hanoman 0.1.4 → 0.1.6

package/dist/server.js

@@ -4151,7 +4151,7 @@ var init_enums = __esm({
     "use strict";
     init_zod();
     zStage = external_exports.enum(["brainstorming", "objective", "spec-ready", "planned", "executing", "done"]);
-    zSpecSource = external_exports.enum(["brief", "qa", "audit", "cross-audit", "help"]);
+    zSpecSource = external_exports.enum(["brief", "qa", "audit", "cross-audit", "help", "goal"]);
     zDocStatus = external_exports.enum(["ok", "drift", "broken"]);
     zPriority = external_exports.enum(["tinggi", "sedang", "rendah"]);
     zProjectKind = external_exports.enum(["from-scratch", "existing"]);
@@ -4184,7 +4184,7 @@ function cmpVersion(a, b) {
   }
   return 0;
 }
-var zProject, zBriefPayload, zQaPayload, zSpec, NOTIFY_SOUNDS, E_5_6, E_LUNA, E_BASE, CODEX_MODELS, RETIRED_CODEX_MODELS, zCodex, CODEX_DEFAULTS, zSourceCommon, zScheduler, SCHEDULER_DEFAULTS, zGoal, GOAL_DEFAULTS, zConflict, CONFLICT_DEFAULTS, zSetting, zNotification, zDocFile, zDeviceTokenView;
+var zProject, zBriefPayload, zQaPayload, zGoalPayload, zSpec, NOTIFY_SOUNDS, E_5_6, E_LUNA, E_BASE, CODEX_MODELS, RETIRED_CODEX_MODELS, zCodex, CODEX_DEFAULTS, zSourceCommon, zScheduler, SCHEDULER_DEFAULTS, zGoal, GOAL_DEFAULTS, zConflict, CONFLICT_DEFAULTS, zLeadEngine, zLead, LEAD_DEFAULTS, zSetting, zNotification, zDocFile, zDeviceTokenView;
 var init_entities = __esm({
   "../shared/src/entities.ts"() {
     "use strict";
@@ -4223,6 +4223,12 @@ var init_entities = __esm({
       // SPEC-244 · qa dinaikkan dari audit → sinyal skip fase Audit (ADR-0059)
       fromErrorGroup: external_exports.string().optional()
     });
+    zGoalPayload = external_exports.object({
+      goal: external_exports.string(),
+      done: external_exports.string(),
+      constraints: external_exports.string(),
+      priority: zPriority
+    });
     zSpec = external_exports.object({
       id: external_exports.string(),
       projectId: external_exports.string(),
@@ -4232,11 +4238,16 @@ var init_entities = __esm({
       priority: zPriority,
       author: external_exports.string(),
       objective: external_exports.string(),
-      payload: external_exports.union([zBriefPayload, zQaPayload]).nullable(),
+      payload: external_exports.union([zBriefPayload, zQaPayload, zGoalPayload]).nullable(),
+      // SPEC-407 · +goal
       branchFrom: external_exports.string().nullable(),
       // SPEC-143 · null = default project (main)
-      baseSha: external_exports.string().nullable()
+      baseSha: external_exports.string().nullable(),
       // SPEC-186 · null = belum pernah ada sesi (belum dimulai)
+      // SPEC-408 · ADR-0090 · stempel waktu backlog (ISO string di wire — kolom DateTime di DB).
+      // `startedAt` null = belum pernah dikerjakan; ia tak pernah ditulis ulang saat sesi dilanjutkan.
+      createdAt: external_exports.string(),
+      startedAt: external_exports.string().nullable()
     });
     NOTIFY_SOUNDS = [
       "off",
@@ -4303,6 +4314,31 @@ var init_entities = __esm({
       effort: external_exports.string().default("xhigh")
     });
     CONFLICT_DEFAULTS = zConflict.parse({});
+    zLeadEngine = external_exports.object({
+      enabled: external_exports.boolean().default(false),
+      agent: zAgent.default("claude"),
+      model: external_exports.string().default("claude-opus-5"),
+      effort: external_exports.string().default("xhigh")
+    });
+    zLead = external_exports.object({
+      enabled: external_exports.boolean().default(false),
+      // master switch (AC-30)
+      paused: external_exports.boolean().default(false),
+      // rem darurat global (AC-27)
+      pausedProjects: external_exports.array(external_exports.string()).default([]),
+      // rem per project (AC-15/US-4)
+      everyMin: external_exports.number().int().min(1).max(1440).default(5),
+      // denyut proaktif (OQ-2)
+      timeoutSec: external_exports.number().int().min(10).max(900).default(120),
+      // batas waktu satu putusan (AC-4/35)
+      // AC-11 / OQ-10 · berapa jawaban otomatis berturut-turut untuk SATU sesi sebelum lead berhenti.
+      maxAutoAnswers: external_exports.number().int().min(1).max(20).default(3),
+      // OQ-3 · syarat objektif sebelum lead boleh mengintegrasikan ke branch utama. Default MENYALA:
+      // risiko "kode masuk main tanpa mata manusia" diterima sadar, tapi syaratnya tetap terukur.
+      requireGreenBeforeIntegrate: external_exports.boolean().default(true),
+      engine: zLeadEngine.default({})
+    });
+    LEAD_DEFAULTS = zLead.parse({});
     zSetting = external_exports.object({
       model: external_exports.string().default("claude-opus-5"),
       effort: external_exports.string().default("xhigh"),
@@ -4329,13 +4365,17 @@ var init_entities = __esm({
       // SPEC-338 · ADR-0074 · model/effort codex
       verifyScope: zVerifyScope.default("changed"),
       // SPEC-376 · ADR-0080 · scope verifikasi sesi
-      conflict: zConflict.default(CONFLICT_DEFAULTS)
+      conflict: zConflict.default(CONFLICT_DEFAULTS),
       // SPEC-383 · ADR-0081 · default sesi konflik rebase/merge
+      lead: zLead.default(LEAD_DEFAULTS)
+      // SPEC-409 · ADR-0091 · hanoman-lead (default mati)
     });
     zNotification = external_exports.object({
       id: external_exports.string(),
-      type: external_exports.enum(["done", "decision", "error", "ticket", "fail"]).default("done"),
       // SPEC-249 · +error; SPEC-253 · +ticket; SPEC-298 · +fail (sesi scheduler gagal/limit)
+      // SPEC-409 · +lead (ADR-0091): keputusan berbobot / ragu / tindakan terkunci ditolak. MEMBERI
+      // TAHU, bukan meminta izin — tak ada pekerjaan yang menunggu notifikasi ini dibaca (AC-25).
+      type: external_exports.enum(["done", "decision", "error", "ticket", "fail", "lead"]).default("done"),
       specId: external_exports.string().nullable(),
       sessionId: external_exports.string().nullable(),
       title: external_exports.string(),
@@ -4390,7 +4430,13 @@ var init_agent = __esm({
       "support:read",
       "support:write",
       "notifications:read",
-      "notifications:write"
+      "notifications:write",
+      // SPEC-409 · ADR-0091 · minta putusan ke hanoman-lead + baca jejak keputusan. Domain TERSENDIRI,
+      // bukan menumpang prefix baca yang sudah ada: meminta putusan adalah operasi TULIS (ia melahirkan
+      // baris jejak & bisa menggerakkan sesi), dan SPEC-405 sudah membuktikan apa yang terjadi saat
+      // endpoint tulis menumpang prefix status yang dipetakan tanpa melihat method (AC-5).
+      "lead:read",
+      "lead:write"
     ];
     zCapability = external_exports.enum(CAPABILITY_IDS);
     zCapabilityInfo = external_exports.object({
@@ -4419,7 +4465,9 @@ var init_agent = __esm({
       { id: "support:read", domain: "support", access: "read", label: "Errors & Tiket \u2014 baca", desc: "Lihat error monitoring & tiket Help Center." },
       { id: "support:write", domain: "support", access: "write", label: "Errors & Tiket \u2014 tulis", desc: "Eskalasi error, ubah status, terima/tolak tiket." },
       { id: "notifications:read", domain: "notifications", access: "read", label: "Notifikasi \u2014 baca", desc: "Lihat notifikasi." },
-      { id: "notifications:write", domain: "notifications", access: "write", label: "Notifikasi \u2014 tulis", desc: "Tandai terbaca / bersihkan notifikasi." }
+      { id: "notifications:write", domain: "notifications", access: "write", label: "Notifikasi \u2014 tulis", desc: "Tandai terbaca / bersihkan notifikasi." },
+      { id: "lead:read", domain: "lead", access: "read", label: "Lead \u2014 baca", desc: "Baca jejak keputusan hanoman-lead & statusnya." },
+      { id: "lead:write", domain: "lead", access: "write", label: "Lead \u2014 tulis", desc: "Minta putusan ke hanoman-lead (keputusan bisa menggerakkan sesi).", risk: "exec" }
     ];
     zAgentTokenView = external_exports.object({
       id: external_exports.string(),
@@ -4444,16 +4492,103 @@ var init_agent = __esm({
   }
 });
 
+// ../shared/src/lead.ts
+function leadActionAllowed(action) {
+  return LEAD_ACTIONS.includes(action);
+}
+function leadRefusalReason(action) {
+  return LEAD_FORBIDDEN[action] ?? `tindakan "${action}" di luar permukaan tindakan lead`;
+}
+function isWeightyDecision(o) {
+  if (o.confidence === "ragu") return true;
+  if (o.kind === "collision" || o.kind === "refusal") return true;
+  return o.action === "integrate-main" || o.action === "run-migration" || o.action === "stop-session" || o.action === "restart-session";
+}
+var zLeadGate, zLeadKind, zLeadConfidence, zLeadStatus, LEAD_ACTIONS, zLeadAction, LEAD_FORBIDDEN, zLeadVerdict, zLeadAsk, zLeadOverride;
+var init_lead = __esm({
+  "../shared/src/lead.ts"() {
+    "use strict";
+    init_zod();
+    zLeadGate = external_exports.enum(["contract", "detected", "pulse"]);
+    zLeadKind = external_exports.enum(["answer", "order", "collision", "quality", "refusal"]);
+    zLeadConfidence = external_exports.enum(["tinggi", "sedang", "ragu"]);
+    zLeadStatus = external_exports.enum(["berlaku", "ditimpa", "dibatalkan", "gagal"]);
+    LEAD_ACTIONS = [
+      "none",
+      // keputusan murni jawaban; tak ada tindakan menyusul
+      "answer-session",
+      // ketik jawaban ke pane sesi (pintu deteksi otomatis)
+      "start-session",
+      // mulai sesi untuk sebuah backlog (lewat antrean scheduler)
+      "stop-session",
+      // hentikan sesi — worktree DIBIARKAN utuh (AC-32a)
+      "resume-session",
+      // lanjutkan sesi terputus (jalur ADR-0084)
+      "restart-session",
+      // ulangi pekerjaan dari awal
+      "order-queue",
+      // tata urutan antrean yang sudah ada (ADR-0072) — bukan antrean kedua
+      "hold-work",
+      // tunda satu pekerjaan karena tabrakan area kerja
+      "push-branch",
+      // dorong perubahan ke branch
+      "integrate-main",
+      // integrasikan ke branch utama (risiko yang diterima sadar, PRD §Risiko)
+      "run-migration"
+      // jalankan migration pada basis data LOKAL operator
+    ];
+    zLeadAction = external_exports.enum(LEAD_ACTIONS);
+    LEAD_FORBIDDEN = {
+      deploy: "deploy ke produksi",
+      "vps-exec": "menjalankan perintah di VPS",
+      "vps-console": "membuka konsol VPS",
+      "prod-data": "menyentuh data produksi",
+      "delete-project": "menghapus project",
+      "delete-spec": "menghapus backlog",
+      "delete-branch": "menghapus branch",
+      "delete-worktree": "menghapus worktree",
+      "delete-notification": "menghapus notifikasi",
+      "delete-decision": "menghapus jejak keputusan"
+    };
+    zLeadVerdict = external_exports.object({
+      decision: external_exports.string().min(1),
+      reason: external_exports.string().min(1),
+      refs: external_exports.array(external_exports.string()).default([]),
+      confidence: zLeadConfidence.default("sedang"),
+      // Sengaja `string`, BUKAN `zLeadAction`: tindakan di luar allowlist harus bisa MASUK supaya
+      // server menolaknya secara sadar — mencatat penolakan & menotifikasi operator (AC-33). Kalau
+      // enum yang menyaring di sini, permintaan "deploy ke produksi" hanya akan tampak sebagai
+      // keluaran rusak, dan justru peristiwa paling layak dilaporkan itulah yang hilang dari jejak.
