hanoman 0.1.40 → 0.1.41

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.40",
-  "sha": "bf5c0ae",
-  "builtAt": "2026-08-15T13:13:30.676Z"
+  "version": "0.1.41",
+  "sha": "5ef26fe",
+  "builtAt": "2026-08-15T14:26:22.718Z"
 }

package/dist/cli.js

@@ -4411,7 +4411,7 @@ var init_auto_merge = __esm({
 });
 
 // ../shared/src/entities.ts
-var zProject, zBriefPayload, zQaPayload, zGoalPayload, zSpecBlocker, zSourceChange, zSpec, NOTIFY_SOUNDS, zCodex, CODEX_DEFAULTS, zSourceCommon, zScheduler, SCHEDULER_DEFAULTS, zGoal, GOAL_DEFAULTS, zConflict, CONFLICT_DEFAULTS, CHANGELOG_ENGINE_DEFAULTS, zLeadEngine, zLead, LEAD_DEFAULTS, zSetting, zNotification, zDocFile, zDeviceTokenView;
+var zProject, zBriefPayload, zQaPayload, zGoalPayload, zSpecBlocker, zSourceChange, zManualDone, zSpec, NOTIFY_SOUNDS, zCodex, CODEX_DEFAULTS, zSourceCommon, zScheduler, SCHEDULER_DEFAULTS, zGoal, GOAL_DEFAULTS, zConflict, CONFLICT_DEFAULTS, CHANGELOG_ENGINE_DEFAULTS, zLeadEngine, zLead, LEAD_DEFAULTS, zSetting, zNotification, zDocFile, zDeviceTokenView;
 var init_entities = __esm({
   "../shared/src/entities.ts"() {
     "use strict";
@@ -4469,6 +4469,11 @@ var init_entities = __esm({
       by: external_exports.string(),
       payload: external_exports.unknown().optional()
     });
+    zManualDone = external_exports.object({
+      at: external_exports.string(),
+      by: external_exports.string(),
+      reason: external_exports.string().optional()
+    });
     zSpec = external_exports.object({
       id: external_exports.string(),
       projectId: external_exports.string(),
@@ -4500,7 +4505,10 @@ var init_entities = __esm({
       // SPEC-546 · ADR-0109 · jejak konversi type. `.default([])` menjaga respons/klien versi lama
       // tetap parse; kolom DB-nya `Json?` sehingga baris yang belum pernah dikonversi mengirim
       // `null` — pemakai UI menulis `spec.sourceHistory ?? []`, cermin `blockedBy`.
-      sourceHistory: external_exports.array(zSourceChange).default([])
+      sourceHistory: external_exports.array(zSourceChange).default([]),
+      // SPEC-804 · ADR-0120 · terisi hanya bila item ditandai selesai manual; null = selesai lewat
+      // sesi atau belum selesai. `.nullable().default(null)` menjaga respons/klien versi lama parse.
+      manualDone: zManualDone.nullable().default(null)
     });
     NOTIFY_SOUNDS = [
       "off",
@@ -5008,7 +5016,7 @@ var init_cron_expr = __esm({
 });
 
