hanoman 0.1.5 → 0.1.6

package/dist/server.js

@@ -4184,7 +4184,7 @@ function cmpVersion(a, b) {
   }
   return 0;
 }
-var zProject, zBriefPayload, zQaPayload, zGoalPayload, zSpec, NOTIFY_SOUNDS, E_5_6, E_LUNA, E_BASE, CODEX_MODELS, RETIRED_CODEX_MODELS, zCodex, CODEX_DEFAULTS, zSourceCommon, zScheduler, SCHEDULER_DEFAULTS, zGoal, GOAL_DEFAULTS, zConflict, CONFLICT_DEFAULTS, zSetting, zNotification, zDocFile, zDeviceTokenView;
+var zProject, zBriefPayload, zQaPayload, zGoalPayload, zSpec, NOTIFY_SOUNDS, E_5_6, E_LUNA, E_BASE, CODEX_MODELS, RETIRED_CODEX_MODELS, zCodex, CODEX_DEFAULTS, zSourceCommon, zScheduler, SCHEDULER_DEFAULTS, zGoal, GOAL_DEFAULTS, zConflict, CONFLICT_DEFAULTS, zLeadEngine, zLead, LEAD_DEFAULTS, zSetting, zNotification, zDocFile, zDeviceTokenView;
 var init_entities = __esm({
   "../shared/src/entities.ts"() {
     "use strict";
@@ -4242,8 +4242,12 @@ var init_entities = __esm({
       // SPEC-407 · +goal
       branchFrom: external_exports.string().nullable(),
       // SPEC-143 · null = default project (main)
-      baseSha: external_exports.string().nullable()
+      baseSha: external_exports.string().nullable(),
       // SPEC-186 · null = belum pernah ada sesi (belum dimulai)
+      // SPEC-408 · ADR-0090 · stempel waktu backlog (ISO string di wire — kolom DateTime di DB).
+      // `startedAt` null = belum pernah dikerjakan; ia tak pernah ditulis ulang saat sesi dilanjutkan.
+      createdAt: external_exports.string(),
+      startedAt: external_exports.string().nullable()
     });
     NOTIFY_SOUNDS = [
       "off",
@@ -4310,6 +4314,31 @@ var init_entities = __esm({
       effort: external_exports.string().default("xhigh")
     });
     CONFLICT_DEFAULTS = zConflict.parse({});
+    zLeadEngine = external_exports.object({
+      enabled: external_exports.boolean().default(false),
+      agent: zAgent.default("claude"),
+      model: external_exports.string().default("claude-opus-5"),
+      effort: external_exports.string().default("xhigh")
+    });
+    zLead = external_exports.object({
+      enabled: external_exports.boolean().default(false),
+      // master switch (AC-30)
+      paused: external_exports.boolean().default(false),
+      // rem darurat global (AC-27)
+      pausedProjects: external_exports.array(external_exports.string()).default([]),
+      // rem per project (AC-15/US-4)
+      everyMin: external_exports.number().int().min(1).max(1440).default(5),
+      // denyut proaktif (OQ-2)
+      timeoutSec: external_exports.number().int().min(10).max(900).default(120),
+      // batas waktu satu putusan (AC-4/35)
+      // AC-11 / OQ-10 · berapa jawaban otomatis berturut-turut untuk SATU sesi sebelum lead berhenti.
+      maxAutoAnswers: external_exports.number().int().min(1).max(20).default(3),
+      // OQ-3 · syarat objektif sebelum lead boleh mengintegrasikan ke branch utama. Default MENYALA:
+      // risiko "kode masuk main tanpa mata manusia" diterima sadar, tapi syaratnya tetap terukur.
+      requireGreenBeforeIntegrate: external_exports.boolean().default(true),
+      engine: zLeadEngine.default({})
+    });
+    LEAD_DEFAULTS = zLead.parse({});
     zSetting = external_exports.object({
       model: external_exports.string().default("claude-opus-5"),
       effort: external_exports.string().default("xhigh"),
@@ -4336,13 +4365,17 @@ var init_entities = __esm({
       // SPEC-338 · ADR-0074 · model/effort codex
       verifyScope: zVerifyScope.default("changed"),
       // SPEC-376 · ADR-0080 · scope verifikasi sesi
-      conflict: zConflict.default(CONFLICT_DEFAULTS)
+      conflict: zConflict.default(CONFLICT_DEFAULTS),
       // SPEC-383 · ADR-0081 · default sesi konflik rebase/merge
+      lead: zLead.default(LEAD_DEFAULTS)
+      // SPEC-409 · ADR-0091 · hanoman-lead (default mati)
     });
     zNotification = external_exports.object({
       id: external_exports.string(),
-      type: external_exports.enum(["done", "decision", "error", "ticket", "fail"]).default("done"),
       // SPEC-249 · +error; SPEC-253 · +ticket; SPEC-298 · +fail (sesi scheduler gagal/limit)
+      // SPEC-409 · +lead (ADR-0091): keputusan berbobot / ragu / tindakan terkunci ditolak. MEMBERI
+      // TAHU, bukan meminta izin — tak ada pekerjaan yang menunggu notifikasi ini dibaca (AC-25).