+      action: external_exports.string().default("none"),
+      /** Teks yang benar-benar diketik ke pane sesi (pintu deteksi otomatis). */
+      reply: external_exports.string().default("")
+    });
+    zLeadAsk = external_exports.object({
+      projectId: external_exports.string().min(1),
+      specId: external_exports.string().nullish(),
+      sessionId: external_exports.string().nullish(),
+      question: external_exports.string().min(1).max(8e3),
+      options: external_exports.array(external_exports.string().max(2e3)).max(20).default([]),
+      context: external_exports.string().max(2e4).default("")
+    });
+    zLeadOverride = external_exports.object({
+      answer: external_exports.string().min(1).max(8e3),
+      reason: external_exports.string().max(8e3).default("")
+    });
+  }
+});
+
 // ../shared/src/dto.ts
 function flowForSource(source) {
-  return source === "qa" ? "qa" : source === "audit" ? "audit" : source === "cross-audit" ? "cross-audit" : "feature";
+  return source === "qa" ? "qa" : source === "audit" ? "audit" : source === "cross-audit" ? "cross-audit" : source === "goal" ? "goal" : "feature";
 }
-var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zCreateLink, zUpdateProject, zCreateSpec, zPatchSpec, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerState, zFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, zLogin, zSignup, zChangePassword, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, zStackFrame, zSymbolicatedFrame, zSourceMapUpload, zIngestPayload, zErrorGroupView, zErrorEventView, zErrorGroupDetail, zIngestKeyView, zTicketView, zTicketAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus;
+var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zCreateLink, zUpdateProject, zCreateSpec, zPatchSpec, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerState, zLeadDecisionView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, zLogin, zSignup, zChangePassword, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, UPDATE_RESTART_EXIT, zUpdateApplyBody, zStackFrame, zSymbolicatedFrame, zSourceMapUpload, zIngestPayload, zErrorGroupView, zErrorEventView, zErrorGroupDetail, zIngestKeyView, zTicketView, zTicketAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus;
 var init_dto = __esm({
   "../shared/src/dto.ts"() {
     "use strict";
     init_zod();
     init_entities();
+    init_lead();
     init_enums();
     zIssueDeviceToken = external_exports.object({ name: external_exports.string().min(1) });
     zSessionResult = external_exports.object({
@@ -4509,19 +4644,22 @@ var init_dto = __esm({
       // SPEC-213 · set git remote resmi project
       repoDir: external_exports.string().nullable().optional(),
       // SPEC-217 · path default/server editable (null = kosongkan)
-      schedulerOptIn: external_exports.boolean().optional()
+      schedulerOptIn: external_exports.boolean().optional(),
       // SPEC-294 · opt-in scheduler otonom (lokal, tak disync)
+      leadOptIn: external_exports.boolean().optional()
+      // SPEC-409 · ADR-0091 · opt-in hanoman-lead (lokal, tak disync)
     });
     zCreateSpec = external_exports.object({
       project: external_exports.string(),
       source: zSpecSource,
       title: external_exports.string().min(1),
       priority: zPriority,
-      payload: external_exports.union([zBriefPayload, zQaPayload]),
+      payload: external_exports.union([zBriefPayload, zQaPayload, zGoalPayload]),
       branchFrom: external_exports.string().min(1).optional()
     }).superRefine((o, ctx) => {
-      const isQa = "severity" in o.payload;
-      if (o.source === "qa" !== isQa)
+      const shape = "severity" in o.payload ? "qa" : "goal" in o.payload ? "goal" : "brief";
+      const want = o.source === "qa" ? "qa" : o.source === "goal" ? "goal" : "brief";
+      if (shape !== want)
         ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["payload"], message: "bentuk payload tak cocok dengan source" });
     });
     zPatchSpec = external_exports.object({
@@ -4531,7 +4669,8 @@ var init_dto = __esm({
       // SPEC-186 · edit konten selagi item belum dimulai. Ditolak server bila sudah mulai.
       title: external_exports.string().min(1).optional(),
       priority: zPriority.optional(),
-      payload: external_exports.union([zBriefPayload, zQaPayload]).optional()
+      payload: external_exports.union([zBriefPayload, zQaPayload, zGoalPayload]).optional()
+      // SPEC-407 · +goal
     });
     zIntegrate = external_exports.object({
       op: external_exports.enum(["merge", "rebase"]),
@@ -4556,7 +4695,9 @@ var init_dto = __esm({
       // SPEC-249 · hint prefix DSN (bukan hash/rahasia)
       helpEnabled: external_exports.boolean().default(false),
       // SPEC-253 · Help Center publik aktif
-      schedulerOptIn: external_exports.boolean().default(false)
+      schedulerOptIn: external_exports.boolean().default(false),
+      // SPEC-294 · opt-in scheduler otonom
+      leadOptIn: external_exports.boolean().default(false)
     });
     zSchedulerQueueItem = external_exports.object({
       id: external_exports.string(),
@@ -4596,7 +4737,51 @@ var init_dto = __esm({
       queue: external_exports.array(zSchedulerQueueItem),
       sessions: external_exports.array(zSchedulerSessionView)
     });
-    zFlow = external_exports.enum(["feature", "qa", "scaffold", "reverse", "prd", "audit", "breakdown", "cross-audit"]);
+    zLeadDecisionView = external_exports.object({
+      id: external_exports.string(),
+      projectId: external_exports.string(),
+      specId: external_exports.string().nullable(),
+      sessionId: external_exports.string().nullable(),
+      gate: zLeadGate,
+      kind: zLeadKind,
+      question: external_exports.string(),
+      answer: external_exports.string(),
+      reason: external_exports.string(),
+      refs: external_exports.array(external_exports.string()),
+      confidence: zLeadConfidence,
+      action: zLeadAction,
+      status: zLeadStatus,
+      weighty: external_exports.boolean(),
+      supersededById: external_exports.string().nullable(),
+      createdAt: external_exports.string()
+    });
+    zLeadAnswer = external_exports.object({
+      id: external_exports.string(),
+      decision: external_exports.string(),
+      reason: external_exports.string(),
+      refs: external_exports.array(external_exports.string()),
+      confidence: zLeadConfidence,
+      action: zLeadAction
+    });
+    zLeadProjectStatus = external_exports.object({
+      projectId: external_exports.string(),
+      name: external_exports.string(),
+      optIn: external_exports.boolean(),
+      paused: external_exports.boolean(),
+      decisions24h: external_exports.number(),
+      openSessions: external_exports.number()
+    });
+    zLeadStatusView = external_exports.object({
+      config: zLead,
+      projects: external_exports.array(zLeadProjectStatus),
+      queue: external_exports.array(zSchedulerQueueItem),
+      deciding: external_exports.array(external_exports.string()),
+      // id sesi yang sedang disusun keputusannya (AC-3)
+      waiting: external_exports.array(external_exports.string()),
+      // id sesi ber-marker keputusan terisi
+      lastPulseAt: external_exports.string().nullable()
+    });
+    zFlow = external_exports.enum(["feature", "qa", "scaffold", "reverse", "prd", "audit", "breakdown", "cross-audit", "goal"]);
     zPrdBrief = external_exports.object({
       title: external_exports.string().min(1),
       context: external_exports.string(),
@@ -4742,6 +4927,8 @@ var init_dto = __esm({
     });
     zAttest = external_exports.object({ note: external_exports.string().max(500).optional() });
     zRemediate = external_exports.object({ items: external_exports.array(external_exports.string()).min(1).max(64) });
+    UPDATE_RESTART_EXIT = 75;
+    zUpdateApplyBody = external_exports.object({ confirm: external_exports.boolean().optional() });
     zStackFrame = external_exports.object({
       function: external_exports.string().max(500).optional(),
       filename: external_exports.string().max(2e3).optional(),
@@ -4984,6 +5171,12 @@ var init_api = __esm({
       // SPEC-299 · panel scheduler (daun #6) — konsumen read-only fondasi SPEC-294/ADR-0072.
       schedulerConfig: `${API}/scheduler/config`,
       schedulerState: `${API}/scheduler/state`,
+      // SPEC-409 · ADR-0091 · hanoman-lead. Semua HTTP (polling) — tak ada kanal WS baru (AC-26).
+      leadConfig: `${API}/lead/config`,
+      leadStatus: `${API}/lead/status`,
+      leadDecisions: `${API}/lead/decisions`,
+      leadDecisionOverride: (id) => `${API}/lead/decisions/${encodeURIComponent(id)}/override`,
+      leadDecisionCancel: (id) => `${API}/lead/decisions/${encodeURIComponent(id)}/cancel`,
       // SPEC-268 · ADR-0066 · pemicu sync manual (cookie-authed)
       syncNow: `${API}/sync/now`,
       // SPEC-270 · ADR-0067 · antrean konflik rekonsil (cookie-authed)
@@ -5317,6 +5510,7 @@ var init_src = __esm({
     init_enums();
     init_entities();
     init_agent();
+    init_lead();
     init_dto();
     init_api();
     init_coverage();
@@ -5520,6 +5714,22 @@ var init_verify_scope = __esm({
   }
 });
 
+// ../runner/src/goal-spec.ts
+function readGoalPayload(payload) {
+  if (!payload || typeof payload !== "object" || Array.isArray(payload)) return null;
+  const p = payload;
+  const goal = str(p.goal);
+  if (!goal) return null;
+  return { goal, done: str(p.done), constraints: str(p.constraints) };
+}
+var str;
+var init_goal_spec = __esm({
+  "../runner/src/goal-spec.ts"() {
+    "use strict";
+    str = (v) => typeof v === "string" ? v.trim() : "";
+  }
+});
+
 // ../runner/src/prompt.ts
 function startPrompt(flow, spec, branchTo, autonomy, verifyScope) {
   const detail = spec.payload ? `
@@ -5560,7 +5770,7 @@ Detail: ${JSON.stringify(spec.payload)}` : "";
   const auditDecided = resume.recorded.some((line) => line.startsWith("Audit "));
   return [
     `hanoman ${flow} \u2014 MELANJUTKAN sesi backlog yang sudah berjalan. Ikuti internal/docs sebagai Source of Truth; perbarui docs yang tersentuh dan link-nya di index, dalam commit yang sama.`,
-    resumeClause(resume, branchTo),
+    resumeClause(resume, branchTo, PIPELINES[flow].includes("Plan")),
     phaseInstruction(PIPELINES[flow]),
     auditDecided ? "" : auditDecisionInstruction(flow),
     autonomyClause(autonomy),
@@ -5572,6 +5782,27 @@ Judul: ${spec.title}
 Objective: ${spec.objective}${detail}`
   ].filter(Boolean).join("\n\n");
 }
+function startGoalPrompt(spec, branchTo, opts = {}) {
+  const g = readGoalPayload(spec.payload);
+  const detail = [
+    `Goal: ${g?.goal ?? spec.objective}`,
+    g?.done ? `Selesai bila: ${g.done}` : "",
+    g?.constraints ? `Batasan: ${g.constraints}` : ""
+  ].filter(Boolean).join("\n");
+  return [
+    "hanoman goal \u2014 sesi ini mengejar SATU goal sampai tercapai. TIDAK ada fase Brainstorm, Objective, Spec, maupun Plan: jangan menulis design doc, jangan menulis plan berkotak, jangan memecah pekerjaan ini jadi backlog baru. Langsung kerjakan goal-nya. Tetap ikuti internal/docs sebagai Source of Truth; perbarui docs yang tersentuh dan link-nya di index, dalam commit yang sama.",
+    opts.resume ? resumeClause(opts.resume, branchTo, false) : "",
+    detail,
+    phaseInstruction(PIPELINES.goal),
+    "Fase Verifikasi bukan formalitas: jalankan perintah yang membuktikan goal-nya tercapai (test/typecheck/benchmark/perintah yang relevan) dan baca outputnya. Klaim tanpa output bukan bukti.",
+    autonomyClause(opts.autonomy),
+    scopeClause("goal", opts.verifyScope),
+    skillInstruction(PIPELINES.goal),
+    `Setelah fase terakhir: commit, lalu \`git push origin HEAD:refs/heads/${branchTo}\`. Worktree ini detached HEAD \u2014 itu memang disengaja.`,
+    `Backlog item ${spec.id} \xB7 sumber ${spec.source} \xB7 prioritas ${spec.priority}
+Judul: ${spec.title}`
+  ].filter(Boolean).join("\n\n");
+}
 function startProjectPrompt(flow, project, branchTo) {
   return [
     `hanoman ${flow}. Susun Source of Truth repo ini dari kodenya di internal/docs/**, mengikuti STANDAR DOCS di bagian bawah prompt ini.`,
@@ -5676,12 +5907,13 @@ Judul: ${spec.title}
 Objective: ${spec.objective}${detail}`
   ].filter(Boolean).join("\n\n");
 }
-var PIPELINES, AUTONOMY_CLAUSE, AUTONOMY_CLAUSE_FULL, autonomyClause, phaseInstruction, PHASE_SKILLS, skillInstruction, auditDecisionInstruction, ESCALATION_CONTRACT, auditOnlyInstruction, auditContinuationInstruction, scopeClause, resumeClause, RESUMED_WORKTREE_NOTE, REVERSE_PHASE_GUIDE, SCAFFOLD_PHASE_GUIDE, projectLine, crossAuditLogGuide, CROSS_AUDIT_FOCUS;
+var PIPELINES, AUTONOMY_CLAUSE, AUTONOMY_CLAUSE_FULL, autonomyClause, phaseInstruction, PHASE_SKILLS, skillInstruction, auditDecisionInstruction, ESCALATION_CONTRACT, auditOnlyInstruction, auditContinuationInstruction, writesCode, scopeClause, resumeClause, RESUMED_WORKTREE_NOTE, REVERSE_PHASE_GUIDE, SCAFFOLD_PHASE_GUIDE, projectLine, crossAuditLogGuide, CROSS_AUDIT_FOCUS;
 var init_prompt = __esm({
   "../runner/src/prompt.ts"() {
     "use strict";
     init_reverse_standard();
     init_verify_scope();
+    init_goal_spec();
     PIPELINES = {
       feature: ["Brainstorm", "Objective", "Spec", "Plan", "Execute"],
       qa: ["Audit", "Spec", "Plan", "Execute"],
@@ -5692,7 +5924,11 @@ var init_prompt = __esm({
       breakdown: ["Analisis", "Breakdown"],
       // SPEC-337 · ADR-0075 · audit lintas project: fase & stage-map identik audit-only, scope-nya
       // yang berbeda (project utama + tetangga ProjectLink).
-      "cross-audit": ["Audit", "Laporan"]
+      "cross-audit": ["Audit", "Laporan"],
+      // SPEC-407 · ADR-0089 · backlog goal: tak ada fase perencanaan sama sekali. `Goal` = kerjakan,
+      // `Verifikasi` = buktikan. Kedua nama unik lintas PIPELINES — syarat peta REACHED di server,
+      // yang berkunci nama fase saja.