 // ../shared/src/dto.ts
-var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zUpdateProject, zCreateSpec, zPatchSpec, zChangeSpecSource, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerQueueCounts, zSchedulerState, zLeadDecisionView, zLeadFlowView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, USER_ROLES, zUserRole, zLogin, zSignup, zSetup, zChangePassword, zCreateClientAccount, zUpdateClientAccount, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, UPDATE_RESTART_EXIT, zUpdateApplyBody, zTicketView, zTicketAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus, zCronExpr, zCreateCron, zPatchCron, zSchedulerCron, zSchedulerCronRun;
+var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zUpdateProject, zCreateSpec, zPatchSpec, zChangeSpecSource, zMarkSpecDone, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerQueueCounts, zSchedulerState, zLeadDecisionView, zLeadFlowView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, USER_ROLES, zUserRole, zLogin, zSignup, zSetup, zChangePassword, zCreateClientAccount, zUpdateClientAccount, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, UPDATE_RESTART_EXIT, zUpdateApplyBody, zTicketView, zTicketAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus, zCronExpr, zCreateCron, zPatchCron, zSchedulerCron, zSchedulerCronRun;
 var init_dto = __esm({
   "../shared/src/dto.ts"() {
     "use strict";
@@ -5115,6 +5123,10 @@ var init_dto = __esm({
       if (o.payload !== void 0 && !payloadMatchesSource(o.source, o.payload))
         ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["payload"], message: "bentuk payload tak cocok dengan source" });
     });
+    zMarkSpecDone = external_exports.object({
+      reason: external_exports.string().trim().max(280).optional(),
+      confirm: external_exports.boolean().optional()
+    });
     zIntegrate = external_exports.object({
       op: external_exports.enum(["merge", "rebase"]),
       target: external_exports.string().regex(/^(local|origin):.+/)
@@ -5586,6 +5598,8 @@ var init_api = __esm({
       specIntegrate: (id) => `${API}/specs/${id}/integrate`,
       // SPEC-546 · ADR-0109 · ubah type/source item in-place (operasi khusus, bukan field PATCH).
       specSource: (id) => `${API}/specs/${id}/source`,
+      // SPEC-804 · ADR-0120 · tandai item selesai manual (operasi khusus, bukan field PATCH).
+      specDone: (id) => `${API}/specs/${id}/done`,
       specReview: (id) => `${API}/specs/${id}/review`,
       specReviewFile: (id, path) => `${API}/specs/${id}/review/${path}`,
       settings: `${API}/settings`,
@@ -6152,6 +6166,9 @@ var init_webhook = __esm({
           "autoMerge",
           "createdAt",
           "startedAt",
+          // SPEC-804 · ADR-0120 · penerima harus bisa membedakan "selesai lewat sesi" dari "ditandai
+          // manusia" tanpa mendiff dua amplop. Peristiwanya tetap `spec.stage_changed`.
+          "manualDone",
           "updatedAt"
         ],
         projectIdField: "projectId",
@@ -6190,6 +6207,7 @@ var init_webhook = __esm({
           autoMerge: null,
           createdAt: "2026-08-01T02:10:00.000Z",
           startedAt: "2026-08-01T02:12:31.000Z",
+          manualDone: null,
           updatedAt: "2026-08-01T09:41:22.000Z"
         }
       },