+      type: external_exports.enum(["done", "decision", "error", "ticket", "fail", "lead"]).default("done"),
       specId: external_exports.string().nullable(),
       sessionId: external_exports.string().nullable(),
       title: external_exports.string(),
@@ -4397,7 +4430,13 @@ var init_agent = __esm({
       "support:read",
       "support:write",
       "notifications:read",
-      "notifications:write"
+      "notifications:write",
+      // SPEC-409 · ADR-0091 · minta putusan ke hanoman-lead + baca jejak keputusan. Domain TERSENDIRI,
+      // bukan menumpang prefix baca yang sudah ada: meminta putusan adalah operasi TULIS (ia melahirkan
+      // baris jejak & bisa menggerakkan sesi), dan SPEC-405 sudah membuktikan apa yang terjadi saat
+      // endpoint tulis menumpang prefix status yang dipetakan tanpa melihat method (AC-5).
+      "lead:read",
+      "lead:write"
     ];
     zCapability = external_exports.enum(CAPABILITY_IDS);
     zCapabilityInfo = external_exports.object({
@@ -4426,7 +4465,9 @@ var init_agent = __esm({
       { id: "support:read", domain: "support", access: "read", label: "Errors & Tiket \u2014 baca", desc: "Lihat error monitoring & tiket Help Center." },
       { id: "support:write", domain: "support", access: "write", label: "Errors & Tiket \u2014 tulis", desc: "Eskalasi error, ubah status, terima/tolak tiket." },
       { id: "notifications:read", domain: "notifications", access: "read", label: "Notifikasi \u2014 baca", desc: "Lihat notifikasi." },
-      { id: "notifications:write", domain: "notifications", access: "write", label: "Notifikasi \u2014 tulis", desc: "Tandai terbaca / bersihkan notifikasi." }
+      { id: "notifications:write", domain: "notifications", access: "write", label: "Notifikasi \u2014 tulis", desc: "Tandai terbaca / bersihkan notifikasi." },
+      { id: "lead:read", domain: "lead", access: "read", label: "Lead \u2014 baca", desc: "Baca jejak keputusan hanoman-lead & statusnya." },
+      { id: "lead:write", domain: "lead", access: "write", label: "Lead \u2014 tulis", desc: "Minta putusan ke hanoman-lead (keputusan bisa menggerakkan sesi).", risk: "exec" }
     ];
     zAgentTokenView = external_exports.object({
       id: external_exports.string(),
@@ -4451,16 +4492,103 @@ var init_agent = __esm({
   }
 });
 
+// ../shared/src/lead.ts
+function leadActionAllowed(action) {
+  return LEAD_ACTIONS.includes(action);
+}
+function leadRefusalReason(action) {
+  return LEAD_FORBIDDEN[action] ?? `tindakan "${action}" di luar permukaan tindakan lead`;
+}
+function isWeightyDecision(o) {
+  if (o.confidence === "ragu") return true;
+  if (o.kind === "collision" || o.kind === "refusal") return true;
+  return o.action === "integrate-main" || o.action === "run-migration" || o.action === "stop-session" || o.action === "restart-session";
+}
+var zLeadGate, zLeadKind, zLeadConfidence, zLeadStatus, LEAD_ACTIONS, zLeadAction, LEAD_FORBIDDEN, zLeadVerdict, zLeadAsk, zLeadOverride;
+var init_lead = __esm({
+  "../shared/src/lead.ts"() {
+    "use strict";
+    init_zod();
+    zLeadGate = external_exports.enum(["contract", "detected", "pulse"]);
+    zLeadKind = external_exports.enum(["answer", "order", "collision", "quality", "refusal"]);
+    zLeadConfidence = external_exports.enum(["tinggi", "sedang", "ragu"]);
+    zLeadStatus = external_exports.enum(["berlaku", "ditimpa", "dibatalkan", "gagal"]);
+    LEAD_ACTIONS = [
+      "none",
+      // keputusan murni jawaban; tak ada tindakan menyusul
+      "answer-session",
+      // ketik jawaban ke pane sesi (pintu deteksi otomatis)
+      "start-session",
+      // mulai sesi untuk sebuah backlog (lewat antrean scheduler)
+      "stop-session",
+      // hentikan sesi — worktree DIBIARKAN utuh (AC-32a)
+      "resume-session",
+      // lanjutkan sesi terputus (jalur ADR-0084)
+      "restart-session",
+      // ulangi pekerjaan dari awal
+      "order-queue",
+      // tata urutan antrean yang sudah ada (ADR-0072) — bukan antrean kedua
+      "hold-work",
+      // tunda satu pekerjaan karena tabrakan area kerja
+      "push-branch",
+      // dorong perubahan ke branch
+      "integrate-main",
+      // integrasikan ke branch utama (risiko yang diterima sadar, PRD §Risiko)
+      "run-migration"
+      // jalankan migration pada basis data LOKAL operator
+    ];
+    zLeadAction = external_exports.enum(LEAD_ACTIONS);
+    LEAD_FORBIDDEN = {
+      deploy: "deploy ke produksi",
+      "vps-exec": "menjalankan perintah di VPS",
+      "vps-console": "membuka konsol VPS",
+      "prod-data": "menyentuh data produksi",
+      "delete-project": "menghapus project",
+      "delete-spec": "menghapus backlog",
+      "delete-branch": "menghapus branch",
+      "delete-worktree": "menghapus worktree",
+      "delete-notification": "menghapus notifikasi",
+      "delete-decision": "menghapus jejak keputusan"
+    };
+    zLeadVerdict = external_exports.object({
+      decision: external_exports.string().min(1),
+      reason: external_exports.string().min(1),
+      refs: external_exports.array(external_exports.string()).default([]),
+      confidence: zLeadConfidence.default("sedang"),
+      // Sengaja `string`, BUKAN `zLeadAction`: tindakan di luar allowlist harus bisa MASUK supaya
+      // server menolaknya secara sadar — mencatat penolakan & menotifikasi operator (AC-33). Kalau
+      // enum yang menyaring di sini, permintaan "deploy ke produksi" hanya akan tampak sebagai
+      // keluaran rusak, dan justru peristiwa paling layak dilaporkan itulah yang hilang dari jejak.
