 0;
 }
-var RE;
-var init_semver = __esm({
-  "../shared/src/semver.ts"() {
-    "use strict";
-    RE = /^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?/;
+function runServer(serverJs, env) {
+  const child = spawn(process.execPath, [serverJs], { stdio: "inherit", env: { ...process.env, ...env } });
+  const handlers = ["SIGINT", "SIGTERM"].map((sig) => [sig, () => child.kill(sig)]);
+  for (const [sig, h] of handlers) process.on(sig, h);
+  return new Promise((res) => child.on("exit", (code) => {
+    for (const [sig, h] of handlers) process.off(sig, h);
+    res(code ?? 0);
+  }));
+}
+async function start(argv, ctx) {
+  let opts;
+  try {
+    opts = parseStartArgs(argv);
+  } catch (e) {
+    ctx.stderr(`${e.message}
+`);
+    return 2;
   }
-});
-
-// ../shared/src/index.ts
-var init_src2 = __esm({
-  "../shared/src/index.ts"() {
+  let layout;
+  let dbUrl;
+  try {
+    layout = resolveLayout(distDir(), existsSync);
+    dbUrl = opts.db ? `file:${resolvePath(opts.db)}` : resolveDbUrl(ctx.env, dirname2(layout.schema));
+  } catch (e) {
+    ctx.stderr(`${e.message}
+`);
+    return 1;
+  }
+  const notice = dbUrlNotice(ctx.env);
+  if (notice) ctx.stderr(`${notice}
+`);
+  const home = resolveHome(ctx.env);
+  mkdirSync(home, { recursive: true });
+  mkdirSync(dirname2(dbFilePath(dbUrl)), { recursive: true });
+  if (!existsSync(layout.server)) {
+    ctx.stderr(`hanoman: bundle server tak ada di ${layout.server} \u2014 jalankan \`pnpm build\` dulu
+`);
+    return 1;
+  }
+  if (!await ensurePrismaClient(layout.schema, dbUrl, ctx)) return 1;
+  repairSpawnHelper(ctx);
+  if (opts.migrate) {
+    ctx.stdout(`hanoman \xB7 menerapkan migrasi ke ${dbFilePath(dbUrl)}
+`);
+    try {
+      applyMigrations(layout.schema, dbUrl);
+    } catch (e) {
+      const hint = migrateFailureHint(String(e.output ?? ""), dbFilePath(dbUrl));
+      ctx.stderr(hint ? `
+${hint}
+` : "hanoman: `prisma migrate deploy` gagal \u2014 lihat keluaran di atas\n");
+      return 1;
+    }
+  }
+  const port = opts.port ?? Number(ctx.env.PORT ?? 8787);
+  const host = opts.host ?? ctx.env.HOST ?? "127.0.0.1";
+  ctx.stdout(`hanoman \xB7 http://${host === "0.0.0.0" ? "127.0.0.1" : host}:${port}
+`);
+  const env = serverEnv({ dbUrl, port, host, home, web: layout.web ?? null });
+  let restartsUsed = 0;
+  for (; ; ) {
+    const code = await runServer(layout.server, env);
+    const step = planSupervisorStep(code, restartsUsed);
+    if (step.action === "exit") {
+      if (code === UPDATE_RESTART_EXIT) {
+        ctx.stderr(`hanoman: jatah update-restart (${MAX_UPDATE_RESTARTS}) habis \u2014 keluar tanpa memasang
+`);
+      }
+      return step.code;
+    }
+    restartsUsed++;
+    ctx.stdout(`hanoman \xB7 memasang versi terbaru dari npm (${restartsUsed}/${MAX_UPDATE_RESTARTS})
+`);
+    const res = installLatest();
+    if (!res.ok) {
+      ctx.stderr(`hanoman: update gagal \u2014 ${res.reason}
+`);
+      ctx.stdout("hanoman \xB7 menjalankan ulang versi yang ada\n");
+      continue;
+    }
+    try {
+      runPrisma(["generate", "--schema", layout.schema], dbUrl);
+    } catch {
+      ctx.stderr("hanoman: `prisma generate` sesudah update gagal \u2014 lanjut; server anak yang akan mengeluh\n");
+    }
+    if (opts.migrate) {
+      try {
+        applyMigrations(layout.schema, dbUrl);
+      } catch (e) {
+        const hint = migrateFailureHint(String(e.output ?? ""), dbFilePath(dbUrl));
+        ctx.stderr(hint ? `
+${hint}
+` : "hanoman: migrasi sesudah update gagal \u2014 lihat keluaran di atas\n");
+        return 1;
+      }
+    }
+    ctx.stdout("hanoman \xB7 terpasang; menjalankan ulang\n");
+  }
+}
+var MAX_UPDATE_RESTARTS;
+var init_start = __esm({
+  "src/commands/start.ts"() {
     "use strict";
-    init_enums();
-    init_entities();
-    init_agent();
-    init_dto();
-    init_api();
-    init_coverage();
-    init_ticket_status();
-    init_session_kind();