+      goal: ["Goal", "Verifikasi"]
     };
     AUTONOMY_CLAUSE = 'Jalankan seluruh pipeline sampai tuntas tanpa berhenti di batas antar-fase. Checkpoint "review"/"approval"/"need review" milik skill superpowers BUKAN titik berhenti di sini \u2014 lanjut saja ke fase berikutnya. Berhenti HANYA saat butuh keputusan manusia sejati (percabangan yang mengubah bentuk kerja: data model, kontrak API, scope); saat itu tanyakan di terminal ini dan tunggu jawabannya. Selain itu, terus lanjut.';
     AUTONOMY_CLAUSE_FULL = "Kamu berjalan TANPA pengawas \u2014 tak ada manusia yang menonton terminal ini untuk menjawab. Putuskan sendiri di SETIAP percabangan (termasuk yang mengubah bentuk kerja: data model, kontrak API, scope) berdasarkan Source of Truth dan penilaian terbaikmu; JANGAN berhenti bertanya. Tembus seluruh pipeline sampai stage `done`, lalu commit & push. Jangan menunggu review/persetujuan siapa pun \u2014 catat asumsi & keputusan penting di pesan commit agar bisa di-review pasca-fakta. Merge ke branch utama tetap dilakukan manusia, bukan kamu.";
@@ -5712,7 +5948,10 @@ Execute BELUM selesai selama plan (\`docs/superpowers/plans/**\`) masih punya ta
         "superpowers:executing-plans",
         "superpowers:test-driven-development",
         "superpowers:verification-before-completion"
-      ]
+      ],
+      // SPEC-407 · fase `Goal` sengaja TANPA skill: seluruh inti flow ini adalah membebaskan sesi
+      // dari proses kaku. Yang tetap dijaga cuma pintu keluarnya.
+      Verifikasi: ["superpowers:verification-before-completion"]
     };
     skillInstruction = (phases) => {
       const lines2 = phases.filter((p) => PHASE_SKILLS[p]).map((p) => `- ${p}: ${PHASE_SKILLS[p].join(", ")}`);
@@ -5752,17 +5991,19 @@ ${lines2.join("\n")}` : "";
         return `Backlog brief ini LANJUTAN dari audit ${fromAudit}. Worktree ini lahir dari branch audit itu, jadi dokumen audit sudah ada di ${doc}. BACA dokumen itu lebih dulu dan pakai sebagai bahan fase Brainstorm & Objective \u2014 temuannya sudah terbukti, jangan menginvestigasi ulang dari nol. Semua fase tetap dijalankan: dokumen audit memuat TEMUAN, bukan bentuk solusi, jadi perancangan fitur tetap pekerjaanmu.`;
       return `Backlog qa ini LANJUTAN dari audit ${fromAudit}. Worktree ini lahir dari branch audit itu, jadi dokumen audit sudah ada di ${doc}. JANGAN mengulang investigasi fase Audit dari nol \u2014 baca dokumen audit itu sebagai temuan, tandai fase Audit dilewati (\`echo "Audit skipped" >> "$HANOMAN_PHASE_FILE"\`), lalu ambil keputusan pasca-Audit: perbaikan jelas & kecil \u2192 langsung Execute (tandai \`Spec skipped\` dan \`Plan skipped\` bila sesuai); selain itu Spec \u2192 Plan \u2192 Execute penuh.`;
     };
-    scopeClause = (flow, scope) => scope && PIPELINES[flow].includes("Execute") ? verifyScopeClause(scope) : "";
-    resumeClause = (r, branchTo) => {
+    writesCode = (flow) => PIPELINES[flow].includes("Execute") || PIPELINES[flow].includes("Goal");
+    scopeClause = (flow, scope) => scope && writesCode(flow) ? verifyScopeClause(scope) : "";
+    resumeClause = (r, branchTo, hasPlan = true) => {
       const fase = r.recorded.length ? `Fase yang SUDAH tercatat di $HANOMAN_PHASE_FILE: ${r.recorded.join(" \xB7 ")}. JANGAN mengulang fase itu dan JANGAN menulis ulang barisnya.` : "Belum ada fase yang tercatat di $HANOMAN_PHASE_FILE \u2014 worktree ini sendiri yang jadi alasan melanjutkan.";
-      const lanjut = r.next ? `Lanjutkan dari fase: ${r.next}.` : "Semua fase sudah tercatat. Periksa apakah plan di `docs/superpowers/plans/**` masih menyisakan task `- [ ]` dan selesaikan sisanya; bila sudah bersih, tinggal commit & push.";
+      const lanjut = r.next ? `Lanjutkan dari fase: ${r.next}.` : hasPlan ? "Semua fase sudah tercatat. Periksa apakah plan di `docs/superpowers/plans/**` masih menyisakan task `- [ ]` dan selesaikan sisanya; bila sudah bersih, tinggal commit & push." : "Semua fase sudah tercatat. Buktikan sekali lagi goal-nya benar-benar tercapai, lalu commit & push.";
       const worktree = r.worktreeKept ? "Worktree ini adalah worktree sesi sebelumnya apa adanya \u2014 termasuk perubahan yang belum di-commit." : `Worktree ini DIBANGUN ULANG dari tip branch sesi \`${branchTo}\`: commit sesi sebelumnya ada, tetapi perubahan yang belum sempat di-commit TIDAK ada.`;
+      const baca = hasPlan ? "Sebelum menulis apa pun: baca `git log --oneline` dan `git status`, lalu plan di `docs/superpowers/plans/**` untuk backlog item ini (`- [x]` sudah selesai, `- [ ]` belum). Jangan menulis ulang yang sudah ada." : "Sebelum menulis apa pun: baca `git log --oneline` dan `git status` untuk melihat apa yang sudah dikerjakan. Jangan menulis ulang yang sudah ada.";
       return [
         "Sesi ini MELANJUTKAN pekerjaan sesi sebelumnya untuk backlog item yang sama \u2014 bukan memulai dari nol.",
         fase,
         lanjut,
         worktree,
-        "Sebelum menulis apa pun: baca `git log --oneline` dan `git status`, lalu plan di `docs/superpowers/plans/**` untuk backlog item ini (`- [x]` sudah selesai, `- [ ]` belum). Jangan menulis ulang yang sudah ada."
+        baca
       ].join(" ");
     };
     RESUMED_WORKTREE_NOTE = "Catatan: worktree ini BUKAN kosong \u2014 ia berisi pekerjaan sesi sebelumnya untuk tugas yang sama (sesi itu berhenti sebelum selesai). Baca `git log --oneline` dan `git status` lebih dulu, lalu lanjutkan dari sana alih-alih menulis ulang semuanya dari awal.";
@@ -5930,7 +6171,21 @@ var init_settings = __esm({
 });
 
 // ../runner/src/goal.ts
-function defaultGoalCondition({ flow, specId, branchTo }) {
+function goalFlowCondition(specId, branchTo, spec) {
+  const g = readGoalPayload(spec?.payload);
+  const goal = g?.goal || (spec?.objective ?? "").trim() || "(goal tak tercatat di backlog item)";
+  const bukti = g?.done || goal;
+  return [
+    `Sesi goal hanoman ${specId}. GOAL: ${goal}`,
+    "Sesi ini hanya boleh berhenti bila transkrip TERBARU memuat bukti langsung semua hal berikut:",
+    `1. goal tercapai \u2014 ${bukti};`,
+    `2. output \`cat "$HANOMAN_PHASE_FILE"\` yang memuat satu baris untuk SETIAP fase ${PIPELINES.goal.join(" \u2192 ")}, masing-masing berakhiran \`done\` atau \`skipped\`;`,
+    `3. output \`git push origin HEAD:refs/heads/${branchTo}\` yang SUKSES sesudah commit terakhir.`,
+    "Bila salah satu bukti tak ada di transkrip terbaru, kondisi BELUM terpenuhi: jalankan perintah verifikasinya, tuntaskan yang masih kurang, lalu lanjutkan \u2014 jangan berhenti."
+  ].join("\n");
+}
+function defaultGoalCondition({ flow, specId, branchTo, spec }) {
+  if (flow === "goal") return goalFlowCondition(specId, branchTo, spec);
   const phases = PIPELINES[flow];
   const planGate = phases.includes("Plan") && phases.includes("Execute");
   const clauses = [
@@ -5964,6 +6219,7 @@ var init_goal = __esm({
   "../runner/src/goal.ts"() {
     "use strict";
     init_prompt();
+    init_goal_spec();
     GOAL_MAX = 4e3;
     goalOneLine = (cond) => cond.replace(/\s+/g, " ").trim();
     GOAL_CHUNK = 500;
@@ -6128,6 +6384,7 @@ var init_src2 = __esm({
     init_git();
     init_settings();
     init_goal();
+    init_goal_spec();
     init_codex_settings();
     init_agent_cli();
     init_verify_scope();
@@ -6199,7 +6456,8 @@ function readPhases(file, flow) {
 function stageFor(phases) {
   let best = -1;
   for (const p of phases) {
-    if (p.name === "Execute" && p.state === "active") best = Math.max(best, STAGES.indexOf("executing"));
+    if ((p.name === "Execute" || p.name === "Goal") && p.state === "active")
+      best = Math.max(best, STAGES.indexOf("executing"));
     if (p.state !== "done" && p.state !== "skipped") continue;
     const s = REACHED[p.name];
     if (s) best = Math.max(best, STAGES.indexOf(s));
@@ -6244,7 +6502,11 @@ var init_session_phases = __esm({
       Spec: "spec-ready",
       Plan: "planned",
       Laporan: "done",
-      Execute: "done"
+      Execute: "done",
+      // SPEC-407 · ADR-0089 · flow goal (Goal → Verifikasi): fase kerja mencapai `executing`, fase
+      // verifikasi yang mencapai `done`. Kedua nama unik lintas PIPELINES — peta ini berkunci nama.
+      Goal: "executing",
+      Verifikasi: "done"
     };
   }
 });
@@ -6441,6 +6703,9 @@ function createSession(projectId, cwd, opts = {}) {
     argv = [sq(agentBin(agent)), promptArg, flags].filter(Boolean).join(" ");
   }
   const envPairs = [];
+  if (!opts.command && agent === "claude") {
+    for (const [k, v] of Object.entries(rootBypassEnv())) envPairs.push(`${k}=${sq(v)}`);
+  }
   if (opts.phaseFile) {
     mkdirSync3(dirname4(opts.phaseFile), { recursive: true });
     envPairs.push(`HANOMAN_PHASE_FILE=${sq(opts.phaseFile)}`);
@@ -6531,6 +6796,29 @@ function createSession(projectId, cwd, opts = {}) {
   });
   return { id, projectId, specId: opts.specId, flow: opts.flow, cwd, branch: opts.branch, exited: false, decision: false, agent };
 }
+function capturePane(id, lines2 = 200) {
+  try {
+    return tmux("capture-pane", "-p", "-J", "-S", `-${lines2}`, "-t", name(id));
+  } catch {
+    return "";
+  }
+}
+async function sendToPane(id, text, chunkMs = 50) {
+  const p = getSession(id);
+  if (!p || p.exited) return false;
+  const line = text.replace(/\s*\r?\n\s*/g, " ").trim();
+  if (!line) return false;
+  try {
+    for (const chunk of goalChunks(line)) {
+      tmux("send-keys", "-t", name(id), "-l", chunk);
+      await sleep(chunkMs);
+    }
+    tmux("send-keys", "-t", name(id), "Enter");
+    return true;
+  } catch {
+    return false;
+  }
+}
 async function armGoalInTui(id, condition, o = {}) {
   const pollMs = o.pollMs ?? 500, readyTries = o.readyTries ?? 20;
   const settleMs = o.settleMs ?? 1200, verifyTries = o.verifyTries ?? 12;
@@ -6703,7 +6991,7 @@ function spawnPty(...args) {
     );
   }
 }
-var socket, PREFIX, MAX_SCROLLBACK, POLL_MS, markerFilled, attached, claudeBin, shellBin, codexBin, agentBin, frame, name, promptFilePath, goalGatePath, goalStatePath, NO_SERVER, TmuxError, sq, sessionIdForSpec, idFor, FMT, listSessions, liveDecisions, getSession, hooks, emitBirth, emitDeath, sleep, paneText, GOAL_ARMED_MARKERS, goalArmed, poll, detach;
+var socket, PREFIX, MAX_SCROLLBACK, POLL_MS, markerFilled, attached, claudeBin, shellBin, codexBin, agentBin, rootBypassEnv, frame, name, promptFilePath, goalGatePath, goalStatePath, NO_SERVER, TmuxError, sq, sessionIdForSpec, idFor, FMT, listSessions, liveDecisions, getSession, hooks, emitBirth, emitDeath, sleep, paneText, GOAL_ARMED_MARKERS, goalArmed, poll, detach;
 var init_pty = __esm({
   "src/services/pty.ts"() {
     "use strict";
@@ -6727,6 +7015,7 @@ var init_pty = __esm({
     shellBin = () => effectiveStr("HANOMAN_SHELL") ?? process.env.SHELL ?? "/bin/bash";
     codexBin = () => effectiveStr("HANOMAN_CODEX_BIN") ?? "codex";
     agentBin = (agent) => agent === "codex" ? codexBin() : claudeBin();
+    rootBypassEnv = (uid = process.getuid?.()) => uid === 0 ? { IS_SANDBOX: "1" } : {};
     frame = (f) => JSON.stringify(f);
     name = (id) => PREFIX + id;
     promptFilePath = (id) => `${tmpdir()}/hanoman-prompts/${id}`;
@@ -7050,7 +7339,9 @@ var init_sync = __esm({
     };
     FIELDS = {
       project: ["name", "desc", "kind", "stack", "gitRemote", "updatedAt"],
-      spec: ["projectId", "title", "source", "stage", "priority", "author", "objective", "payload", "branchFrom", "baseSha", "headSha", "updatedAt"],
+      // SPEC-408 · ADR-0090 · createdAt/startedAt ikut menyeberang — sejajar baseSha/headSha. Tanpa
+      // ini spec asal-hub mendapat createdAt lokal palsu di tiap client (kolom NOT NULL ber-default).
+      spec: ["projectId", "title", "source", "stage", "priority", "author", "objective", "payload", "branchFrom", "baseSha", "headSha", "createdAt", "startedAt", "updatedAt"],
       vps: ["name", "host", "port", "user", "health", "audit", "hardened", "lastSeenAt", "lastAuditAt", "updatedAt"],
       sessionResult: ["projectId", "specId", "oldStage", "newStage", "commitSha", "branch", "prUrl", "status", "deviceId", "author", "createdAt", "updatedAt"],
       // SPEC-268 · ADR-0066 · agregat grup error (ErrorEvent mentah tak disync).