+      action: external_exports.string().default("none"),
+      /** Teks yang benar-benar diketik ke pane sesi (pintu deteksi otomatis). */
+      reply: external_exports.string().default("")
+    });
+    zLeadAsk = external_exports.object({
+      projectId: external_exports.string().min(1),
+      specId: external_exports.string().nullish(),
+      sessionId: external_exports.string().nullish(),
+      question: external_exports.string().min(1).max(8e3),
+      options: external_exports.array(external_exports.string().max(2e3)).max(20).default([]),
+      context: external_exports.string().max(2e4).default("")
+    });
+    zLeadOverride = external_exports.object({
+      answer: external_exports.string().min(1).max(8e3),
+      reason: external_exports.string().max(8e3).default("")
+    });
+  }
+});
+
 // ../shared/src/dto.ts
 function flowForSource(source) {
   return source === "qa" ? "qa" : source === "audit" ? "audit" : source === "cross-audit" ? "cross-audit" : source === "goal" ? "goal" : "feature";
 }
-var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zCreateLink, zUpdateProject, zCreateSpec, zPatchSpec, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerState, zFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, zLogin, zSignup, zChangePassword, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, UPDATE_RESTART_EXIT, zUpdateApplyBody, zStackFrame, zSymbolicatedFrame, zSourceMapUpload, zIngestPayload, zErrorGroupView, zErrorEventView, zErrorGroupDetail, zIngestKeyView, zTicketView, zTicketAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus;
+var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zCreateLink, zUpdateProject, zCreateSpec, zPatchSpec, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerState, zLeadDecisionView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, zLogin, zSignup, zChangePassword, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, UPDATE_RESTART_EXIT, zUpdateApplyBody, zStackFrame, zSymbolicatedFrame, zSourceMapUpload, zIngestPayload, zErrorGroupView, zErrorEventView, zErrorGroupDetail, zIngestKeyView, zTicketView, zTicketAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus;
 var init_dto = __esm({
   "../shared/src/dto.ts"() {
     "use strict";
     init_zod();
     init_entities();
+    init_lead();
     init_enums();
     zIssueDeviceToken = external_exports.object({ name: external_exports.string().min(1) });
     zSessionResult = external_exports.object({
@@ -4516,8 +4644,10 @@ var init_dto = __esm({
       // SPEC-213 · set git remote resmi project
       repoDir: external_exports.string().nullable().optional(),
       // SPEC-217 · path default/server editable (null = kosongkan)
-      schedulerOptIn: external_exports.boolean().optional()
+      schedulerOptIn: external_exports.boolean().optional(),
       // SPEC-294 · opt-in scheduler otonom (lokal, tak disync)
+      leadOptIn: external_exports.boolean().optional()
+      // SPEC-409 · ADR-0091 · opt-in hanoman-lead (lokal, tak disync)
     });
     zCreateSpec = external_exports.object({
       project: external_exports.string(),
@@ -4565,7 +4695,9 @@ var init_dto = __esm({
       // SPEC-249 · hint prefix DSN (bukan hash/rahasia)
       helpEnabled: external_exports.boolean().default(false),
       // SPEC-253 · Help Center publik aktif
-      schedulerOptIn: external_exports.boolean().default(false)
+      schedulerOptIn: external_exports.boolean().default(false),
+      // SPEC-294 · opt-in scheduler otonom
+      leadOptIn: external_exports.boolean().default(false)
     });
     zSchedulerQueueItem = external_exports.object({
       id: external_exports.string(),
@@ -4605,6 +4737,50 @@ var init_dto = __esm({
       queue: external_exports.array(zSchedulerQueueItem),
       sessions: external_exports.array(zSchedulerSessionView)
     });
+    zLeadDecisionView = external_exports.object({
+      id: external_exports.string(),
+      projectId: external_exports.string(),
+      specId: external_exports.string().nullable(),
+      sessionId: external_exports.string().nullable(),
+      gate: zLeadGate,
+      kind: zLeadKind,
+      question: external_exports.string(),
+      answer: external_exports.string(),
+      reason: external_exports.string(),
+      refs: external_exports.array(external_exports.string()),
+      confidence: zLeadConfidence,
+      action: zLeadAction,
+      status: zLeadStatus,
+      weighty: external_exports.boolean(),
+      supersededById: external_exports.string().nullable(),
+      createdAt: external_exports.string()
+    });
+    zLeadAnswer = external_exports.object({
+      id: external_exports.string(),
+      decision: external_exports.string(),
+      reason: external_exports.string(),
+      refs: external_exports.array(external_exports.string()),
+      confidence: zLeadConfidence,
+      action: zLeadAction
+    });
+    zLeadProjectStatus = external_exports.object({
+      projectId: external_exports.string(),
+      name: external_exports.string(),
+      optIn: external_exports.boolean(),
+      paused: external_exports.boolean(),
+      decisions24h: external_exports.number(),
+      openSessions: external_exports.number()
+    });
+    zLeadStatusView = external_exports.object({
+      config: zLead,
+      projects: external_exports.array(zLeadProjectStatus),
+      queue: external_exports.array(zSchedulerQueueItem),
+      deciding: external_exports.array(external_exports.string()),
+      // id sesi yang sedang disusun keputusannya (AC-3)
+      waiting: external_exports.array(external_exports.string()),
+      // id sesi ber-marker keputusan terisi
+      lastPulseAt: external_exports.string().nullable()
+    });
     zFlow = external_exports.enum(["feature", "qa", "scaffold", "reverse", "prd", "audit", "breakdown", "cross-audit", "goal"]);
     zPrdBrief = external_exports.object({
       title: external_exports.string().min(1),
@@ -4995,6 +5171,12 @@ var init_api = __esm({
       // SPEC-299 · panel scheduler (daun #6) — konsumen read-only fondasi SPEC-294/ADR-0072.