package/dist/server.js

@@ -4557,7 +4557,7 @@ function cmpVersion(a, b) {
   }
   return 0;
 }
-var zProject, zBriefPayload, zQaPayload, zGoalPayload, zSpecBlocker, zSourceChange, zSpec, NOTIFY_SOUNDS, MODELS, EFFORTS, E_5_6, E_LUNA, E_BASE, CODEX_MODELS, RETIRED_CODEX_MODELS, zCodex, CODEX_DEFAULTS, zSourceCommon, zScheduler, SCHEDULER_DEFAULTS, zGoal, GOAL_DEFAULTS, zConflict, CONFLICT_DEFAULTS, CHANGELOG_ENGINE_DEFAULTS, zLeadEngine, zLead, LEAD_DEFAULTS, zSetting, zNotification, zDocFile, zDeviceTokenView;
+var zProject, zBriefPayload, zQaPayload, zGoalPayload, zSpecBlocker, zSourceChange, zManualDone, zSpec, NOTIFY_SOUNDS, MODELS, EFFORTS, E_5_6, E_LUNA, E_BASE, CODEX_MODELS, RETIRED_CODEX_MODELS, zCodex, CODEX_DEFAULTS, zSourceCommon, zScheduler, SCHEDULER_DEFAULTS, zGoal, GOAL_DEFAULTS, zConflict, CONFLICT_DEFAULTS, CHANGELOG_ENGINE_DEFAULTS, zLeadEngine, zLead, LEAD_DEFAULTS, zSetting, zNotification, zDocFile, zDeviceTokenView;
 var init_entities = __esm({
   "../shared/src/entities.ts"() {
     "use strict";
@@ -4615,6 +4615,11 @@ var init_entities = __esm({
       by: external_exports.string(),
       payload: external_exports.unknown().optional()
     });
+    zManualDone = external_exports.object({
+      at: external_exports.string(),
+      by: external_exports.string(),
+      reason: external_exports.string().optional()
+    });
     zSpec = external_exports.object({
       id: external_exports.string(),
       projectId: external_exports.string(),
@@ -4646,7 +4651,10 @@ var init_entities = __esm({
       // SPEC-546 · ADR-0109 · jejak konversi type. `.default([])` menjaga respons/klien versi lama
       // tetap parse; kolom DB-nya `Json?` sehingga baris yang belum pernah dikonversi mengirim
       // `null` — pemakai UI menulis `spec.sourceHistory ?? []`, cermin `blockedBy`.
-      sourceHistory: external_exports.array(zSourceChange).default([])
+      sourceHistory: external_exports.array(zSourceChange).default([]),
+      // SPEC-804 · ADR-0120 · terisi hanya bila item ditandai selesai manual; null = selesai lewat
+      // sesi atau belum selesai. `.nullable().default(null)` menjaga respons/klien versi lama parse.
+      manualDone: zManualDone.nullable().default(null)
     });
     NOTIFY_SOUNDS = [
       "off",
@@ -5450,7 +5458,7 @@ var init_cron_expr = __esm({
 function flowForSource(source) {
   return source === "qa" ? "qa" : source === "audit" ? "audit" : source === "goal" ? "goal" : "feature";
 }
-var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zUpdateProject, zCreateSpec, zPatchSpec, zChangeSpecSource, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerQueueCounts, zSchedulerState, zLeadDecisionView, zLeadFlowView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, USER_ROLES, zUserRole, zLogin, zSignup, zSetup, zChangePassword, zCreateClientAccount, zUpdateClientAccount, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, UPDATE_RESTART_EXIT, zUpdateApplyBody, zTicketView, zTicketAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus, zCronExpr, zCreateCron, zPatchCron, zSchedulerCron, zSchedulerCronRun;
+var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zUpdateProject, zCreateSpec, zPatchSpec, zChangeSpecSource, zMarkSpecDone, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerQueueCounts, zSchedulerState, zLeadDecisionView, zLeadFlowView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, USER_ROLES, zUserRole, zLogin, zSignup, zSetup, zChangePassword, zCreateClientAccount, zUpdateClientAccount, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, UPDATE_RESTART_EXIT, zUpdateApplyBody, zTicketView, zTicketAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus, zCronExpr, zCreateCron, zPatchCron, zSchedulerCron, zSchedulerCronRun;
 var init_dto = __esm({
   "../shared/src/dto.ts"() {
     "use strict";
@@ -5557,6 +5565,10 @@ var init_dto = __esm({
       if (o.payload !== void 0 && !payloadMatchesSource(o.source, o.payload))
         ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["payload"], message: "bentuk payload tak cocok dengan source" });
     });
+    zMarkSpecDone = external_exports.object({
+      reason: external_exports.string().trim().max(280).optional(),
+      confirm: external_exports.boolean().optional()
+    });
     zIntegrate = external_exports.object({
       op: external_exports.enum(["merge", "rebase"]),
       target: external_exports.string().regex(/^(local|origin):.+/)
@@ -6028,6 +6040,8 @@ var init_api = __esm({
       specIntegrate: (id) => `${API}/specs/${id}/integrate`,
       // SPEC-546 · ADR-0109 · ubah type/source item in-place (operasi khusus, bukan field PATCH).
       specSource: (id) => `${API}/specs/${id}/source`,
+      // SPEC-804 · ADR-0120 · tandai item selesai manual (operasi khusus, bukan field PATCH).
+      specDone: (id) => `${API}/specs/${id}/done`,
       specReview: (id) => `${API}/specs/${id}/review`,
       specReviewFile: (id, path2) => `${API}/specs/${id}/review/${path2}`,
       settings: `${API}/settings`,
@@ -6749,6 +6763,9 @@ var init_webhook = __esm({
           "autoMerge",
           "createdAt",
           "startedAt",
+          // SPEC-804 · ADR-0120 · penerima harus bisa membedakan "selesai lewat sesi" dari "ditandai
+          // manusia" tanpa mendiff dua amplop. Peristiwanya tetap `spec.stage_changed`.
+          "manualDone",
           "updatedAt"
         ],
         projectIdField: "projectId",
@@ -6787,6 +6804,7 @@ var init_webhook = __esm({
           autoMerge: null,
           createdAt: "2026-08-01T02:10:00.000Z",
           startedAt: "2026-08-01T02:12:31.000Z",
+          manualDone: null,
           updatedAt: "2026-08-01T09:41:22.000Z"
         }
       },
@@ -9738,8 +9756,8 @@ function assertRuntimeBoundary(env, runtime) {
   if (runtime.uid === 0) throw new Error("production Hanoman harus berjalan sebagai user non-root");
   if (env.HANOMAN_SESSION_SANDBOX !== "podman")
     throw new Error("HANOMAN_SESSION_SANDBOX=podman wajib di production");
-  if (!env.HANOMAN_PUBLIC_ORIGINS || !env.HANOMAN_CONTROL_ORIGINS)
-    throw new Error("public/control origin wajib dipisahkan di production");
+  if (!env.HANOMAN_CONTROL_ORIGINS || !env.HANOMAN_PUBLIC_ORIGINS && !env.HANOMAN_SINGLE_ORIGIN)
+    throw new Error("public/control origin wajib dipisahkan di production (HANOMAN_SINGLE_ORIGIN=1 untuk sadar memilih satu origin)");
   if (!env.HANOMAN_TRUST_PROXY) throw new Error("trusted proxy hop/CIDR wajib di production");
   if (runtime.host !== "127.0.0.1" && runtime.host !== "::1" && runtime.host !== "localhost")
     throw new Error("origin Hanoman harus bind loopback; buka hanya reverse proxy");
@@ -10531,6 +10549,7 @@ __export(sync_exports, {
   __DATE_FIELDS: () => __DATE_FIELDS,
   __FIELDS: () => __FIELDS,
   __FIELDS_FOR_TEST: () => __FIELDS_FOR_TEST,
+  __JSON_FIELDS: () => __JSON_FIELDS,
   applyPush: () => applyPush,
   backfillFeed: () => backfillFeed,
   consumeTombstoneOnRecreate: () => consumeTombstoneOnRecreate,
@@ -10774,7 +10793,7 @@ async function upsertLocal(entity, id, version2, data) {
 function setAcceptedHook(hook) {
   onAccepted = hook;
 }
-var SYNCED, DELEGATE, FIELDS, DATE_FIELDS, PARENTS, __FIELDS, __DATE_FIELDS, NUMBER_FIELDS, BOOLEAN_FIELDS, JSON_FIELDS, onAccepted, __FIELDS_FOR_TEST;
+var SYNCED, DELEGATE, FIELDS, DATE_FIELDS, PARENTS, __FIELDS, __DATE_FIELDS, NUMBER_FIELDS, BOOLEAN_FIELDS, JSON_FIELDS, __JSON_FIELDS, onAccepted, __FIELDS_FOR_TEST;
 var init_sync = __esm({
   "src/services/sync.ts"() {
     "use strict";
@@ -10806,7 +10825,10 @@ var init_sync = __esm({
       // TETAP berhasil, jadi kolom yang terlewat di sini mendarat sebagai null palsu di tiap client
       // tanpa satu pun error (kelas gagal-senyap ADR-0090/0093/0094/0105). BUKAN DATE_FIELDS —
       // `at` hidup di dalam JSON-nya, kolomnya sendiri bukan DateTime.
-      spec: ["projectId", "title", "source", "stage", "priority", "author", "objective", "payload", "branchFrom", "baseSha", "headSha", "dependsOn", "sourceHistory", "createdAt", "startedAt", "doneAt", "updatedAt"],
+      // SPEC-804 · ADR-0120 · manualDone ikut menyeberang: "item ini ditandai selesai manusia" adalah
+      // bagian keadaan yang harus dilihat sama oleh semua mesin — di antaranya gerbang auto-merge.
+      // BUKAN DATE_FIELDS, alasan yang sama dengan sourceHistory.
+      spec: ["projectId", "title", "source", "stage", "priority", "author", "objective", "payload", "branchFrom", "baseSha", "headSha", "dependsOn", "sourceHistory", "manualDone", "createdAt", "startedAt", "doneAt", "updatedAt"],
       vps: ["name", "host", "port", "user", "health", "audit", "hardened", "lastSeenAt", "lastAuditAt", "updatedAt"],
       sessionResult: ["projectId", "specId", "oldStage", "newStage", "commitSha", "branch", "prUrl", "status", "deviceId", "author", "createdAt", "updatedAt"],
       // SPEC-268 · ADR-0066 · metadata tiket (lampiran biner tak disync). accessKeyHash wajib
@@ -10874,12 +10896,14 @@ var init_sync = __esm({
       "spec:payload",
       "spec:dependsOn",
       "spec:sourceHistory",
+      "spec:manualDone",
       "vps:health",
       "vps:audit",
       "customAgent:tools",
       "customAgent:mentions",
       "githubIssue:labels"
     ]);
+    __JSON_FIELDS = JSON_FIELDS;
     __FIELDS_FOR_TEST = FIELDS;
   }
 });
@@ -25773,6 +25797,65 @@ function appendSourceHistory(current, entry) {
 