@@ -7063,7 +7354,7 @@ var init_sync = __esm({
     };
     DATE_FIELDS = {
       project: ["updatedAt"],
-      spec: ["updatedAt"],
+      spec: ["createdAt", "startedAt", "updatedAt"],
       vps: ["lastSeenAt", "lastAuditAt", "updatedAt"],
       sessionResult: ["createdAt", "updatedAt"],
       errorGroup: ["firstSeenAt", "lastSeenAt", "updatedAt"],
@@ -11032,7 +11323,7 @@ function syncStatus() {
 async function startSyncClient(base, token, tickMs2) {
   started = true;
   const transport = fetchTransport(base, token);
-  const tick3 = async () => {
+  const tick4 = async () => {
     try {
       await syncOnce(transport);
     } catch {
@@ -11043,13 +11334,13 @@ async function startSyncClient(base, token, tickMs2) {
     const wsUrl = base.replace(/^http/, "ws").replace(/\/$/, "") + `/api/sync/ws?token=${encodeURIComponent(token)}`;
     ws = new WebSocket2(wsUrl);
     ws.on("open", () => {
-      void tick3();
+      void tick4();
     });
     ws.on("message", async (raw) => {
       try {
         const msg = JSON.parse(raw.toString());
         if (msg.t !== "sync") return;
-        if (!await applyFeedFrame(msg)) void tick3();
+        if (!await applyFeedFrame(msg)) void tick4();
       } catch {
       }
     });
@@ -11066,11 +11357,11 @@ async function startSyncClient(base, token, tickMs2) {
       }
     });
   };
-  await tick3();
+  await tick4();
   void connectWs();
   const ms = tickMs2 && tickMs2 > 0 ? tickMs2 : 15e3;
   timer2 = setInterval(() => {
-    void tick3();
+    void tick4();
   }, ms);
   timer2.unref?.();
 }
@@ -12269,7 +12560,7 @@ var require_parseParams = __commonJS({
     var STATE_VALUE = 1;
     var STATE_CHARSET = 2;
     var STATE_LANG = 3;
-    function parseParams(str) {
+    function parseParams(str2) {
       const res = [];
       let state = STATE_KEY;
       let charset = "";
@@ -12277,9 +12568,9 @@ var require_parseParams = __commonJS({
       let escaping = false;
       let p = 0;
       let tmp = "";
-      const len = str.length;
+      const len = str2.length;
       for (var i = 0; i < len; ++i) {
-        const char = str[i];
+        const char = str2[i];
         if (char === "\\" && inquote) {
           if (escaping) {
             escaping = false;
@@ -12292,7 +12583,7 @@ var require_parseParams = __commonJS({
             if (inquote) {
               inquote = false;
               state = STATE_KEY;
-              while (i + 1 < len && str[i + 1] !== ";") {
+              while (i + 1 < len && str2[i + 1] !== ";") {
                 ++i;
               }
             } else {
@@ -12811,29 +13102,29 @@ var require_Decoder = __commonJS({
     function Decoder() {
       this.buffer = void 0;
     }
-    Decoder.prototype.write = function(str) {
-      str = str.replace(RE_PLUS, " ");
+    Decoder.prototype.write = function(str2) {
+      str2 = str2.replace(RE_PLUS, " ");
       let res = "";
       let i = 0;
       let p = 0;
-      const len = str.length;
+      const len = str2.length;
       for (; i < len; ++i) {
         if (this.buffer !== void 0) {
-          if (!HEX[str.charCodeAt(i)]) {
+          if (!HEX[str2.charCodeAt(i)]) {
             res += "%" + this.buffer;
             this.buffer = void 0;
             --i;
           } else {
-            this.buffer += str[i];
+            this.buffer += str2[i];
             ++p;
             if (this.buffer.length === 2) {
               res += String.fromCharCode(parseInt(this.buffer, 16));
               this.buffer = void 0;
             }
           }
-        } else if (str[i] === "%") {
+        } else if (str2[i] === "%") {
           if (i > p) {
-            res += str.substring(p, i);
+            res += str2.substring(p, i);
             p = i;
           }
           this.buffer = "";
@@ -12841,7 +13132,7 @@ var require_Decoder = __commonJS({
         }
       }
       if (p < len && this.buffer === void 0) {
-        res += str.substring(p);
+        res += str2.substring(p);
       }
       return res;
     };
@@ -13505,9 +13796,9 @@ var require_generateId = __commonJS({
     }
     module.exports.generateId = function generateIdFn() {
       let num = 0;
-      let str = seed();
+      let str2 = seed();
       return function generateId() {
-        return num === 255 ? (str = seed()) + HEX[num = 0] : str + HEX[++num];
+        return num === 255 ? (str2 = seed()) + HEX[num = 0] : str2 + HEX[++num];
       };
     }();
   }
@@ -14340,7 +14631,7 @@ import websocket from "@fastify/websocket";
 import cookie from "@fastify/cookie";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 import { dirname as dirname12 } from "node:path";
-import { existsSync as existsSync10 } from "node:fs";
+import { existsSync as existsSync11 } from "node:fs";
 
 // src/web-dir.ts
 import { resolve } from "node:path";
@@ -14559,7 +14850,9 @@ async function toProjectView(p, sessions) {
     // SPEC-253 · Help Center publik aktif.
     helpEnabled: p.helpEnabled,
     // SPEC-294 · opt-in scheduler otonom (lokal per-instance).
-    schedulerOptIn: p.schedulerOptIn
+    schedulerOptIn: p.schedulerOptIn,
+    // SPEC-409 · ADR-0091 · opt-in hanoman-lead (lokal per-instance, cermin schedulerOptIn).
+    leadOptIn: p.leadOptIn
   };
 }
 
@@ -15012,8 +15305,10 @@ var DEFAULT_SETTING = {
   // SPEC-338 · ADR-0074 · model/effort codex
   verifyScope: "changed",
   // SPEC-376 · ADR-0080 · uji hanya yang berubah
-  conflict: CONFLICT_DEFAULTS
+  conflict: CONFLICT_DEFAULTS,
   // SPEC-383 · ADR-0081 · default sesi konflik (opt-in, mati)
+  lead: LEAD_DEFAULTS
+  // SPEC-409 · ADR-0091 · hanoman-lead (master switch mati)
 };
 async function getSetting() {
   const raw = (await prisma.setting.findUnique({ where: { id: 1 } }))?.data;
@@ -15450,10 +15745,10 @@ function cleanUrl(href) {
 }
 var noopTest = { exec: () => null };
 function splitCells(tableRow, count) {
-  const row = tableRow.replace(/\|/g, (match, offset, str) => {
+  const row = tableRow.replace(/\|/g, (match, offset, str2) => {
     let escaped = false;
     let curr = offset;
-    while (--curr >= 0 && str[curr] === "\\")
+    while (--curr >= 0 && str2[curr] === "\\")
       escaped = !escaped;
     if (escaped) {
       return "|";
@@ -15481,14 +15776,14 @@ function splitCells(tableRow, count) {
   }
   return cells;
 }
-function rtrim(str, c, invert) {
-  const l = str.length;
+function rtrim(str2, c, invert) {
+  const l = str2.length;
   if (l === 0) {
     return "";
   }
   let suffLen = 0;
   while (suffLen < l) {
-    const currChar = str.charAt(l - suffLen - 1);
+    const currChar = str2.charAt(l - suffLen - 1);
     if (currChar === c && !invert) {
       suffLen++;
     } else if (currChar !== c && invert) {
@@ -15497,19 +15792,19 @@ function rtrim(str, c, invert) {
       break;
     }
   }
-  return str.slice(0, l - suffLen);
+  return str2.slice(0, l - suffLen);
 }
-function findClosingBracket(str, b) {
-  if (str.indexOf(b[1]) === -1) {
+function findClosingBracket(str2, b) {
+  if (str2.indexOf(b[1]) === -1) {
     return -1;
   }
   let level = 0;
-  for (let i = 0; i < str.length; i++) {
-    if (str[i] === "\\") {
+  for (let i = 0; i < str2.length; i++) {
+    if (str2[i] === "\\") {
       i++;
-    } else if (str[i] === b[0]) {
+    } else if (str2[i] === b[0]) {
       level++;
-    } else if (str[i] === b[1]) {
+    } else if (str2[i] === b[1]) {
       level--;
       if (level < 0) {
         return i;
@@ -17735,6 +18030,27 @@ async function sendReviewDownload(reply, fmt, rf, a) {
   });
 }
 
+// src/services/date-range.ts
+var DAY = /^\d{4}-\d{2}-\d{2}$/;
+function dayStart(s) {
+  if (!s || !DAY.test(s)) return null;
+  const [y, m, d] = s.split("-").map(Number);
+  const dt = new Date(y, m - 1, d, 0, 0, 0, 0);
+  if (dt.getFullYear() !== y || dt.getMonth() !== m - 1 || dt.getDate() !== d) return null;
+  return dt;
+}
+function dayEnd(s) {
+  const start = dayStart(s);
+  if (!start) return null;
+  return new Date(start.getFullYear(), start.getMonth(), start.getDate(), 23, 59, 59, 999);
+}
+function inDayRange(at, from, to) {
+  if (!from && !to) return true;
+  if (!at) return false;
+  const t = at.getTime();
+  return (!from || t >= from.getTime()) && (!to || t <= to.getTime());
+}
+
 // src/services/live-specs.ts
 init_db();
 init_pty();
@@ -17784,6 +18100,12 @@ async function recordNewTicket(ticketId, projectId, projectName, category, title
   }).catch(() => {
   });
 }
+async function recordLeadDecision(decisionId, title, projectId, specId, sessionId2) {
+  await prisma.notification.create({
+    data: { type: "lead", key: `lead:${decisionId}`, specId, sessionId: sessionId2, projectId, title }
+  }).catch(() => {
+  });
+}
 var awaiting = /* @__PURE__ */ new Set();
 async function scanDecisions(read = liveDecisions) {
   const next = /* @__PURE__ */ new Set();
@@ -17839,6 +18161,13 @@ async function liveSpecs(filter = {}) {
 // src/routes/specs.ts
 var branchUnknown = async (repoDir, branch) => !(await branchFromCandidates(repoDir)).includes(branch);
 function deriveSpecFields(source, payload, manualPriority) {
+  if (source === "goal") {
+    const pick = (v) => typeof v === "string" ? v.trim() : "";
+    return {
+      priority: manualPriority,
+      objective: pick(payload?.goal) || pick(payload?.done) || "\u2014 goal belum diisi."