       schedulerConfig: `${API}/scheduler/config`,
       schedulerState: `${API}/scheduler/state`,
+      // SPEC-409 · ADR-0091 · hanoman-lead. Semua HTTP (polling) — tak ada kanal WS baru (AC-26).
+      leadConfig: `${API}/lead/config`,
+      leadStatus: `${API}/lead/status`,
+      leadDecisions: `${API}/lead/decisions`,
+      leadDecisionOverride: (id) => `${API}/lead/decisions/${encodeURIComponent(id)}/override`,
+      leadDecisionCancel: (id) => `${API}/lead/decisions/${encodeURIComponent(id)}/cancel`,
       // SPEC-268 · ADR-0066 · pemicu sync manual (cookie-authed)
       syncNow: `${API}/sync/now`,
       // SPEC-270 · ADR-0067 · antrean konflik rekonsil (cookie-authed)
@@ -5328,6 +5510,7 @@ var init_src = __esm({
     init_enums();
     init_entities();
     init_agent();
+    init_lead();
     init_dto();
     init_api();
     init_coverage();
@@ -6520,6 +6703,9 @@ function createSession(projectId, cwd, opts = {}) {
     argv = [sq(agentBin(agent)), promptArg, flags].filter(Boolean).join(" ");
   }
   const envPairs = [];
+  if (!opts.command && agent === "claude") {
+    for (const [k, v] of Object.entries(rootBypassEnv())) envPairs.push(`${k}=${sq(v)}`);
+  }
   if (opts.phaseFile) {
     mkdirSync3(dirname4(opts.phaseFile), { recursive: true });
     envPairs.push(`HANOMAN_PHASE_FILE=${sq(opts.phaseFile)}`);
@@ -6610,6 +6796,29 @@ function createSession(projectId, cwd, opts = {}) {
   });
   return { id, projectId, specId: opts.specId, flow: opts.flow, cwd, branch: opts.branch, exited: false, decision: false, agent };
 }
+function capturePane(id, lines2 = 200) {
+  try {
+    return tmux("capture-pane", "-p", "-J", "-S", `-${lines2}`, "-t", name(id));
+  } catch {
+    return "";
+  }
+}
+async function sendToPane(id, text, chunkMs = 50) {
+  const p = getSession(id);
+  if (!p || p.exited) return false;
+  const line = text.replace(/\s*\r?\n\s*/g, " ").trim();
+  if (!line) return false;
+  try {
+    for (const chunk of goalChunks(line)) {
+      tmux("send-keys", "-t", name(id), "-l", chunk);
+      await sleep(chunkMs);
+    }
+    tmux("send-keys", "-t", name(id), "Enter");
+    return true;
+  } catch {
+    return false;
+  }
+}
 async function armGoalInTui(id, condition, o = {}) {
   const pollMs = o.pollMs ?? 500, readyTries = o.readyTries ?? 20;
   const settleMs = o.settleMs ?? 1200, verifyTries = o.verifyTries ?? 12;
@@ -6782,7 +6991,7 @@ function spawnPty(...args) {
     );
   }
 }
-var socket, PREFIX, MAX_SCROLLBACK, POLL_MS, markerFilled, attached, claudeBin, shellBin, codexBin, agentBin, frame, name, promptFilePath, goalGatePath, goalStatePath, NO_SERVER, TmuxError, sq, sessionIdForSpec, idFor, FMT, listSessions, liveDecisions, getSession, hooks, emitBirth, emitDeath, sleep, paneText, GOAL_ARMED_MARKERS, goalArmed, poll, detach;
+var socket, PREFIX, MAX_SCROLLBACK, POLL_MS, markerFilled, attached, claudeBin, shellBin, codexBin, agentBin, rootBypassEnv, frame, name, promptFilePath, goalGatePath, goalStatePath, NO_SERVER, TmuxError, sq, sessionIdForSpec, idFor, FMT, listSessions, liveDecisions, getSession, hooks, emitBirth, emitDeath, sleep, paneText, GOAL_ARMED_MARKERS, goalArmed, poll, detach;
 var init_pty = __esm({
   "src/services/pty.ts"() {
     "use strict";
@@ -6806,6 +7015,7 @@ var init_pty = __esm({
     shellBin = () => effectiveStr("HANOMAN_SHELL") ?? process.env.SHELL ?? "/bin/bash";
     codexBin = () => effectiveStr("HANOMAN_CODEX_BIN") ?? "codex";
     agentBin = (agent) => agent === "codex" ? codexBin() : claudeBin();
+    rootBypassEnv = (uid = process.getuid?.()) => uid === 0 ? { IS_SANDBOX: "1" } : {};
     frame = (f) => JSON.stringify(f);
     name = (id) => PREFIX + id;
     promptFilePath = (id) => `${tmpdir()}/hanoman-prompts/${id}`;
@@ -7129,7 +7339,9 @@ var init_sync = __esm({
     };
     FIELDS = {
       project: ["name", "desc", "kind", "stack", "gitRemote", "updatedAt"],
-      spec: ["projectId", "title", "source", "stage", "priority", "author", "objective", "payload", "branchFrom", "baseSha", "headSha", "updatedAt"],
+      // SPEC-408 · ADR-0090 · createdAt/startedAt ikut menyeberang — sejajar baseSha/headSha. Tanpa
+      // ini spec asal-hub mendapat createdAt lokal palsu di tiap client (kolom NOT NULL ber-default).