 // src/routes/specs.ts
 init_notifications();
+
+// src/services/spec-complete.ts
+init_db();
+init_notifications();
+
+// src/services/session-result.ts
+init_db();
+import { randomUUID as randomUUID3 } from "node:crypto";
+var WHITELIST = [
+  "projectId",
+  "specId",
+  "oldStage",
+  "newStage",
+  "commitSha",
+  "branch",
+  "prUrl",
+  "status",
+  "deviceId",
+  "author"
+];
+async function recordSessionResult(input) {
+  const id = randomUUID3();
+  const data = { id };
+  for (const f of WHITELIST) if (input[f] !== void 0 && input[f] !== null) data[f] = input[f];
+  if (data.status === void 0) data.status = "done";
+  if (data.projectId === void 0) throw new Error("session result butuh projectId");
+  await prisma.sessionResult.create({ data });
+  await notifySynced("sessionResult", id);
+  return { id };
+}
+
+// src/services/spec-complete.ts
+async function completeSpecManually(spec, input) {
+  const at = input.at ?? /* @__PURE__ */ new Date();
+  const manualDone = {
+    at: at.toISOString(),
+    by: input.by,
+    ...input.reason ? { reason: input.reason } : {}
+  };
+  const { count } = await prisma.spec.updateMany({
+    where: { id: spec.id, stage: { not: "done" } },
+    data: { stage: "done", manualDone }
+  });
+  if (count === 0) return { ok: false };
+  await recordCompletion(spec.id, spec.title, spec.projectId);
+  await recordSessionResult({
+    projectId: spec.projectId,
+    specId: spec.id,
+    oldStage: spec.stage,
+    newStage: "done",
+    status: "done",
+    author: input.by
+  }).catch(() => {
+  });
+  await notifySynced("spec", spec.id);
+  return { ok: true, spec: await prisma.spec.findUnique({ where: { id: spec.id } }) };
+}
+
+// src/routes/specs.ts
 init_stage_machine();
 