+    };
+  }
   const isQa = source === "qa";
   const priority = isQa && payload && "severity" in payload ? payload.severity === "minor" ? "sedang" : "tinggi" : manualPriority;
   const objective = isQa && payload && "actual" in payload ? payload.actual || payload.steps || "\u2014 audit untuk menelusuri akar masalah." : payload && "outcome" in payload ? payload.outcome || payload.context || "\u2014 brainstorm untuk memperjelas objective." : "";
@@ -17846,13 +18175,16 @@ function deriveSpecFields(source, payload, manualPriority) {
 }
 function filterSpecs(specs, f) {
   const needle = (f.q ?? "").trim().toLowerCase();
-  return specs.filter((s) => (!f.stage || s.stage === f.stage) && (!f.priority || s.priority === f.priority) && (f.startable !== "true" || s.stage !== "done") && (needle === "" || `${s.id} ${s.title} ${s.objective}`.toLowerCase().includes(needle)));
+  const from = dayStart(f.from);
+  const to = dayEnd(f.to);
+  const byStarted = f.dateField === "started";
+  return specs.filter((s) => (!f.stage || s.stage === f.stage) && (!f.priority || s.priority === f.priority) && (f.startable !== "true" || s.stage !== "done") && inDayRange(byStarted ? s.startedAt : s.createdAt, from, to) && (needle === "" || `${s.id} ${s.title} ${s.objective}`.toLowerCase().includes(needle)));
 }
 async function specs_default(app2) {
   app2.get("/specs", async (req) => {
-    const { project, source, q, stage, priority, startable, page, limit } = req.query;
+    const { project, source, q, stage, priority, startable, dateField, from, to, page, limit } = req.query;
     const overlaid = await liveSpecs({ project, source });
-    return paginate(filterSpecs(overlaid, { q, stage, priority, startable }), page, limit);
+    return paginate(filterSpecs(overlaid, { q, stage, priority, startable, dateField, from, to }), page, limit);
   });
   app2.post("/specs", async (req, reply) => {
     const parsed = zCreateSpec.safeParse(req.body);
@@ -17878,7 +18210,7 @@ async function specs_default(app2) {
             source: b.source,
             stage: "brainstorming",
             priority,
-            author: isQa ? `QA \xB7 ${author}` : b.source === "audit" ? `Audit \xB7 ${author}` : b.source === "cross-audit" ? `Audit lintas \xB7 ${author}` : author,
+            author: isQa ? `QA \xB7 ${author}` : b.source === "audit" ? `Audit \xB7 ${author}` : b.source === "cross-audit" ? `Audit lintas \xB7 ${author}` : b.source === "goal" ? `Goal \xB7 ${author}` : author,
             objective,
             payload: b.payload,
             branchFrom: b.branchFrom ?? null
@@ -19299,6 +19631,14 @@ function resumeState(repoDir, worktree, branchTo, headSha) {
   const base = realGit.revParse(repoDir, `origin/${branchTo}`) ?? realGit.revParse(repoDir, branchTo) ?? (headSha ? realGit.revParse(repoDir, headSha) : null);
   return base ? { worktreeKept: false, base } : null;
 }
+function buildResumeCtx(repoDir, id, flow, worktreeKept) {
+  const phases = readPhases(phaseFilePath(repoDir, id), flow);
+  return {
+    recorded: phases.filter((p) => p.state === "done" || p.state === "skipped").map((p) => `${p.name} ${p.state}`),
+    next: phases.find((p) => p.state === "active")?.name,
+    worktreeKept
+  };
+}
 async function startSpecSession(spec, opts) {
   const repoDir = await resolveRepoDir(spec.projectId);
   if (!repoDir) throw new LaunchError(`project "${spec.projectId}" belum di-bind ke checkout lokal`, "needs-bind");
@@ -19315,11 +19655,14 @@ async function startSpecSession(spec, opts) {
   const worktree = `${repoDir}/.worktrees/${id}`;
   const branchTo = `hanoman/${id}`;
   const resume = !isContinue && spec.baseSha ? resumeState(repoDir, worktree, branchTo, spec.headSha) : null;
-  const goal = opts.goal ?? setting.goal.enabled ? resolveGoalCondition(
-    { flow: opts.flow, specId: spec.id, branchTo },
-    opts.goalCondition,
-    setting.goal.condition
-  ) : void 0;
+  const isGoalFlow = opts.flow === "goal";
+  const goalArgs = {
+    flow: opts.flow,
+    specId: spec.id,
+    branchTo,
+    spec: { payload: spec.payload ?? void 0, objective: spec.objective }
+  };
+  const goal = isGoalFlow || (opts.goal ?? setting.goal.enabled) ? resolveGoalCondition(goalArgs, opts.goalCondition, isGoalFlow ? null : setting.goal.condition) : void 0;
   const verifyScope = opts.verifyScope ?? setting.verifyScope;
   if (agent === "codex") ensureCodexTrust(repoDir);
   let baseSha;
@@ -19332,7 +19675,10 @@ async function startSpecSession(spec, opts) {
     } catch (e) {
       throw new LaunchError(`gagal membuat worktree: ${e.message}`, "worktree");
     }
-    if (!resume) await prisma.spec.update({ where: { id: spec.id }, data: { baseSha, headSha: null } });
+    if (!resume) await prisma.spec.update({
+      where: { id: spec.id },
+      data: { baseSha, headSha: null, startedAt: /* @__PURE__ */ new Date() }
+    });
   }
   const brief = {
     id: spec.id,
@@ -19342,17 +19688,18 @@ async function startSpecSession(spec, opts) {
     objective: spec.objective,
     payload: spec.payload ?? void 0
   };
+  const resumeCtx = resume ? buildResumeCtx(repoDir, id, opts.flow, resume.worktreeKept) : void 0;
   let prompt;
-  if (isContinue) {
+  if (isGoalFlow) {
+    prompt = startGoalPrompt(brief, branchTo, {
+      autonomy: opts.autonomy,
+      verifyScope,
+      resume: resumeCtx
+    });
+  } else if (isContinue) {
     prompt = continuePrompt(opts.flow, brief, branchTo, opts.autonomy, verifyScope);
-  } else if (resume) {
-    const phases = readPhases(phaseFilePath(repoDir, id), opts.flow);
-    const ctx = {
-      recorded: phases.filter((p) => p.state === "done" || p.state === "skipped").map((p) => `${p.name} ${p.state}`),
-      next: phases.find((p) => p.state === "active")?.name,
-      worktreeKept: resume.worktreeKept
-    };
-    prompt = resumePrompt(opts.flow, brief, branchTo, ctx, opts.autonomy, verifyScope);
+  } else if (resumeCtx) {
+    prompt = resumePrompt(opts.flow, brief, branchTo, resumeCtx, opts.autonomy, verifyScope);
   } else {
     prompt = startPrompt(opts.flow, brief, branchTo, opts.autonomy, verifyScope);
   }
@@ -19908,9 +20255,9 @@ function sshExec(t, remoteCmd, opts = {}) {
   return new Promise((resolve15) => {
     const p = spawn3(sshBin(), args, { stdio: ["pipe", "pipe", "pipe"], env });
     let out3 = "";
-    const timer4 = setTimeout(() => p.kill("SIGKILL"), opts.timeoutMs ?? 6e4);
+    const timer5 = setTimeout(() => p.kill("SIGKILL"), opts.timeoutMs ?? 6e4);
     const done = (r) => {
-      clearTimeout(timer4);
+      clearTimeout(timer5);
       if (askpass) rmSync4(dirname9(askpass), { recursive: true, force: true });
       resolve15(r);
     };
@@ -20681,6 +21028,9 @@ async function codex(app2) {
   app2.get("/codex/version", async () => codexVersionInfo());
 }
 
+// src/routes/update.ts
+init_src();
+
 // src/services/update.ts
 init_src();
 init_config2();
@@ -20695,7 +21045,11 @@ function composeUpdate(x) {
     latestVersion: x.latestVersion,
     registry: { status: x.registryStatus, checkedAt: x.checkedAt },
     updateAvailable: available,
-    command: available ? UPDATE_COMMAND : ""
+    command: available ? UPDATE_COMMAND : "",
+    // Diwariskan apa adanya. Ia fakta tentang cara proses ini dilahirkan, bukan kesimpulan
+    // tentang ada-tidaknya update — menurunkannya dari `available` akan menyembunyikan
+    // instalasi tak-tersupervisi tepat saat tombolnya paling ingin ditekan.
+    canApply: x.canApply
   };
 }
 var RESULT_TTL_MS = 15e3;
@@ -20716,6 +21070,15 @@ function runningVersion() {
   }
   return "0.0.0";
 }
+function supervised() {
+  const v = process.env.HANOMAN_SUPERVISOR;
+  return v === "1" || v === "true";
+}
+var exiter = null;
+function requestRestartForUpdate() {
+  const delay = effectiveInt("HANOMAN_UPDATE_RESTART_DELAY_MS") ?? 250;
+  setTimeout(() => (exiter ?? ((c) => process.exit(c)))(UPDATE_RESTART_EXIT), delay);
+}
 async function maybeFetch() {
   if (!effectiveBool("HANOMAN_UPDATE_FETCH")) return;
   if (lastFetchAt && Date.now() - lastFetchAt < FETCH_TTL_MS) return;
@@ -20748,25 +21111,64 @@ async function getUpdateStatus() {
     currentVersion: runningVersion(),
     latestVersion: lastLatest,
     registryStatus: lastStatus,
-    checkedAt: lastFetchAt ? new Date(lastFetchAt).toISOString() : null
+    checkedAt: lastFetchAt ? new Date(lastFetchAt).toISOString() : null,
+    canApply: supervised()
   });
   cached = { at: Date.now(), value };
   return value;
 }
 
 // src/routes/update.ts
+init_pty();
 async function update(app2) {
   app2.get("/update", async () => getUpdateStatus());
+  app2.post("/update/apply", async (req, reply) => {
+    const parsed = zUpdateApplyBody.safeParse(req.body ?? {});
+    if (!parsed.success) return reply.code(400).send({ error: "bad-body" });
+    const u = await getUpdateStatus();
+    if (!u.canApply) return reply.code(409).send({ error: "unsupervised" });
+    if (!u.updateAvailable) return reply.code(409).send({ error: "up-to-date", current: u.currentVersion });
+    const liveSessions = listSessions().filter((s) => !s.exited).length;
+    const from = u.currentVersion;
+    const to = u.latestVersion;
+    if (!parsed.data.confirm) return reply.code(409).send({ error: "confirm-required", liveSessions, from, to });
+    requestRestartForUpdate();
+    return reply.code(202).send({ accepted: true, from, to, liveSessions });
+  });
 }
 
 // src/services/events.ts
 init_pty();
+
+// src/services/lead/deciding.ts
+var deciding = /* @__PURE__ */ new Set();
+function markDeciding(sessionId2) {
+  deciding.add(sessionId2);
+}
+function clearDeciding(sessionId2) {
+  deciding.delete(sessionId2);
+}
+function isDeciding(sessionId2) {
+  return deciding.has(sessionId2);
+}
+function decidingIds() {
+  return [...deciding];
+}
+
+// src/services/events.ts
 init_db();
 init_config2();
 var clients = /* @__PURE__ */ new Set();
 var tickMs = () => effectiveInt("HANOMAN_EVENTS_TICK_MS") ?? 1e3;
 var GROUPS = [
-  { everyTicks: 1, last: "", build: async () => ({ t: "sessions", sessions: listSessions() }) },
+  // SPEC-409 · ADR-0091 · AC-3 · `deciding` menandai sesi yang sedang DISUSUN keputusannya oleh
+  // hanoman-lead. Tanpa penanda ini sesi yang justru sedang dilayani terbaca persis seperti sesi
+  // yang mandek — bentuknya sama: diam, marker keputusan terisi. Dihias DI SINI, bukan di pty.ts:
+  // service itu sengaja tak tahu apa-apa soal lead maupun DB.
+  { everyTicks: 1, last: "", build: async () => ({
+    t: "sessions",
+    sessions: listSessions().map((s) => isDeciding(s.id) ? { ...s, deciding: true } : s)
+  }) },
   { everyTicks: 1, last: "", build: async () => ({ t: "specs", specs: await liveSpecs() }) },
   { everyTicks: 3, last: "", build: async () => ({ t: "notifications", ...await notificationsFeed() }) },
   // ponytail: cermin GET /vps (orderBy createdAt asc). Query sepele — tak diekstrak.
@@ -21183,11 +21585,11 @@ function clamp(text) {
   const buf = Buffer.from(text, "utf8");
   if (buf.byteLength <= MAX_TRANSCRIPT_BYTES) return { body: text, truncated: false };
   const cut = buf.byteLength - MAX_TRANSCRIPT_BYTES;
-  let tail = buf.subarray(cut).toString("utf8");
-  const nl = tail.indexOf("\n");
-  if (nl >= 0) tail = tail.slice(nl + 1);
+  let tail2 = buf.subarray(cut).toString("utf8");
+  const nl = tail2.indexOf("\n");
+  if (nl >= 0) tail2 = tail2.slice(nl + 1);
   return { body: `\u2026 ${cut} byte awal dipangkas (batas ${MAX_TRANSCRIPT_BYTES} byte) \u2026
-${tail}`, truncated: true };
+${tail2}`, truncated: true };
 }
 async function saveTranscript(text) {
   if (!text.trim()) return { key: "", bytes: 0, truncated: false };
@@ -21742,7 +22144,7 @@ for (let i = 0; i < chars.length; i++) {
   intToChar[i] = c;
   charToInt[c] = i;
 }
-function decodeInteger(reader, relative) {
+function decodeInteger(reader, relative2) {
   let value = 0;
   let shift = 0;
   let integer = 0;
@@ -21757,7 +22159,7 @@ function decodeInteger(reader, relative) {
   if (shouldNegate) {
     value = -2147483648 | -value;
   }
-  return relative + value;
+  return relative2 + value;
 }
 function hasMoreVlq(reader, max) {
   if (reader.pos >= max) return false;
@@ -22917,6 +23319,1038 @@ async function audit_default(app2) {
   });
 }
 
+// src/routes/lead.ts
+init_src();
+init_db();
+init_pty();
+
+// src/services/lead/config.ts
+init_db();
+init_src();
+async function getLead() {
+  return (await getSetting()).lead;
+}
+async function setLead(next) {
+  const cur = await getSetting();
+  const data = { ...cur, lead: next };
+  await prisma.setting.upsert({ where: { id: 1 }, update: { data }, create: { id: 1, data } });
+  return next;
+}
+async function leadAgentDefaults() {
+  const s = await getSetting();
+  const e = s.lead.engine;
+  if (!e.enabled) return sessionAgentDefaults();
+  return e.agent === "codex" ? { agent: "codex", model: e.model, effort: coerceCodexEffort(e.model, e.effort) } : { agent: "claude", model: e.model, effort: e.effort };
+}
+function leadActive(cfg, projectId) {
+  if (!cfg.enabled || cfg.paused) return false;
+  if (projectId && cfg.pausedProjects.includes(projectId)) return false;
+  return true;
+}
+async function leadProjects() {
+  const rows = await prisma.project.findMany({ where: { leadOptIn: true }, select: { id: true } });
+  return rows.map((r) => r.id);
+}
+
+// src/services/lead/decide.ts
+init_src();
+init_db();
+init_pty();
+
+// src/services/lead/prompt.ts
+init_src();
+var bullet2 = (s) => `- ${s}`;
+function leadPrompt(q, c) {
+  const lines2 = [];
+  lines2.push("Kamu adalah **hanoman-lead**: tech lead mesin di atas semua agen yang bekerja di workspace ini.");
+  lines2.push("Kamu MEMUTUSKAN, lalu melapor. Tidak ada manusia yang menunggu untuk menyetujui jawabanmu.");
+  lines2.push("");
+  lines2.push("## Konteks");