+      spec: ["projectId", "title", "source", "stage", "priority", "author", "objective", "payload", "branchFrom", "baseSha", "headSha", "createdAt", "startedAt", "updatedAt"],
       vps: ["name", "host", "port", "user", "health", "audit", "hardened", "lastSeenAt", "lastAuditAt", "updatedAt"],
       sessionResult: ["projectId", "specId", "oldStage", "newStage", "commitSha", "branch", "prUrl", "status", "deviceId", "author", "createdAt", "updatedAt"],
       // SPEC-268 · ADR-0066 · agregat grup error (ErrorEvent mentah tak disync).
@@ -7142,7 +7354,7 @@ var init_sync = __esm({
     };
     DATE_FIELDS = {
       project: ["updatedAt"],
-      spec: ["updatedAt"],
+      spec: ["createdAt", "startedAt", "updatedAt"],
       vps: ["lastSeenAt", "lastAuditAt", "updatedAt"],
       sessionResult: ["createdAt", "updatedAt"],
       errorGroup: ["firstSeenAt", "lastSeenAt", "updatedAt"],
@@ -11111,7 +11323,7 @@ function syncStatus() {
 async function startSyncClient(base, token, tickMs2) {
   started = true;
   const transport = fetchTransport(base, token);
-  const tick3 = async () => {
+  const tick4 = async () => {
     try {
       await syncOnce(transport);
     } catch {
@@ -11122,13 +11334,13 @@ async function startSyncClient(base, token, tickMs2) {
     const wsUrl = base.replace(/^http/, "ws").replace(/\/$/, "") + `/api/sync/ws?token=${encodeURIComponent(token)}`;
     ws = new WebSocket2(wsUrl);
     ws.on("open", () => {
-      void tick3();
+      void tick4();
     });
     ws.on("message", async (raw) => {
       try {
         const msg = JSON.parse(raw.toString());
         if (msg.t !== "sync") return;
-        if (!await applyFeedFrame(msg)) void tick3();
+        if (!await applyFeedFrame(msg)) void tick4();
       } catch {
       }
     });
@@ -11145,11 +11357,11 @@ async function startSyncClient(base, token, tickMs2) {
       }
     });
   };
-  await tick3();
+  await tick4();
   void connectWs();
   const ms = tickMs2 && tickMs2 > 0 ? tickMs2 : 15e3;
   timer2 = setInterval(() => {
-    void tick3();
+    void tick4();
   }, ms);
   timer2.unref?.();
 }
@@ -14419,7 +14631,7 @@ import websocket from "@fastify/websocket";
 import cookie from "@fastify/cookie";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 import { dirname as dirname12 } from "node:path";
-import { existsSync as existsSync10 } from "node:fs";
+import { existsSync as existsSync11 } from "node:fs";
 
 // src/web-dir.ts
 import { resolve } from "node:path";
@@ -14638,7 +14850,9 @@ async function toProjectView(p, sessions) {
     // SPEC-253 · Help Center publik aktif.
     helpEnabled: p.helpEnabled,
     // SPEC-294 · opt-in scheduler otonom (lokal per-instance).
-    schedulerOptIn: p.schedulerOptIn
+    schedulerOptIn: p.schedulerOptIn,
+    // SPEC-409 · ADR-0091 · opt-in hanoman-lead (lokal per-instance, cermin schedulerOptIn).