-    init_config();
-    init_config_registry();
-    init_semver();
+    init_src();
+    init_src2();
+    init_layout();
+    init_update();
+    MAX_UPDATE_RESTARTS = 5;
   }
 });
 
-// src/commands/update.ts
-var update_exports = {};
-__export(update_exports, {
-  INSTALL_ARGS: () => INSTALL_ARGS,
-  PKG: () => PKG,
-  default: () => update,
-  planUpdate: () => planUpdate
+// src/commands/doctor.ts
+var doctor_exports = {};
+__export(doctor_exports, {
+  default: () => doctor,
+  doctorReport: () => doctorReport
 });
 import { execFileSync as execFileSync3 } from "node:child_process";
-function planUpdate(current, latest) {
-  if (!latest) return { action: "unknown", current, latest: null };
-  return compareSemver(latest, current) > 0 ? { action: "install", current, latest } : { action: "up-to-date", current, latest };
+import { accessSync, constants, existsSync as existsSync2 } from "node:fs";
+import { dirname as dirname3 } from "node:path";
+function doctorReport(p) {
+  const major = Number(/^v?(\d+)/.exec(p.node)?.[1] ?? 0);
+  const rows = [
+    { mark: major >= 20 ? "\u2713" : "\u2717", text: `node ${p.node} (butuh \u2265 20)`, fatal: major < 20 },
+    { mark: p.git ? "\u2713" : "\u2717", text: p.git ?? "git \u2014 TAK ADA (wajib: worktree per sesi)", fatal: !p.git },
+    { mark: p.tmux ? "\u2713" : "\u2717", text: p.tmux ?? "tmux \u2014 TAK ADA (wajib: sesi agen hidup di tmux)", fatal: !p.tmux },
+    { mark: p.claude ? "\u2713" : "\xB7", text: p.claude ? `claude ${p.claude}` : "claude \u2014 tak ada", fatal: false },
+    { mark: p.codex ? "\u2713" : "\xB7", text: p.codex ? `codex ${p.codex}` : "codex \u2014 tak ada", fatal: false },
+    { mark: p.homeWritable ? "\u2713" : "\u2717", text: `data dir ${p.homeWritable ? "bisa ditulis" : "TAK bisa ditulis"}`, fatal: !p.homeWritable },
+    { mark: p.web ? "\u2713" : "!", text: p.web ? "aset dashboard ada" : "aset dashboard tak ada \u2014 API jalan, dashboard tidak", fatal: false },
+    { mark: "\xB7", text: `db ${p.db}`, fatal: false }
+  ];
+  if (!p.claude && !p.codex) {
+    rows.push({ mark: "\u2717", text: "tak ada CLI agen (claude ATAU codex wajib ada)", fatal: true });
+  }
+  return { lines: rows.map((r) => `  ${r.mark} ${r.text}`), ok: !rows.some((r) => r.fatal) };
 }
-async function latestVersion(registry) {
+function version(bin, args) {
   try {
-    const res = await fetch(`${registry.replace(/\/+$/, "")}/${PKG}/latest`, { signal: AbortSignal.timeout(1e4) });
-    if (!res.ok) return null;
-    const body = await res.json();
-    return typeof body.version === "string" ? body.version : null;
+    return execFileSync3(bin, args, { encoding: "utf8", timeout: 1e4, stdio: ["ignore", "pipe", "ignore"] }).trim().split("\n")[0] ?? null;
   } catch {
     return null;
   }
 }
-async function update(argv, ctx) {
-  const check = argv.includes("--check");
-  const current = currentVersion();
-  const latest = await latestVersion(ctx.env.HANOMAN_NPM_REGISTRY ?? DEFAULT_REGISTRY);
-  const plan = planUpdate(current, latest);
-  if (plan.action === "unknown") {
-    ctx.stderr(`hanoman ${current} \xB7 registry npm tak terjangkau \u2014 coba lagi nanti
+async function doctor(_argv, ctx) {
+  let layout;
+  let db;
+  try {
+    layout = resolveLayout(distDir(), existsSync2);
+    db = dbFilePath(resolveDbUrl(ctx.env, dirname3(layout.schema)));
+  } catch (e) {
+    ctx.stderr(`${e.message}
 `);
     return 1;
   }
-  if (plan.action === "up-to-date") {
-    ctx.stdout(`hanoman ${current} sudah terkini
-`);
-    return 0;
-  }
-  ctx.stdout(`hanoman ${plan.current} \u2192 ${plan.latest}
-`);
-  if (check) {
-    ctx.stdout(`jalankan: npm ${INSTALL_ARGS.join(" ")}
-`);
-    return 0;
-  }
+  const home = resolveHome(ctx.env);
+  let homeWritable = false;
   try {
-    execFileSync3("npm", [...INSTALL_ARGS], { stdio: "inherit" });
+    accessSync(existsSync2(home) ? home : dirname3(home), constants.W_OK);
+    homeWritable = true;