+  lines2.push(bullet2(`Project: ${c.projectName} (${c.projectId})`));
+  if (c.repoDir) lines2.push(bullet2(`Checkout: ${c.repoDir}`));
+  if (c.spec) {
+    lines2.push(bullet2(`Backlog item: ${c.spec.id} \u2014 ${c.spec.title} \xB7 stage ${c.spec.stage} \xB7 prioritas ${c.spec.priority}`));
+    if (c.spec.objective) lines2.push(bullet2(`Objective: ${c.spec.objective}`));
+  }
+  for (const s of c.liveSessions ?? []) {
+    lines2.push(bullet2(`Sesi berjalan: ${s.id}${s.specId ? ` (${s.specId})` : ""}${s.flow ? ` \xB7 flow ${s.flow}` : ""}${s.branch ? ` \xB7 branch ${s.branch}` : ""}`));
+  }
+  for (const n of c.notes ?? []) lines2.push(bullet2(n));
+  lines2.push("");
+  if (c.priorDecisions?.length) {
+    lines2.push("## Keputusan yang sudah kamu ambil sebelumnya (jangan bertentangan tanpa alasan)");
+    for (const d of c.priorDecisions.slice(0, 10)) {
+      lines2.push(`- [${d.createdAt}] "${d.question.slice(0, 200)}" \u2192 ${d.answer.slice(0, 300)} (${d.reason.slice(0, 200)})`);
+    }
+    lines2.push("");
+  }
+  lines2.push("## Yang harus kamu putuskan");
+  lines2.push(q.question.trim());
+  if (q.options?.length) {
+    lines2.push("");
+    lines2.push("Opsi yang dilihat peminta:");
+    for (const [i, o] of q.options.entries()) lines2.push(`${i + 1}. ${o}`);
+  }
+  lines2.push("");
+  lines2.push("## Cara kerja");
+  lines2.push("1. KUMPULKAN BUKTI DULU sebelum memutuskan: `internal/docs/**` (Source of Truth) dan index-nya, ADR yang relevan, plan `docs/superpowers/plans/**`, kode yang bersangkutan, dan riwayat git. Baca, jangan mengingat.");
+  lines2.push('2. Putuskan. Kalau setelah membaca kamu masih ragu, TETAP putuskan: pilih opsi yang PALING MUDAH DIBATALKAN, lalu tandai `confidence: "ragu"`. Jangan pernah menjawab "tidak tahu" atau meminta manusia memutuskan \u2014 itu persis keadaan yang kamu ada untuk menghapusnya.');
+  lines2.push("3. Rujuk bukti yang BENAR-BENAR kamu baca. Rujukan berupa path berkas relatif terhadap checkout, nomor ADR (`ADR-0091`), atau sha commit. Rujukan yang tak ada di repo akan dibuang server dan membuat jawabanmu tampak tanpa dasar.");
+  lines2.push("4. JANGAN membaca atau mengutip kredensial (isi `.env*`, token, kunci privat). Jejak keputusan disimpan di basis data; rahasia tak boleh mendarat di sana.");
+  lines2.push("5. Kamu TIDAK mengeksekusi apa pun sendiri. Kamu mengusulkan satu `action`; server yang menjalankannya, dan hanya bila ia ada di daftar tertutup ini:");
+  lines2.push(`   ${LEAD_ACTIONS.join(" \xB7 ")}`);
+  lines2.push("   Deploy, perintah/konsol VPS, data produksi, dan penghapusan apa pun (project, backlog, branch, worktree, notifikasi, jejak) TERKUNCI dan tidak akan pernah dijalankan.");
+  lines2.push("");
+  lines2.push("## Bentuk jawaban (WAJIB)");
+  lines2.push("Akhiri jawabanmu dengan TEPAT SATU blok berikut, tanpa teks sesudahnya:");
+  lines2.push("");
+  lines2.push("```json");
+  lines2.push(JSON.stringify({
+    decision: "keputusan yang dipilih, satu kalimat",
+    reason: "alasannya, menyebut bukti",
+    refs: ["internal/docs/\u2026", "ADR-00xx"],
+    confidence: "tinggi | sedang | ragu",
+    action: "none",
+    reply: "teks yang akan diketikkan ke terminal agen peminta (kosongkan bila tak relevan)"
+  }, null, 2));
+  lines2.push("```");
+  return lines2.join("\n");
+}
+
+// src/services/lead/verdict.ts
+init_src();
+import { existsSync as existsSync10 } from "node:fs";
+import { isAbsolute as isAbsolute3, resolve as resolvePath, relative } from "node:path";
+function extractJsonBlock(raw) {
+  const re = /```json\s*\n([\s\S]*?)```/g;
+  let last = null;
+  for (const m of raw.matchAll(re)) if (m[1]) last = m[1];
+  if (last) return last;
+  const t = raw.trim();
+  return t.startsWith("{") && t.endsWith("}") ? t : null;
+}
+function parseLeadVerdict(raw) {
+  const block2 = extractJsonBlock(raw);
+  if (!block2) return null;
+  let data;
+  try {
+    data = JSON.parse(block2);
+  } catch {
+    return null;
+  }
+  const parsed = zLeadVerdict.safeParse(data);
+  return parsed.success ? parsed.data : null;
+}
+var SHA = /^[0-9a-f]{7,40}$/i;
+var isNonFileRef = (ref) => SHA.test(ref) || /^ADR-\d{4}$/i.test(ref);
+function keepExistingRefs(refs2, repoDir) {
+  const out3 = [];
+  for (const raw of refs2) {
+    const ref = raw.trim();
+    if (!ref) continue;
+    if (isNonFileRef(ref)) {
+      out3.push(ref);
+      continue;
+    }
+    if (!repoDir) continue;
+    if (isAbsolute3(ref)) continue;
+    const full = resolvePath(repoDir, ref);
+    const rel = relative(repoDir, full);
+    if (rel.startsWith("..")) continue;
+    if (existsSync10(full)) out3.push(ref);
+  }
+  return [...new Set(out3)];
+}
+
+// src/services/lead/trail.ts
+init_db();
+async function recordDecision(i) {
+  return prisma.leadDecision.create({
+    data: {
+      projectId: i.projectId,
+      specId: i.specId ?? null,
+      sessionId: i.sessionId ?? null,
+      gate: i.gate,
+      kind: i.kind,
+      question: i.question,
+      answer: i.answer,
+      reason: i.reason,
+      refs: i.refs,
+      confidence: i.confidence,
+      action: i.action,
+      status: i.status ?? "berlaku",
+      weighty: i.weighty ?? false,
+      actor: i.actor ?? "lead"
+    }
+  });
+}
+async function listDecisions(f = {}) {
+  return prisma.leadDecision.findMany({
+    where: {
+      ...f.projectId ? { projectId: f.projectId } : {},
+      ...f.specId ? { specId: f.specId } : {},
+      ...f.sessionId ? { sessionId: f.sessionId } : {},
+      ...f.status ? { status: f.status } : {}
+    },
+    orderBy: { createdAt: "desc" },
+    take: Math.min(f.take ?? 50, 200),
+    skip: f.skip ?? 0
+  });
+}
+async function overrideDecision(id, answer, reason) {
+  const old = await prisma.leadDecision.findUnique({ where: { id } });
+  if (!old || old.status !== "berlaku") return null;
+  const next = await recordDecision({
+    projectId: old.projectId,
+    specId: old.specId,
+    sessionId: old.sessionId,
+    gate: old.gate,
+    kind: old.kind,
+    question: old.question,
+    answer,
+    reason: reason || "ditimpa operator",
+    refs: [],
+    confidence: "tinggi",
+    action: "none",
+    actor: "operator"
+  });
+  const updated = await prisma.leadDecision.update({
+    where: { id },
+    data: { status: "ditimpa", supersededById: next.id }
+  });
+  return { old: updated, next };
+}
+async function cancelDecision(id) {
+  const row = await prisma.leadDecision.findUnique({ where: { id } });
+  if (!row || row.status !== "berlaku") return null;
+  return prisma.leadDecision.update({ where: { id }, data: { status: "dibatalkan" } });
+}
+function toDecisionView(r) {
+  return {
+    id: r.id,
+    projectId: r.projectId,
+    specId: r.specId,
+    sessionId: r.sessionId,
+    gate: r.gate,
+    kind: r.kind,
+    question: r.question,
+    answer: r.answer,
+    reason: r.reason,
+    refs: Array.isArray(r.refs) ? r.refs.map(String) : [],
+    confidence: r.confidence,
+    action: r.action,
+    status: r.status,
+    weighty: r.weighty,
+    supersededById: r.supersededById,
+    createdAt: r.createdAt.toISOString()
+  };
+}
+
+// src/services/lead/brain.ts
+init_config2();
+import { execFile as execFile9 } from "node:child_process";
+var binFor = (agent) => agent === "codex" ? effectiveStr("HANOMAN_CODEX_BIN") ?? "codex" : effectiveStr("HANOMAN_CLAUDE_BIN") ?? "claude";
+function leadArgv(o) {
+  if (o.agent === "codex") {
+    return [
+      "exec",
+      ...o.model ? ["-m", o.model] : [],
+      ...o.effort ? ["-c", `model_reasoning_effort="${o.effort}"`] : [],
+      "--dangerously-bypass-approvals-and-sandbox",
+      o.prompt
+    ];
+  }
+  return [
+    "-p",
+    ...o.model ? ["--model", o.model] : [],
+    ...o.effort ? ["--effort", o.effort] : [],
+    "--dangerously-skip-permissions",
+    o.prompt
+  ];
+}
+function think(prompt, o) {
+  const bin = binFor(o.agent);
+  const args = leadArgv({ agent: o.agent, model: o.model, effort: o.effort, prompt });
+  return new Promise((resolve15, reject) => {
+    execFile9(bin, args, {
+      cwd: o.cwd,
+      timeout: o.timeoutMs,
+      maxBuffer: 16 * 1024 * 1024,
+      encoding: "utf8",
+      killSignal: "SIGTERM"
+    }, (err, stdout, stderr) => {
+      if (err) {
+        const killed = err.killed;
+        reject(new Error(killed ? `lead ${o.agent} kehabisan waktu ${o.timeoutMs} ms` : `lead ${o.agent} gagal: ${(stderr || err.message).trim().slice(0, 500)}`));
+        return;
+      }
+      resolve15(stdout);
+    });
+  });
+}
+
+// src/services/lead/decide.ts
+var prodDecideDeps = {
+  think,
+  defaults: leadAgentDefaults,
+  repoDir: resolveRepoDir,
+  liveSessions: () => {
+    try {
+      return listSessions();
+    } catch {
+      return [];
+    }
+  },
+  notify: recordLeadDecision
+};
+var notifTitle = (kind, question, answer, confidence) => {
+  const q = question.replace(/\s+/g, " ").trim().slice(0, 70);
+  const a = answer.replace(/\s+/g, " ").trim().slice(0, 90);
+  const tag2 = confidence === "ragu" ? "Lead (ragu)" : "Lead";
+  return `${tag2} \xB7 ${kind}: ${q ? `"${q}" \u2192 ` : ""}${a}`;
+};
+async function decide(req, deps = prodDecideDeps) {
+  const cfg = await getLead();
+  if (!leadActive(cfg, req.projectId)) return null;
+  const project = await prisma.project.findUnique({ where: { id: req.projectId }, select: { name: true } });
+  const spec = req.specId ? await prisma.spec.findUnique({
+    where: { id: req.specId },
+    select: { id: true, title: true, objective: true, stage: true, priority: true }
+  }) : null;
+  const repoDir = await deps.repoDir(req.projectId).catch(() => null);
+  const prior = await prisma.leadDecision.findMany({
+    where: { projectId: req.projectId, status: "berlaku" },
+    orderBy: { createdAt: "desc" },
+    take: 10
+  });
+  const ctx = {
+    projectId: req.projectId,
+    projectName: project?.name ?? req.projectId,
+    repoDir,
+    spec,
+    liveSessions: deps.liveSessions().filter((s) => !s.exited && s.projectId === req.projectId && s.id !== req.sessionId).map((s) => ({ id: s.id, specId: s.specId, flow: s.flow, branch: s.branch })),
+    priorDecisions: prior.map((d) => ({
+      question: d.question,
+      answer: d.answer,
+      reason: d.reason,
+      createdAt: d.createdAt.toISOString()
+    })),
+    notes: req.notes
+  };
+  const { agent, model, effort } = await deps.defaults();
+  const prompt = leadPrompt({ kind: req.kind, question: req.question, options: req.options }, ctx);
+  if (req.sessionId) markDeciding(req.sessionId);
+  let raw;
+  try {
+    raw = await deps.think(prompt, { agent, model, effort, cwd: repoDir ?? void 0, timeoutMs: cfg.timeoutSec * 1e3 });
+  } catch (e) {
+    return fail(req, deps, `lead tak menghasilkan keputusan: ${e.message}`);
+  } finally {
+    if (req.sessionId) clearDeciding(req.sessionId);
+  }
+  const verdict = parseLeadVerdict(raw);
+  if (!verdict) return fail(req, deps, "keluaran lead tak memuat blok json keputusan yang sah");
+  const refs2 = keepExistingRefs(verdict.refs, repoDir);
+  const allowed = leadActionAllowed(verdict.action);
+  const action = allowed ? verdict.action : "none";
+  const kind = allowed ? req.kind : "refusal";
+  const reason = allowed ? verdict.reason : `${verdict.reason}
+
+DITOLAK: ${leadRefusalReason(verdict.action)} berada di luar permukaan tindakan lead (ADR-0091 \xB7 AC-31/32).`;
+  const weighty = isWeightyDecision({ kind, action, confidence: verdict.confidence });
+  const row = await recordDecision({
+    projectId: req.projectId,
+    specId: req.specId,
+    sessionId: req.sessionId,
+    gate: req.gate,
+    kind,
+    question: req.question,
+    answer: verdict.decision,
+    reason,
+    refs: refs2,
+    confidence: verdict.confidence,
+    action,
+    weighty
+  });
+  if (weighty) {
+    await deps.notify(
+      row.id,
+      notifTitle(kind, req.question, verdict.decision, verdict.confidence),
+      req.projectId,
+      req.specId ?? null,
+      req.sessionId ?? null
+    );
+  }
+  lastReply.set(row.id, verdict.reply || verdict.decision);
+  return row;
+}
+var lastReply = /* @__PURE__ */ new Map();
+function takeReply(decisionId) {
+  const v = lastReply.get(decisionId) ?? "";
+  lastReply.delete(decisionId);
+  return v;
+}
+async function fail(req, deps, reason) {
+  const row = await recordDecision({
+    projectId: req.projectId,
+    specId: req.specId,
+    sessionId: req.sessionId,
+    gate: req.gate,
+    kind: req.kind,
+    question: req.question,
+    answer: "",
+    reason,
+    refs: [],
+    confidence: "ragu",
+    action: "none",
+    status: "gagal",
+    weighty: true
+  });
+  await deps.notify(
+    row.id,
+    `Lead gagal memutuskan: ${req.question.replace(/\s+/g, " ").slice(0, 90)}`,
+    req.projectId,
+    req.specId ?? null,
+    req.sessionId ?? null
+  );
+  return row;
+}
+
+// src/services/lead/apply.ts
+init_src();
+init_db();
+init_pty();
+init_session_phases();
+var prodApplyDeps = {
+  killSession: (id) => {
+    try {
+      return killSession(id);
+    } catch {
+      return false;
+    }
+  },
+  sessionExists: (id) => {
+    try {
+      return !!getSession(id);
+    } catch {
+      return false;
+    }
+  },
+  startSpec: startSpecSession,
+  repoDir: resolveRepoDir,
+  planDone: planComplete,
+  integrate,
+  notify: recordLeadDecision
+};
+async function applyAction(row, deps = prodApplyDeps) {
+  const action = row.action;
+  if (!leadActionAllowed(action)) {
+    await deps.notify(
+      row.id,
+      `Lead menolak tindakan terkunci: ${leadRefusalReason(action)}`,
+      row.projectId,
+      row.specId,
+      row.sessionId
+    );
+    return { ok: false, detail: `tindakan terkunci: ${leadRefusalReason(action)}` };
+  }
+  switch (action) {
+    // Keputusan yang wujudnya memang hanya baris jejak.