+    leadOptIn: p.leadOptIn
   };
 }
 
@@ -15091,8 +15305,10 @@ var DEFAULT_SETTING = {
   // SPEC-338 · ADR-0074 · model/effort codex
   verifyScope: "changed",
   // SPEC-376 · ADR-0080 · uji hanya yang berubah
-  conflict: CONFLICT_DEFAULTS
+  conflict: CONFLICT_DEFAULTS,
   // SPEC-383 · ADR-0081 · default sesi konflik (opt-in, mati)
+  lead: LEAD_DEFAULTS
+  // SPEC-409 · ADR-0091 · hanoman-lead (master switch mati)
 };
 async function getSetting() {
   const raw = (await prisma.setting.findUnique({ where: { id: 1 } }))?.data;
@@ -17814,6 +18030,27 @@ async function sendReviewDownload(reply, fmt, rf, a) {
   });
 }
 
+// src/services/date-range.ts
+var DAY = /^\d{4}-\d{2}-\d{2}$/;
+function dayStart(s) {
+  if (!s || !DAY.test(s)) return null;
+  const [y, m, d] = s.split("-").map(Number);
+  const dt = new Date(y, m - 1, d, 0, 0, 0, 0);
+  if (dt.getFullYear() !== y || dt.getMonth() !== m - 1 || dt.getDate() !== d) return null;
+  return dt;
+}
+function dayEnd(s) {
+  const start = dayStart(s);
+  if (!start) return null;
+  return new Date(start.getFullYear(), start.getMonth(), start.getDate(), 23, 59, 59, 999);
+}
+function inDayRange(at, from, to) {
+  if (!from && !to) return true;
+  if (!at) return false;
+  const t = at.getTime();
+  return (!from || t >= from.getTime()) && (!to || t <= to.getTime());
+}
+
 // src/services/live-specs.ts
 init_db();
 init_pty();
@@ -17863,6 +18100,12 @@ async function recordNewTicket(ticketId, projectId, projectName, category, title
   }).catch(() => {
   });
 }
+async function recordLeadDecision(decisionId, title, projectId, specId, sessionId2) {
+  await prisma.notification.create({
+    data: { type: "lead", key: `lead:${decisionId}`, specId, sessionId: sessionId2, projectId, title }
+  }).catch(() => {
+  });
+}
 var awaiting = /* @__PURE__ */ new Set();
 async function scanDecisions(read = liveDecisions) {
   const next = /* @__PURE__ */ new Set();
@@ -17932,13 +18175,16 @@ function deriveSpecFields(source, payload, manualPriority) {
 }
 function filterSpecs(specs, f) {
   const needle = (f.q ?? "").trim().toLowerCase();
-  return specs.filter((s) => (!f.stage || s.stage === f.stage) && (!f.priority || s.priority === f.priority) && (f.startable !== "true" || s.stage !== "done") && (needle === "" || `${s.id} ${s.title} ${s.objective}`.toLowerCase().includes(needle)));
+  const from = dayStart(f.from);
+  const to = dayEnd(f.to);
+  const byStarted = f.dateField === "started";
+  return specs.filter((s) => (!f.stage || s.stage === f.stage) && (!f.priority || s.priority === f.priority) && (f.startable !== "true" || s.stage !== "done") && inDayRange(byStarted ? s.startedAt : s.createdAt, from, to) && (needle === "" || `${s.id} ${s.title} ${s.objective}`.toLowerCase().includes(needle)));
 }
 async function specs_default(app2) {
   app2.get("/specs", async (req) => {
-    const { project, source, q, stage, priority, startable, page, limit } = req.query;
+    const { project, source, q, stage, priority, startable, dateField, from, to, page, limit } = req.query;
     const overlaid = await liveSpecs({ project, source });
-    return paginate(filterSpecs(overlaid, { q, stage, priority, startable }), page, limit);
+    return paginate(filterSpecs(overlaid, { q, stage, priority, startable, dateField, from, to }), page, limit);
   });
   app2.post("/specs", async (req, reply) => {
     const parsed = zCreateSpec.safeParse(req.body);
@@ -19429,7 +19675,10 @@ async function startSpecSession(spec, opts) {
     } catch (e) {
       throw new LaunchError(`gagal membuat worktree: ${e.message}`, "worktree");
     }
-    if (!resume) await prisma.spec.update({ where: { id: spec.id }, data: { baseSha, headSha: null } });
+    if (!resume) await prisma.spec.update({
+      where: { id: spec.id },
+      data: { baseSha, headSha: null, startedAt: /* @__PURE__ */ new Date() }
+    });
   }
   const brief = {
     id: spec.id,
@@ -20006,9 +20255,9 @@ function sshExec(t, remoteCmd, opts = {}) {
   return new Promise((resolve15) => {
     const p = spawn3(sshBin(), args, { stdio: ["pipe", "pipe", "pipe"], env });
     let out3 = "";
-    const timer4 = setTimeout(() => p.kill("SIGKILL"), opts.timeoutMs ?? 6e4);
+    const timer5 = setTimeout(() => p.kill("SIGKILL"), opts.timeoutMs ?? 6e4);
     const done = (r) => {
-      clearTimeout(timer4);
+      clearTimeout(timer5);
       if (askpass) rmSync4(dirname9(askpass), { recursive: true, force: true });
       resolve15(r);
     };
@@ -20890,12 +21139,36 @@ async function update(app2) {
 
 // src/services/events.ts
 init_pty();
+
+// src/services/lead/deciding.ts
+var deciding = /* @__PURE__ */ new Set();
+function markDeciding(sessionId2) {
+  deciding.add(sessionId2);
+}
+function clearDeciding(sessionId2) {
+  deciding.delete(sessionId2);
+}
+function isDeciding(sessionId2) {
+  return deciding.has(sessionId2);
+}
+function decidingIds() {
+  return [...deciding];
+}
+
+// src/services/events.ts
 init_db();
 init_config2();
 var clients = /* @__PURE__ */ new Set();
 var tickMs = () => effectiveInt("HANOMAN_EVENTS_TICK_MS") ?? 1e3;
 var GROUPS = [
-  { everyTicks: 1, last: "", build: async () => ({ t: "sessions", sessions: listSessions() }) },
+  // SPEC-409 · ADR-0091 · AC-3 · `deciding` menandai sesi yang sedang DISUSUN keputusannya oleh
+  // hanoman-lead. Tanpa penanda ini sesi yang justru sedang dilayani terbaca persis seperti sesi
+  // yang mandek — bentuknya sama: diam, marker keputusan terisi. Dihias DI SINI, bukan di pty.ts:
+  // service itu sengaja tak tahu apa-apa soal lead maupun DB.