 // src/services/stage-artifacts.ts
@@ -28693,6 +28776,23 @@ ${item.context}` : item.context;
     await notifySynced("spec", id);
     return updated;
   });
+  app2.post("/specs/:id/done", async (req, reply) => {
+    const { id } = req.params;
+    const parsed = zMarkSpecDone.safeParse(req.body ?? {});
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    const spec = await prisma.spec.findUnique({ where: { id } });
+    if (!spec) return reply.code(404).send({ error: "not found" });
+    if (spec.stage === "done") return reply.code(409).send({ error: "backlog item sudah selesai" });
+    const live = listSessions().find((s2) => s2.specId === id && !s2.exited);
+    if (live && parsed.data.confirm !== true)
+      return reply.code(409).send({ error: "confirm-required", session: { id: live.id, agent: live.agent } });
+    const res = await completeSpecManually(spec, {
+      by: req.user?.email ?? "system",
+      reason: parsed.data.reason || void 0
+    });
+    if (!res.ok) return reply.code(409).send({ error: "backlog item sudah selesai" });
+    return res.spec;
+  });
   app2.get("/specs/:id/docs", async (req) => ({ files: await listSpecDocs(req.params.id) }));
   app2.get("/specs/:id/docs/*", async (req, reply) => {
     const { id } = req.params;
@@ -30520,32 +30620,6 @@ function startWorktreeReaper(deps = prodReaperDeps) {
   timer.unref();
 }
 