+    case "none":
+    case "answer-session":
+    // sudah diketikkan ke pane oleh pintu deteksi
+    case "order-queue":
+      return { ok: true, detail: "tak ada tindakan tersisa" };
+    // Ditata sebagai keputusan, dieksekusi operator di versi ini (lihat ADR-0091 §Konsekuensi).
+    case "hold-work":
+    case "push-branch":
+    case "run-migration":
+      return { ok: true, detail: `dicatat sebagai keputusan; "${action}" dieksekusi operator di versi ini` };
+    case "stop-session":
+      return stopSession(row, deps);
+    case "start-session":
+    case "resume-session":
+    case "restart-session":
+      return relaunch(row, deps);
+    case "integrate-main":
+      return integrateMain(row, deps);
+  }
+}
+function stopSession(row, deps) {
+  if (!row.sessionId) return { ok: false, detail: "keputusan ini tak menunjuk sesi" };
+  const killed = deps.killSession(row.sessionId);
+  return killed ? { ok: true, detail: `sesi ${row.sessionId} dihentikan; worktree dibiarkan utuh (AC-32a)` } : { ok: false, detail: `sesi ${row.sessionId} tak ada` };
+}
+async function relaunch(row, deps) {
+  if (!row.specId) return { ok: false, detail: "keputusan ini tak menunjuk backlog" };
+  const spec = await prisma.spec.findUnique({ where: { id: row.specId } });
+  if (!spec) return { ok: false, detail: `backlog ${row.specId} tak ada` };
+  const sid = sessionIdForSpec(spec.id);
+  if (deps.sessionExists(sid)) deps.killSession(sid);
+  const r = await deps.startSpec(spec, { flow: flowForSource(spec.source) });
+  return { ok: true, detail: `sesi ${r.id}${r.resumed ? " dilanjutkan" : " dimulai"}` };
+}
+async function integrateMain(row, deps) {
+  if (!row.specId) return { ok: false, detail: "keputusan ini tak menunjuk backlog" };
+  const cfg = await getLead();
+  const repoDir = await deps.repoDir(row.projectId);
+  if (!repoDir) return { ok: false, detail: `project ${row.projectId} belum di-bind ke checkout lokal` };
+  const spec = await prisma.spec.findUnique({ where: { id: row.specId } });
+  if (!spec) return { ok: false, detail: `backlog ${row.specId} tak ada` };
+  const evidence = [];
+  if (cfg.requireGreenBeforeIntegrate) {
+    const wt = worktreeDir(repoDir, spec.id);
+    const done = deps.planDone(wt, spec.id);
+    evidence.push(done ? "plan tak menyisakan `- [ ]`" : "plan MASIH menyisakan `- [ ]`");
+    const sid = sessionIdForSpec(spec.id);
+    const pane = deps.sessionExists(sid);
+    evidence.push(pane ? `pane ${sid} masih ada` : `pane ${sid} sudah tak ada`);
+    if (!done) {
+      await recordEvidence(row, evidence, "integrasi DIBATALKAN \u2014 syarat objektif tak terpenuhi");
+      await deps.notify(
+        row.id,
+        `Lead membatalkan integrasi ${spec.id}: plan belum tuntas`,
+        row.projectId,
+        row.specId,
+        row.sessionId
+      );
+      return { ok: false, detail: "syarat integrasi tak terpenuhi: plan masih menyisakan `- [ ]`" };
+    }
+  } else {
+    evidence.push("syarat objektif dimatikan operator (lead.requireGreenBeforeIntegrate = false)");
+  }
+  const res = await deps.integrate(repoDir, spec.id, "merge", "local:main");
+  evidence.push(`integrate \u2192 ${res.status}`);
+  await recordEvidence(row, evidence, res.status === "clean" ? "integrasi bersih" : `integrasi tak bersih: ${res.status}`);
+  if (res.status !== "clean") {
+    await deps.notify(
+      row.id,
+      `Integrasi ${spec.id} oleh lead tak bersih (${res.status}) \u2014 butuh operator`,
+      row.projectId,
+      row.specId,
+      row.sessionId
+    );
+  }
+  return { ok: res.status === "clean", detail: evidence.join("; ") };
+}
+async function recordEvidence(row, evidence, verdict) {
+  await prisma.leadDecision.update({
+    where: { id: row.id },
+    data: { reason: `${row.reason}
+
+Bukti integrasi: ${evidence.join("; ")} \u2192 ${verdict}.` }
+  }).catch(() => {
+  });
+}
+
+// src/services/lead/detect.ts
+init_pty();
+
+// src/services/lead/pane.ts
+var CLEAN = /[│┃┆┊┌┐└┘├┤┬┴┼─━╭╮╰╯>❯]/g;
+var tail = (text, lines2) => text.split("\n").map((l) => l.replace(CLEAN, " ").trimEnd()).filter((l) => l.trim()).slice(-lines2);
+var CODEX_FINISHED = [
+  /Goal achieved/i,
+  /Goal unmet/i,
+  /\btokens used\b/i,
+  /\bTo continue this session\b/i
+];
+var ASK_SIGNALS = [
+  /\?\s*$/m,
+  /^\s*\[?\d+[).\]]\s+\S/m,
+  /\b(pilih|apakah|haruskah|mana yang|opsi|which|should i|do you want|proceed\?)\b/i
+];
+function readPaneQuestion(text, agent) {
+  const lines2 = tail(text, 40);
+  const body = lines2.join("\n").trim();
+  if (!body) return { asking: false, question: "", reason: "layar kosong" };
+  const question = tail(text, 25).join("\n").trim();
+  if (agent === "codex") {
+    const finished = CODEX_FINISHED.find((re) => re.test(body));
+    if (finished) return { asking: false, question, reason: "sesi codex selesai wajar (ADR-0074)" };
+    if (!ASK_SIGNALS.some((re) => re.test(body)))
+      return { asking: false, question, reason: "tak ada sinyal pertanyaan di layar codex" };
+  }
+  return { asking: true, question, reason: "" };
+}
+
+// src/services/lead/detect.ts
+var answers = /* @__PURE__ */ new Map();
+var capped = /* @__PURE__ */ new Set();
+function resetSession(sessionId2) {
+  answers.delete(sessionId2);
+  capped.delete(sessionId2);
+}
+var prodDetectDeps = {
+  live: () => {
+    try {
+      return liveDecisions();
+    } catch {
+      return [];
+    }
+  },
+  filled: markerFilled,
+  pane: (id) => capturePane(id),
+  agentOf: (id) => {
+    try {
+      return getSession(id)?.agent ?? null;
+    } catch {
+      return null;
+    }
+  },
+  // SPEC-402 · tmux tak terbaca ≠ pane mati. Ragu → perlakukan sebagai mati: yang hilang cuma satu
+  // jawaban otomatis (sesi jatuh ke perilaku hari ini), sementara salah arah membuat lead mengetik
+  // ke pane yang sudah tak ada.
+  exited: (id) => {
+    try {
+      return getSession(id)?.exited ?? true;
+    } catch {
+      return true;
+    }
+  },
+  send: (id, text) => sendToPane(id, text),
+  decide,
+  decideDeps: prodDecideDeps,
+  optIn: leadProjects,
+  notify: recordLeadDecision,
+  cfg: getLead
+};
+async function scanAndAnswer(deps = prodDetectDeps) {
+  const out3 = { answered: [], skipped: [] };
+  const cfg = await deps.cfg();
+  if (!cfg.enabled || cfg.paused) return out3;
+  const optIn = new Set(await deps.optIn());
+  const sessions = deps.live();
+  sweep(sessions.map((s) => s.id));
+  for (const s of sessions) {
+    const skip = (reason) => out3.skipped.push({ id: s.id, reason });
+    if (!optIn.has(s.projectId)) {
+      skip("project tak opt-in lead");
+      continue;
+    }
+    if (!leadActive(cfg, s.projectId)) {
+      skip("lead dijeda untuk project ini");
+      continue;
+    }
+    if (!deps.filled(s.decisionFile)) continue;
+    if (deps.exited(s.id)) {
+      skip("pane mati");
+      continue;
+    }
+    if ((answers.get(s.id) ?? 0) >= cfg.maxAutoAnswers) {
+      if (!capped.has(s.id)) {
+        capped.add(s.id);
+        const row2 = await recordDecision({
+          projectId: s.projectId,
+          specId: s.specId,
+          sessionId: s.id,
+          gate: "detected",
+          kind: "quality",
+          question: `Sesi ${s.id} sudah dijawab otomatis ${cfg.maxAutoAnswers}\xD7 berturut-turut.`,
+          answer: "Berhenti menjawab sesi ini; serahkan ke operator.",
+          reason: "Batas jawaban otomatis per sesi tercapai \u2014 pengulangan menandakan lead tak benar-benar membuka jalan buntunya (AC-11).",
+          refs: [],
+          confidence: "tinggi",
+          action: "none",
+          weighty: true
+        });
+        await deps.notify(
+          row2.id,
+          `Lead berhenti menjawab sesi ${s.id} (batas ${cfg.maxAutoAnswers}\xD7 tercapai)`,
+          s.projectId,
+          s.specId ?? null,
+          s.id
+        );
+      }
+      skip("batas jawaban otomatis tercapai");
+      continue;
+    }
+    const agent = deps.agentOf(s.id) ?? "claude";
+    const read = readPaneQuestion(deps.pane(s.id), agent);
+    if (!read.asking) {
+      skip(read.reason);
+      continue;
+    }
+    const row = await deps.decide({
+      projectId: s.projectId,
+      specId: s.specId,
+      sessionId: s.id,
+      gate: "detected",
+      kind: "answer",
+      question: read.question,
+      notes: [`Sesi ini menunggu di terminal; teks di bawah adalah layar terakhirnya. Jawablah sebagai masukan yang bisa langsung diketik ke terminal itu (isi \`reply\`).`]
+    }, deps.decideDeps);
+    if (!row || row.status !== "berlaku") {
+      skip("lead tak menghasilkan keputusan yang berlaku");
+      continue;
+    }
+    const reply = takeReply(row.id) || row.answer;
+    const sent = await deps.send(s.id, reply);
+    if (!sent) {
+      skip("gagal mengetik ke pane");
+      continue;
+    }
+    answers.set(s.id, (answers.get(s.id) ?? 0) + 1);
+    out3.answered.push(s.id);
+  }
+  return out3;
+}
+function sweep(liveIds) {
+  const live = new Set(liveIds);
+  for (const id of [...answers.keys()]) if (!live.has(id)) answers.delete(id);
+  for (const id of [...capped]) if (!live.has(id)) capped.delete(id);
+}
+
+// src/services/lead/pulse.ts
+init_db();
+init_pty();
+init_session_phases();
+var moduleOf = (p) => p.split("/").slice(0, 2).join("/");
+function findCollisions(areas) {
+  const out3 = [];
+  for (let i = 0; i < areas.length; i++) {
+    for (let j = i + 1; j < areas.length; j++) {
+      const a = areas[i], b = areas[j];
+      if (a.projectId !== b.projectId) continue;
+      const bp = new Set(b.paths);
+      const shared = a.paths.filter((p) => bp.has(p));
+      const bm = new Set(b.paths.map(moduleOf));
+      const nearby = [...new Set(a.paths.map(moduleOf))].filter((m) => bm.has(m) && !shared.some((s) => moduleOf(s) === m));
+      if (shared.length || nearby.length) out3.push({ a, b, shared, nearby });
+    }
+  }
+  return out3;
+}
+var prodPulseDeps = {
+  sessions: () => {
+    try {
+      return listSessions();
+    } catch {
+      return [];
+    }
+  },
+  areas: async (s) => {
+    const repoDir = await resolveRepoDir(s.projectId);
+    if (!repoDir) return [];
+    const spec = await prisma.spec.findUnique({ where: { id: s.specId }, select: { baseSha: true, branchFrom: true } });
+    if (!spec) return [];
+    try {
+      const r = await specReview(repoDir, s.specId, spec.baseSha, spec.branchFrom);
+      return r.changed.map((c) => c.path);
+    } catch {
+      return [];
+    }
+  },
+  planDone: planComplete,
+  decide,
+  decideDeps: prodDecideDeps,
+  apply: applyAction,
+  enqueue,
+  notify: recordLeadDecision,
+  optIn: leadProjects,
+  cfg: getLead
+};
+var lastReadySig = /* @__PURE__ */ new Map();
+async function pulse(deps = prodPulseDeps) {
+  const res = { ordered: 0, collisions: 0, quality: 0 };
+  const cfg = await deps.cfg();
+  if (!cfg.enabled || cfg.paused) return res;
+  const optIn = (await deps.optIn()).filter((p) => leadActive(cfg, p));
+  if (!optIn.length) return res;
+  try {
+    res.quality = await followUpFinished(cfg, optIn, deps);
+  } catch {
+  }
+  try {
+    res.collisions = await detectCollisions(optIn, deps);
+  } catch {
+  }
+  try {
+    res.ordered = await orderReadyWork(optIn, deps);
+  } catch {
+  }
+  return res;
+}
+async function followUpFinished(cfg, optIn, deps) {
+  let n = 0;
+  const opt = new Set(optIn);
+  for (const s of deps.sessions()) {
+    if (!s.exited || !s.specId || !opt.has(s.projectId)) continue;
+    const bad = (s.exitCode ?? 0) !== 0;
+    const unfinished = !deps.planDone(s.cwd, s.specId);
+    if (!bad && !unfinished) continue;
+    const seen = await prisma.leadDecision.findFirst({ where: { sessionId: s.id, kind: "quality", gate: "pulse" } });
+    if (seen) continue;
+    const why = [
+      bad ? `berakhir dengan kode keluar ${s.exitCode}` : null,
+      unfinished ? "plan-nya masih menyisakan kotak `- [ ]`" : null
+    ].filter(Boolean).join(" dan ");
+    const row = await deps.decide({
+      projectId: s.projectId,
+      specId: s.specId,
+      sessionId: s.id,
+      gate: "pulse",
+      kind: "quality",
+      question: `Sesi ${s.id} untuk backlog ${s.specId} ${why}. Tindak lanjutnya apa: lanjutkan pekerjaan yang terputus, ulangi dari awal, atau hentikan?`,
+      options: [
+        "resume-session \u2014 lanjutkan dari keadaan worktree sekarang (ADR-0084)",