+  { everyTicks: 1, last: "", build: async () => ({
+    t: "sessions",
+    sessions: listSessions().map((s) => isDeciding(s.id) ? { ...s, deciding: true } : s)
+  }) },
   { everyTicks: 1, last: "", build: async () => ({ t: "specs", specs: await liveSpecs() }) },
   { everyTicks: 3, last: "", build: async () => ({ t: "notifications", ...await notificationsFeed() }) },
   // ponytail: cermin GET /vps (orderBy createdAt asc). Query sepele — tak diekstrak.
@@ -21312,11 +21585,11 @@ function clamp(text) {
   const buf = Buffer.from(text, "utf8");
   if (buf.byteLength <= MAX_TRANSCRIPT_BYTES) return { body: text, truncated: false };
   const cut = buf.byteLength - MAX_TRANSCRIPT_BYTES;
-  let tail = buf.subarray(cut).toString("utf8");
-  const nl = tail.indexOf("\n");
-  if (nl >= 0) tail = tail.slice(nl + 1);
+  let tail2 = buf.subarray(cut).toString("utf8");
+  const nl = tail2.indexOf("\n");
+  if (nl >= 0) tail2 = tail2.slice(nl + 1);
   return { body: `\u2026 ${cut} byte awal dipangkas (batas ${MAX_TRANSCRIPT_BYTES} byte) \u2026
-${tail}`, truncated: true };
+${tail2}`, truncated: true };
 }
 async function saveTranscript(text) {
   if (!text.trim()) return { key: "", bytes: 0, truncated: false };
@@ -21871,7 +22144,7 @@ for (let i = 0; i < chars.length; i++) {
   intToChar[i] = c;
   charToInt[c] = i;
 }
-function decodeInteger(reader, relative) {
+function decodeInteger(reader, relative2) {
   let value = 0;
   let shift = 0;
   let integer = 0;
@@ -21886,7 +22159,7 @@ function decodeInteger(reader, relative) {
   if (shouldNegate) {
     value = -2147483648 | -value;
   }
-  return relative + value;
+  return relative2 + value;
 }
 function hasMoreVlq(reader, max) {
   if (reader.pos >= max) return false;
@@ -23046,6 +23319,1038 @@ async function audit_default(app2) {
   });
 }
 
+// src/routes/lead.ts
+init_src();
+init_db();
+init_pty();
+
+// src/services/lead/config.ts
+init_db();
+init_src();
+async function getLead() {
+  return (await getSetting()).lead;
+}
+async function setLead(next) {
+  const cur = await getSetting();
+  const data = { ...cur, lead: next };
+  await prisma.setting.upsert({ where: { id: 1 }, update: { data }, create: { id: 1, data } });
+  return next;
+}
+async function leadAgentDefaults() {
+  const s = await getSetting();
+  const e = s.lead.engine;
+  if (!e.enabled) return sessionAgentDefaults();
+  return e.agent === "codex" ? { agent: "codex", model: e.model, effort: coerceCodexEffort(e.model, e.effort) } : { agent: "claude", model: e.model, effort: e.effort };
+}
+function leadActive(cfg, projectId) {
+  if (!cfg.enabled || cfg.paused) return false;
+  if (projectId && cfg.pausedProjects.includes(projectId)) return false;
+  return true;
+}
+async function leadProjects() {
+  const rows = await prisma.project.findMany({ where: { leadOptIn: true }, select: { id: true } });
+  return rows.map((r) => r.id);
+}
+
+// src/services/lead/decide.ts
+init_src();
+init_db();
+init_pty();
+
+// src/services/lead/prompt.ts
+init_src();
+var bullet2 = (s) => `- ${s}`;
+function leadPrompt(q, c) {
+  const lines2 = [];
+  lines2.push("Kamu adalah **hanoman-lead**: tech lead mesin di atas semua agen yang bekerja di workspace ini.");
+  lines2.push("Kamu MEMUTUSKAN, lalu melapor. Tidak ada manusia yang menunggu untuk menyetujui jawabanmu.");
+  lines2.push("");
+  lines2.push("## Konteks");
+  lines2.push(bullet2(`Project: ${c.projectName} (${c.projectId})`));
+  if (c.repoDir) lines2.push(bullet2(`Checkout: ${c.repoDir}`));
+  if (c.spec) {
+    lines2.push(bullet2(`Backlog item: ${c.spec.id} \u2014 ${c.spec.title} \xB7 stage ${c.spec.stage} \xB7 prioritas ${c.spec.priority}`));
+    if (c.spec.objective) lines2.push(bullet2(`Objective: ${c.spec.objective}`));
+  }
+  for (const s of c.liveSessions ?? []) {
+    lines2.push(bullet2(`Sesi berjalan: ${s.id}${s.specId ? ` (${s.specId})` : ""}${s.flow ? ` \xB7 flow ${s.flow}` : ""}${s.branch ? ` \xB7 branch ${s.branch}` : ""}`));
+  }
+  for (const n of c.notes ?? []) lines2.push(bullet2(n));
+  lines2.push("");
+  if (c.priorDecisions?.length) {
+    lines2.push("## Keputusan yang sudah kamu ambil sebelumnya (jangan bertentangan tanpa alasan)");