-// src/services/session-result.ts
-init_db();
-import { randomUUID as randomUUID3 } from "node:crypto";
-var WHITELIST = [
-  "projectId",
-  "specId",
-  "oldStage",
-  "newStage",
-  "commitSha",
-  "branch",
-  "prUrl",
-  "status",
-  "deviceId",
-  "author"
-];
-async function recordSessionResult(input) {
-  const id = randomUUID3();
-  const data = { id };
-  for (const f of WHITELIST) if (input[f] !== void 0 && input[f] !== null) data[f] = input[f];
-  if (data.status === void 0) data.status = "done";
-  if (data.projectId === void 0) throw new Error("session result butuh projectId");
-  await prisma.sessionResult.create({ data });
-  await notifySynced("sessionResult", id);
-  return { id };
-}
-
 // src/routes/terminal.ts
 init_notifications();
 init_stage_machine();
@@ -40487,9 +40561,9 @@ async function help_default(app2) {
     return reply.code(201).send({ number: ticket.number, key, statusPath });
   });
   app2.get("/help/:slug/tickets/:key", async (req, reply) => {
-    const { slug, key } = req.params;
+    const { key } = req.params;
     const t = await prisma.ticket.findFirst({
-      where: { projectId: slug, OR: [{ accessKeyHash: hashAccessKey(key) }, { shareToken: key }] }
+      where: { OR: [{ accessKeyHash: hashAccessKey(key) }, { shareToken: key }] }
     });
     if (!t) return reply.code(404).send({ error: "not found" });
     let stage = null;
@@ -40594,7 +40668,7 @@ var view6 = (t) => ({
   attachmentCount: t._count?.attachments ?? 0,
   createdAt: t.createdAt.toISOString()
 });
-async function tickets_default(app2) {
+async function tickets_default(app2, opts = {}) {
   app2.get("/tickets", async (req) => {
     const { project, status, q, page, limit } = req.query;
     const where = {};
@@ -40625,7 +40699,7 @@ async function tickets_default(app2) {
       shareToken = generateShareToken();
       await prisma.ticket.update({ where: { id }, data: { shareToken } });
     }
-    const base2 = `${req.protocol}://${req.headers.host ?? "localhost"}`;
+    const base2 = opts.publicBase ?? `${req.protocol}://${req.headers.host ?? "localhost"}`;
     const publicStatusUrl = `${base2}/help/${encodeURIComponent(t.projectId)}/status/${shareToken}`;
     return {
       ...view6(t),
@@ -45143,22 +45217,31 @@ init_runtime();
 
 // src/services/ingress-policy.ts
 function origins(value, key) {
-  const out3 = /* @__PURE__ */ new Set();
+  const out3 = [];
   for (const raw2 of value?.split(",") ?? []) {
     const input = raw2.trim();
     if (!input) continue;
     const parsed = new URL(input);
     if (!/^https?:$/.test(parsed.protocol) || parsed.username || parsed.password || parsed.pathname !== "/")
       throw new Error(`${key} harus berisi exact http(s) origin`);
-    out3.add(parsed.host.toLowerCase());
+    out3.push({ host: parsed.host.toLowerCase(), base: `${parsed.protocol}//${parsed.host}` });
   }
   return out3;
 }
 function loadIngressPolicy(env) {
-  const publicHosts = origins(env.HANOMAN_PUBLIC_ORIGINS, "HANOMAN_PUBLIC_ORIGINS");
-  const controlHosts = origins(env.HANOMAN_CONTROL_ORIGINS, "HANOMAN_CONTROL_ORIGINS");
+  const pub = origins(env.HANOMAN_PUBLIC_ORIGINS, "HANOMAN_PUBLIC_ORIGINS");
+  const control = origins(env.HANOMAN_CONTROL_ORIGINS, "HANOMAN_CONTROL_ORIGINS");
+  const publicHosts = new Set(pub.map((o) => o.host));
+  const controlHosts = new Set(control.map((o) => o.host));
   for (const host2 of publicHosts) if (controlHosts.has(host2)) throw new Error("public dan control origin harus berbeda");
-  return { publicHosts, controlHosts, enforce: publicHosts.size > 0 || controlHosts.size > 0 };
+  return {
+    publicHosts,
+    controlHosts,
+    // SPEC-805 · origin publik pertama, lengkap dengan scheme-nya: satu-satunya basis sah untuk
+    // link status yang dibagikan operator, yang selalu lahir di request ber-host control.
+    publicBase: pub[0]?.base ?? null,
+    enforce: publicHosts.size > 0 || controlHosts.size > 0
+  };
 }
 function publicPath(method, path2) {
   if (method === "GET" && path2 === "/api/health") return true;
@@ -45170,7 +45253,8 @@ function classifyIngress(req, policy) {
   const host2 = req.host.trim().toLowerCase();
   const path2 = req.url.split("?")[0] ?? req.url;
   if (policy.publicHosts.has(host2)) return publicPath(req.method, path2) ? "public" : "denied";
-  if (policy.controlHosts.has(host2)) return publicPath(req.method, path2) && path2.startsWith("/api/help") ? "denied" : "control";
+  if (policy.controlHosts.has(host2))
+    return policy.publicBase && path2.startsWith("/api/help") ? "denied" : "control";
   return "denied";
 }
 function trustProxyFromEnv(env) {
@@ -45203,6 +45287,8 @@ function buildApp({ requireAuth = true, agentDocFile, env = process.env } = {})
   app2.addHook("onRequest", async (req, reply) => {
     const role = classifyIngress({ host: req.headers.host ?? "", method: req.method, url: req.url }, ingress);
     if (role === "denied") return reply.code(404).send({ error: "not found" });
+    if (role === "control" && ingress.publicBase && req.url.startsWith("/help/"))
+      return reply.redirect(`${ingress.publicBase}${req.url}`, 302);
   });
   app2.addContentTypeParser("application/json", { parseAs: "string" }, (_req, body, done) => {
     if (!body) return done(null, void 0);
@@ -45282,7 +45368,7 @@ function buildApp({ requireAuth = true, agentDocFile, env = process.env } = {})
     await api.register(session_history_default);
     await api.register(config_default);
     await api.register(help_default);
-    await api.register(tickets_default);
+    await api.register(tickets_default, { publicBase: ingress.publicBase });
     await api.register(scheduler_default);
     await api.register(codex);
     await api.register(methods);
@@ -45975,6 +46061,7 @@ async function sweepAutoMerge(deps = prodAutoMergeDeps, now = /* @__PURE__ */ ne
 async function settleOne(c, deps, now) {
   const spec = await prisma.spec.findUnique({ where: { id: c.specId } });
   if (!spec || spec.stage !== "done") return false;
+  if (spec.manualDone) return false;
   const project = await prisma.project.findUnique({ where: { id: spec.projectId } });
   if (!project) return false;
   const policy = resolveAutoMerge(