   } catch {
-    ctx.stderr("npm i -g gagal \u2014 jalankan manual (mungkin butuh sudo)\n");
-    return 1;
   }
-  ctx.stdout(`terpasang hanoman ${plan.latest} \xB7 restart instance yang berjalan
+  const r = doctorReport({
+    node: process.version,
+    git: version("git", ["--version"]),
+    tmux: version("tmux", ["-V"]),
+    claude: version(ctx.env.HANOMAN_CLAUDE_BIN ?? "claude", ["--version"]),
+    codex: version(ctx.env.HANOMAN_CODEX_BIN ?? "codex", ["--version"]),
+    homeWritable,
+    web: layout.web !== null,
+    db
+  });
+  ctx.stdout(`hanoman doctor
+${r.lines.join("\n")}
 `);
-  return 0;
+  const notice = dbUrlNotice(ctx.env);
+  if (notice) ctx.stdout(`
+${notice}
+`);
+  if (!r.ok) ctx.stderr("\nada prasyarat yang belum terpenuhi \u2014 hanoman tak akan bisa menjalankan sesi\n");
+  return r.ok ? 0 : 1;
 }
-var PKG, INSTALL_ARGS, DEFAULT_REGISTRY;
-var init_update = __esm({
-  "src/commands/update.ts"() {
+var init_doctor = __esm({
+  "src/commands/doctor.ts"() {
     "use strict";
-    init_src2();
-    init_router();
-    PKG = "hanoman";
-    INSTALL_ARGS = ["i", "-g", `${PKG}@latest`];
-    DEFAULT_REGISTRY = "https://registry.npmjs.org";
+    init_src();
+    init_layout();
+    init_start();
   }
 });
 
 // src/commands/migrate-pg.ts
 var migrate_pg_exports = {};
 __export(migrate_pg_exports, {
+  INT8_OID: () => INT8_OID,
   PG_ORDER: () => PG_ORDER,
   chunk: () => chunk,
+  coerceInt8: () => coerceInt8,
   default: () => migratePg,
+  isUndefinedTable: () => isUndefinedTable,
   migrationSteps: () => migrationSteps,
   parseMigrateArgs: () => parseMigrateArgs
 });
 import { existsSync as existsSync3 } from "node:fs";
 import { dirname as dirname4, resolve as resolvePath2 } from "node:path";
+function coerceInt8(rows, fields, model) {
+  const cols = fields.filter((f) => f.dataTypeID === INT8_OID).map((f) => f.name);
+  if (!cols.length) return rows;
+  return rows.map((row) => {
+    const out = { ...row };
+    for (const c of cols) {
+      const v = out[c];
+      if (v === null || v === void 0) continue;
+      const n = Number(v);
+      if (!Number.isSafeInteger(n)) {
+        throw new Error(`${model}.${c} = ${String(v)} di luar jangkauan integer aman \u2014 migrasi dihentikan`);
+      }
+      out[c] = n;
+    }
+    return out;
+  });
+}
+function isUndefinedTable(e) {
+  return typeof e === "object" && e !== null && e.code === "42P01";
+}
 function chunk(xs, n) {
   const out = [];
   for (let i = 0; i < xs.length; i += n) out.push(xs.slice(i, i + n));
@@ -5897,7 +6166,16 @@ async function migratePg(argv, ctx) {
     }
     let total = 0;
     for (const model of PG_ORDER) {
-      const { rows } = await pg.query(`SELECT * FROM "${model}"`);
+      let rows;
+      try {
+        const res = await pg.query(`SELECT * FROM "${model}"`);
+        rows = coerceInt8(res.rows, res.fields, model);
+      } catch (e) {
+        if (!isUndefinedTable(e)) throw e;
+        ctx.stdout(`  ${"\u2014".padStart(6)} \xB7 ${model} (tak ada di sumber \u2014 dilewati)
+`);
+        continue;
+      }
       total += rows.length;
       if (rows.length && steps.write) {
         for (const part of chunk(rows, CHUNK)) await at(model).createMany({ data: part });
@@ -5918,7 +6196,7 @@ async function migratePg(argv, ctx) {
     await db?.$disconnect();
   }
 }
-var PG_ORDER, CHUNK, delegateKey;
+var PG_ORDER, CHUNK, INT8_OID, delegateKey;
 var init_migrate_pg = __esm({
   "src/commands/migrate-pg.ts"() {
     "use strict";
@@ -5947,6 +6225,7 @@ var init_migrate_pg = __esm({
       "SyncConflict",
       "SchedulerQueueItem",
       "RuntimeConfig",
+      "LeadDecision",
       "ErrorGroup",
       "ErrorEvent",
       "SourceMapArtifact",
@@ -5954,6 +6233,7 @@ var init_migrate_pg = __esm({
       "TicketAttachment"
     ];
     CHUNK = 200;
+    INT8_OID = 20;
     delegateKey = (model) => model.charAt(0).toLowerCase() + model.slice(1);
   }
 });