+        "restart-session \u2014 ulangi dari awal",
+        "none \u2014 terima apa adanya, sertakan alasannya"
+      ],
+      notes: [`Worktree sesi: ${s.cwd}`]
+    }, deps.decideDeps);
+    if (!row) continue;
+    n++;
+    if (row.status === "berlaku" && row.action !== "none") {
+      try {
+        await deps.apply(row);
+      } catch {
+      }
+    }
+  }
+  return n;
+}
+async function detectCollisions(optIn, deps) {
+  const opt = new Set(optIn);
+  const live = deps.sessions().filter((s) => !s.exited && s.specId && opt.has(s.projectId));
+  if (live.length < 2) return 0;
+  const areas = [];
+  for (const s of live) {
+    const paths2 = await deps.areas({ id: s.id, projectId: s.projectId, specId: s.specId });
+    if (paths2.length) areas.push({ specId: s.specId, sessionId: s.id, projectId: s.projectId, paths: paths2 });
+  }
+  let n = 0;
+  for (const c of findCollisions(areas)) {
+    const key = [c.a.sessionId, c.b.sessionId].sort().join("|");
+    const seen = await prisma.leadDecision.findFirst({
+      where: { kind: "collision", gate: "pulse", question: { contains: key } }
+    });
+    if (seen) continue;
+    const row = await deps.decide({
+      projectId: c.a.projectId,
+      specId: c.a.specId,
+      sessionId: c.a.sessionId,
+      gate: "pulse",
+      kind: "collision",
+      question: `Dua pekerjaan menyentuh area yang sama [${key}]: ${c.a.specId} dan ${c.b.specId}. Tunda salah satu, gabungkan, atau biarkan?`,
+      options: [
+        `hold-work \u2014 tunda salah satu sampai yang lain terintegrasi`,
+        `none \u2014 biarkan berjalan, sertakan alasan kenapa tabrakan ini aman`
+      ],
+      notes: [
+        c.shared.length ? `Berkas yang sama: ${c.shared.slice(0, 20).join(", ")}` : "",
+        c.nearby.length ? `Modul yang sama: ${c.nearby.slice(0, 20).join(", ")}` : ""
+      ].filter(Boolean)
+    }, deps.decideDeps);
+    if (row) n++;
+  }
+  return n;
+}
+async function orderReadyWork(optIn, deps) {
+  let total = 0;
+  for (const projectId of optIn) total += await orderProject(projectId, deps);
+  return total;
+}
+async function orderProject(projectId, deps) {
+  const ready = await prisma.spec.findMany({
+    where: { baseSha: null, projectId },
+    select: { id: true, projectId: true, title: true, priority: true, objective: true },
+    orderBy: { id: "asc" }
+  });
+  if (ready.length < 2) return 0;
+  const sig = ready.map((r) => r.id).join(",");
+  if (sig === lastReadySig.get(projectId)) return 0;
+  lastReadySig.set(projectId, sig);
+  const row = await deps.decide({
+    projectId,
+    gate: "pulse",
+    kind: "order",
+    question: `Ada ${ready.length} backlog siap dikerjakan. Urutkan mana yang lebih dulu berdasarkan isi pekerjaannya, lalu tuliskan urutan id-nya (dipisah koma) di \`decision\`.`,
+    options: ready.map((r) => `${r.id} \xB7 [${r.priority}] ${r.title}`),
+    notes: ready.map((r) => `${r.id}: ${r.objective.slice(0, 200)}`)
+  }, deps.decideDeps);
+  if (!row || row.status !== "berlaku") return 0;
+  const byId2 = new Map(ready.map((r) => [r.id.toLowerCase(), r]));
+  const named = [];
+  for (const tok of row.answer.split(/[,\s]+/).map((t) => t.trim().toLowerCase()).filter(Boolean)) {
+    const hit = byId2.get(tok);
+    if (hit && !named.includes(hit)) named.push(hit);
+  }
+  const ordered = [...named, ...ready.filter((r) => !named.includes(r))];
+  for (const r of ordered) {
+    await deps.enqueue({ specId: r.id, projectId: r.projectId, source: "lead", priority: r.priority });
+  }
+  await deps.notify(row.id, `Lead menata ${ordered.length} backlog siap kerja`, projectId, null, null);
+  return ordered.length;
+}
+
+// src/services/lead/engine.ts
+var TICK_MS = 5e3;
+var lastPulseAt = 0;
+var busy2 = false;
+var timer3;
+function lastPulse() {
+  return lastPulseAt;
+}
+async function tick2(now, deps = {}) {
+  if (busy2) return;
+  busy2 = true;
+  try {
+    const cfg = await getLead();
+    if (!cfg.enabled) return;
+    try {
+      await scanAndAnswer(deps.detect ?? prodDetectDeps);
+    } catch (e) {
+      console.error("lead detect:", e);
+    }
+    if (cfg.paused) return;
+    if (now - lastPulseAt < cfg.everyMin * 6e4) return;
+    lastPulseAt = now;
+    try {
+      await pulse(deps.pulse ?? prodPulseDeps);
+    } catch (e) {
+      console.error("lead pulse:", e);
+    }
+  } catch (e) {
+    console.error("lead tick:", e);
+  } finally {
+    busy2 = false;
+  }
+}
+function startLead(deps = {}) {
+  if (timer3) return;
+  timer3 = setInterval(() => void tick2(Date.now(), deps), TICK_MS);
+  timer3.unref();
+  void tick2(Date.now(), deps);
+}
+
+// src/routes/lead.ts
+async function lead_default(app2) {
+  app2.get("/lead/config", async () => getLead());
+  app2.put("/lead/config", async (req, reply) => {
+    const parsed = zLead.safeParse(req.body);
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    return setLead(parsed.data);
+  });
+  app2.get("/lead/status", async () => {
+    const cfg = await getLead();
+    const projects = await prisma.project.findMany({
+      where: { leadOptIn: true },
+      select: { id: true, name: true },
+      orderBy: { id: "asc" }
+    });
+    const since = new Date(Date.now() - 24 * 60 * 60 * 1e3);
+    let live = [];
+    try {
+      live = listSessions().filter((s) => !s.exited);
+    } catch {
+    }
+    let waiting = [];
+    try {
+      waiting = liveDecisions().filter((d) => markerFilled(d.decisionFile)).map((d) => d.id);
+    } catch {
+    }
+    const rows = await Promise.all(projects.map(async (p) => ({
+      projectId: p.id,
+      name: p.name,
+      optIn: true,
+      paused: !leadActive(cfg, p.id),
+      decisions24h: await prisma.leadDecision.count({ where: { projectId: p.id, createdAt: { gte: since } } }),
+      openSessions: live.filter((s) => s.projectId === p.id).length
+    })));
+    const last = lastPulse();
+    return {
+      config: cfg,
+      projects: rows,
+      queue: (await listQueue()).map((q) => ({
+        id: q.id,
+        specId: q.specId,
+        projectId: q.projectId,
+        source: q.source,
+        priority: q.priority,
+        status: q.status,
+        sessionId: q.sessionId,
+        note: q.note,
+        enqueuedAt: q.enqueuedAt.toISOString(),
+        launchedAt: q.launchedAt ? q.launchedAt.toISOString() : null
+      })),
+      deciding: decidingIds(),
+      waiting,
+      lastPulseAt: last ? new Date(last).toISOString() : null
+    };
+  });
+  app2.get("/lead/decisions", async (req) => {
+    const q = req.query;
+    const rows = await listDecisions({
+      projectId: q.projectId,
+      specId: q.specId,
+      sessionId: q.sessionId,
+      status: q.status,
+      take: q.take ? Number(q.take) : void 0,
+      skip: q.skip ? Number(q.skip) : void 0
+    });
+    return { items: rows.map(toDecisionView) };
+  });
+  app2.post("/lead/decisions", async (req, reply) => {
+    const parsed = zLeadAsk.safeParse(req.body);
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    const ask = parsed.data;
+    const project = await prisma.project.findUnique({ where: { id: ask.projectId }, select: { leadOptIn: true } });
+    if (!project) return reply.code(404).send({ error: "project not found" });
+    const cfg = await getLead();
+    if (!project.leadOptIn || !leadActive(cfg, ask.projectId))
+      return reply.code(409).send({ error: "lead tidak aktif untuk project ini" });
+    const row = await decide({
+      projectId: ask.projectId,
+      specId: ask.specId ?? null,
+      sessionId: ask.sessionId ?? null,
+      gate: "contract",
+      kind: "answer",
+      question: ask.question,
+      options: ask.options,
+      notes: ask.context ? [ask.context] : void 0
+    });
+    if (!row) return reply.code(409).send({ error: "lead tidak aktif untuk project ini" });
+    takeReply(row.id);
+    if (row.status === "gagal") return reply.code(504).send({ error: row.reason, id: row.id });
+    if (row.action !== "none") {
+      try {
+        await applyAction(row);
+      } catch {
+      }
+    }
+    const answer = {
+      id: row.id,
+      decision: row.answer,
+      reason: row.reason,
+      refs: Array.isArray(row.refs) ? row.refs.map(String) : [],
+      confidence: row.confidence,
+      action: row.action
+    };
+    return reply.code(201).send(answer);
+  });
+  app2.post("/lead/decisions/:id/override", async (req, reply) => {
+    const { id } = req.params;
+    const parsed = zLeadOverride.safeParse(req.body);
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    const r = await overrideDecision(id, parsed.data.answer, parsed.data.reason);
+    if (!r) return reply.code(409).send({ error: "keputusan tak ada atau sudah tak berlaku" });
+    let delivered = false;
+    if (r.next.sessionId) {
+      resetSession(r.next.sessionId);
+      delivered = await sendToPane(r.next.sessionId, parsed.data.answer).catch(() => false);
+    }
+    return { old: toDecisionView(r.old), next: toDecisionView(r.next), delivered };
+  });
+  app2.post("/lead/decisions/:id/cancel", async (req, reply) => {
+    const { id } = req.params;
+    const row = await cancelDecision(id);
+    if (!row) return reply.code(409).send({ error: "keputusan tak ada atau sudah tak berlaku" });
+    if (row.sessionId) resetSession(row.sessionId);
+    return toDecisionView(row);
+  });
+}
+
 // src/app.ts
 var import_multipart = __toESM(require_multipart2(), 1);
 
@@ -23197,8 +24631,10 @@ function capabilityForRoute(method, path) {
   const seg = path.replace(/^\/api\/?/, "").replace(/\/+$/, "").split("/").filter(Boolean);
   const top = seg[0] ?? "";
   if (top === "auth" || top === "agent-tokens" || top === "device-tokens" || top === "sync") return "COOKIE_ONLY";
-  if (top === "limits" || top === "update" || top === "events" || top === "fs" || top === "health") return "GLOBAL_READ";
+  if (top === "limits" || top === "update" || top === "events" || top === "fs" || top === "health")
+    return read ? "GLOBAL_READ" : "COOKIE_ONLY";
   if (top === "scheduler") return rw("settings");
+  if (top === "lead") return rw("lead");
   if (top === "settings" || top === "config") return rw("settings");
   if (top === "specs") return rw("backlog");
   if (top === "notifications") return rw("notifications");
@@ -23309,9 +24745,10 @@ function buildApp({ requireAuth = true } = {}) {
     await api.register(scheduler_default);
     await api.register(audit_default);
     await api.register(codex);
+    await api.register(lead_default);
   }, { prefix: "/api" });
   if (process.env.NODE_ENV === "production") {
-    const dist = pickWebDir(dirname12(fileURLToPath4(import.meta.url)), process.env, existsSync10);
+    const dist = pickWebDir(dirname12(fileURLToPath4(import.meta.url)), process.env, existsSync11);
     if (dist) {
       app2.register(fastifyStatic, { root: dist });
       app2.setNotFoundHandler((req, reply) => req.url.startsWith("/api") ? reply.code(404).send({ error: "not found" }) : reply.sendFile("index.html"));
@@ -23458,7 +24895,7 @@ var prodEnd = {
   reconcile: () => reconcile(reconcileProdDeps),
   scanDecisions: () => scanDecisions()
 };
-async function tick2(now, deps, end2 = prodEnd) {
+async function tick3(now, deps, end2 = prodEnd) {
   const cfg = await getScheduler();
   if (!cfg.enabled) return;
   for (const src of listSources()) {
@@ -23499,13 +24936,13 @@ var prodDeps = {
     return r.id;
   }
 };
-var TICK_MS = 1e4;
-var timer3;
+var TICK_MS2 = 1e4;
+var timer4;
 function startScheduler(deps = prodDeps) {
-  if (timer3) return;
-  timer3 = setInterval(() => void tick2(Date.now(), deps), TICK_MS);
-  timer3.unref();
-  void tick2(Date.now(), deps);
+  if (timer4) return;
+  timer4 = setInterval(() => void tick3(Date.now(), deps), TICK_MS2);
+  timer4.unref();
+  void tick3(Date.now(), deps);
 }
 
 // src/services/scheduler/sources/backlog.ts
@@ -23616,6 +25053,7 @@ app.listen({ port, host }).then(() => {
   registerErrorsSource();
   registerTriaseSource();
   startScheduler();
+  startLead();
   void (async () => {
     const { loadConfig: loadConfig2 } = await Promise.resolve().then(() => (init_config2(), config_exports));
     const { applyConfigOnBoot: applyConfigOnBoot2 } = await Promise.resolve().then(() => (init_config_apply(), config_apply_exports));