package/docs/agent-integration.md

@@ -168,6 +168,7 @@ dan tak memakai agent token.
 | `GET /api/specs` | `backlog:read` | backlog. Filter: `project`, `source`, `q`, `stage`, `priority`, `startable=true`, `dateField=created\|started` + `from`/`to` (`YYYY-MM-DD`, inklusif), `page`, `limit`. |
 | `POST /api/specs` | `backlog:write` | buat backlog item — bentuk payload di §7. |
 | `PATCH /api/specs/:id` | `backlog:write` | ubah item; konten hanya selagi belum dimulai. |
+| `POST /api/specs/:id/done` | `backlog:write` | tandai item **selesai** tanpa menjalankan sesi — untuk pekerjaan yang beres di luar hanoman. Body `{ reason?: string (≤280), confirm?: boolean }`, keduanya opsional; balasannya `Spec` yang sudah `stage:"done"`. Tak menjalankan maupun menghentikan sesi apa pun. |
 | `GET /api/specs/:id/docs` | `backlog:read` | dokumen yang ditulis sesi item itu. |
 | `GET /api/specs/:id/review` | `backlog:read` | diff hasil kerja sesi. |
 | `GET /api/projects/:id/docs` | `docs:read` | index Source of Truth project. |
@@ -271,7 +272,9 @@ capability-nya. Capability menjawab "boleh?", bukan "sebaiknya?".
 | `POST /api/lead/decisions` | putusannya bisa **menggerakkan sesi** (integrate ke main, menghentikan sesi) dan selalu melahirkan baris jejak permanen (ADR-0091/0098). |
 
 Perlakukan `POST /api/specs/:id/integrate`, `DELETE /api/specs/:id`, dan perubahan `stage` dengan
-disiplin yang sama: ketiganya mengubah sejarah git atau membuang pekerjaan.
+disiplin yang sama: ketiganya mengubah sejarah git atau membuang pekerjaan. `POST /api/specs/:id/done`
+tak menyentuh git, tetapi ia **menyatakan pekerjaan orang lain selesai** — pakai hanya bila kamu punya
+buktinya, dan tulis buktinya di `reason`.
 
 **Preseden yang mengikat:** MCP server resmi (`hanoman mcp`, §13) sengaja **tak punya tool** untuk
 satu pun dari yang di atas — batasnya ada di katalog tool, bukan di token. Token yang punya
@@ -286,6 +289,7 @@ memanggilnya; jangan lakukan tanpa manusia.
 | `q` mencari di `id`, `title`, dan `objective` saja — ia **tak menyentuh `payload`** | untuk mencari isi brief/QA, ambil itemnya lalu baca `payload` sendiri |
 | `id` dan `stage` yang kamu sertakan di `POST /api/specs` **dibuang diam-diam** — tak ada galat | `id` diterbitkan server (`SPEC-nnn` berikutnya), `stage` selalu mulai `brainstorming`. Untuk mengubah stage pakai `PATCH /api/specs/:id`, dan ia hanya boleh **mundur** (ADR-0027) |
 | **`GET /api/specs/:id` tidak ada** | `GET /api/specs?q=SPEC-489` lalu cocokkan `id` **persis** — `q` itu substring, jadi ia bisa mengembalikan lebih dari satu |
+| `POST /api/specs/:id/done` menjawab **409 `{"error":"confirm-required","session":{...}}`** — itu bukan penolakan, melainkan pemberitahuan bahwa masih ada **sesi hidup** untuk item itu | putuskan dulu apakah sesi itu memang sudah tak relevan; bila ya, kirim ulang dengan `{"confirm": true}`. Sesinya **tidak** ikut dihentikan — tutup sesinya sendiri bila perlu. 409 `{"error":"backlog item sudah selesai"}` berarti item itu memang sudah `done` |
 | daftar mengembalikan amplop `{ items, total, page, pageSize }` | jangan perlakukan responsnya sebagai array |
 | tanpa `limit`, daftar mengembalikan **seluruh** item dalam satu halaman | kirim `limit` untuk backlog besar |
 | **`GET /api/notifications` adalah pengecualiannya**: tanpa `limit` ia mengembalikan **50 teratas**, bukan seluruhnya — angka penuhnya ada di `total` | kirim `page`/`limit` bila kamu butuh riwayat lama; jangan simpulkan `items.length` = seluruh notifikasi |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hanoman",
-  "version": "0.1.40",
+  "version": "0.1.41",
   "description": "Orchestrator + dashboard workflow docs-driven untuk sesi Claude Code / Codex",
   "type": "module",
   "repository": {

package/prisma/migrations/20260815130000_spec_manual_done/migration.sql

@@ -0,0 +1,9 @@
+-- SPEC-804 · ADR-0120 · jejak penandaan selesai manual sebagai kolom.
+--
+-- Ditulis tangan (bukan `migrate dev`): worktree tetangga membuat `migrate dev` me-reset DB saat
+-- ada drift. ADITIF murni — satu kolom NULLABLE tanpa default, tak ada tabel diredefinisi.
+--
+-- TANPA backfill, sengaja: sebelum spec ini jalur "tandai selesai manual" memang tak ada, jadi
+-- tak ada stempel lama yang bisa dipulihkan. Item lama tetap NULL = "selesai lewat sesi / tak
+-- diketahui", dan itu jawaban yang jujur.
+ALTER TABLE "Spec" ADD COLUMN "manualDone" JSONB;

package/prisma/schema.prisma

@@ -63,6 +63,12 @@ model Spec {
   // site adalah kelas bug SPEC-431/448/475. Tulis-sekali: reopen lalu selesai lagi tak
   // memindahkannya, cermin `startedAt` = mulai pertama (ADR-0090).
   doneAt     DateTime?
+  // SPEC-804 · ADR-0120 · jejak penandaan selesai MANUAL: { at, by, reason? }. Satu kolom, bukan
+  // tiga skalar — ketiganya satu peristiwa, dan tiga kolom nullable bisa drift tanpa tipe yang
+  // memaksanya konsisten (kelas gagal-senyap ADR-0090/0093/0094/0105). null = item ini tak pernah
+  // ditandai manual. Ditimpa tiap penandaan berikutnya: ia menjelaskan keadaan yang BERLAKU;
+  // riwayat transisi stage tinggal di SessionResult (ADR-0047). Ikut FIELDS.spec sync.
+  manualDone Json?
   // SPEC-447 · ADR-0093 · id spec lain yang harus SELESAI & commit-nya sudah ada di branch basis
   // sebelum item ini boleh diluncurkan. Array JSON of string; null/[] = tak bergantung apa pun.
   // Sengaja kolom, bukan tabel join: SQLite melarang scalar list, `Json` sudah dipakai `payload`,