+    for (const d of c.priorDecisions.slice(0, 10)) {
+      lines2.push(`- [${d.createdAt}] "${d.question.slice(0, 200)}" \u2192 ${d.answer.slice(0, 300)} (${d.reason.slice(0, 200)})`);
+    }
+    lines2.push("");
+  }
+  lines2.push("## Yang harus kamu putuskan");
+  lines2.push(q.question.trim());
+  if (q.options?.length) {
+    lines2.push("");
+    lines2.push("Opsi yang dilihat peminta:");
+    for (const [i, o] of q.options.entries()) lines2.push(`${i + 1}. ${o}`);
+  }
+  lines2.push("");
+  lines2.push("## Cara kerja");
+  lines2.push("1. KUMPULKAN BUKTI DULU sebelum memutuskan: `internal/docs/**` (Source of Truth) dan index-nya, ADR yang relevan, plan `docs/superpowers/plans/**`, kode yang bersangkutan, dan riwayat git. Baca, jangan mengingat.");
+  lines2.push('2. Putuskan. Kalau setelah membaca kamu masih ragu, TETAP putuskan: pilih opsi yang PALING MUDAH DIBATALKAN, lalu tandai `confidence: "ragu"`. Jangan pernah menjawab "tidak tahu" atau meminta manusia memutuskan \u2014 itu persis keadaan yang kamu ada untuk menghapusnya.');
+  lines2.push("3. Rujuk bukti yang BENAR-BENAR kamu baca. Rujukan berupa path berkas relatif terhadap checkout, nomor ADR (`ADR-0091`), atau sha commit. Rujukan yang tak ada di repo akan dibuang server dan membuat jawabanmu tampak tanpa dasar.");
+  lines2.push("4. JANGAN membaca atau mengutip kredensial (isi `.env*`, token, kunci privat). Jejak keputusan disimpan di basis data; rahasia tak boleh mendarat di sana.");
+  lines2.push("5. Kamu TIDAK mengeksekusi apa pun sendiri. Kamu mengusulkan satu `action`; server yang menjalankannya, dan hanya bila ia ada di daftar tertutup ini:");
+  lines2.push(`   ${LEAD_ACTIONS.join(" \xB7 ")}`);
+  lines2.push("   Deploy, perintah/konsol VPS, data produksi, dan penghapusan apa pun (project, backlog, branch, worktree, notifikasi, jejak) TERKUNCI dan tidak akan pernah dijalankan.");
+  lines2.push("");
+  lines2.push("## Bentuk jawaban (WAJIB)");
+  lines2.push("Akhiri jawabanmu dengan TEPAT SATU blok berikut, tanpa teks sesudahnya:");
+  lines2.push("");
+  lines2.push("```json");
+  lines2.push(JSON.stringify({
+    decision: "keputusan yang dipilih, satu kalimat",
+    reason: "alasannya, menyebut bukti",
+    refs: ["internal/docs/\u2026", "ADR-00xx"],
+    confidence: "tinggi | sedang | ragu",
+    action: "none",
+    reply: "teks yang akan diketikkan ke terminal agen peminta (kosongkan bila tak relevan)"
+  }, null, 2));
+  lines2.push("```");
+  return lines2.join("\n");
+}
+
+// src/services/lead/verdict.ts
+init_src();
+import { existsSync as existsSync10 } from "node:fs";
+import { isAbsolute as isAbsolute3, resolve as resolvePath, relative } from "node:path";
+function extractJsonBlock(raw) {
+  const re = /```json\s*\n([\s\S]*?)```/g;
+  let last = null;
+  for (const m of raw.matchAll(re)) if (m[1]) last = m[1];
+  if (last) return last;
+  const t = raw.trim();
+  return t.startsWith("{") && t.endsWith("}") ? t : null;
+}
+function parseLeadVerdict(raw) {
+  const block2 = extractJsonBlock(raw);
+  if (!block2) return null;
+  let data;
+  try {
+    data = JSON.parse(block2);
+  } catch {
+    return null;
+  }
+  const parsed = zLeadVerdict.safeParse(data);
+  return parsed.success ? parsed.data : null;
+}
+var SHA = /^[0-9a-f]{7,40}$/i;
+var isNonFileRef = (ref) => SHA.test(ref) || /^ADR-\d{4}$/i.test(ref);
+function keepExistingRefs(refs2, repoDir) {
+  const out3 = [];
+  for (const raw of refs2) {
+    const ref = raw.trim();
+    if (!ref) continue;
+    if (isNonFileRef(ref)) {
+      out3.push(ref);
+      continue;
+    }
+    if (!repoDir) continue;
+    if (isAbsolute3(ref)) continue;
+    const full = resolvePath(repoDir, ref);
+    const rel = relative(repoDir, full);
+    if (rel.startsWith("..")) continue;
+    if (existsSync10(full)) out3.push(ref);
+  }
+  return [...new Set(out3)];
+}
+
+// src/services/lead/trail.ts
+init_db();
+async function recordDecision(i) {
+  return prisma.leadDecision.create({
+    data: {
+      projectId: i.projectId,
+      specId: i.specId ?? null,
+      sessionId: i.sessionId ?? null,
+      gate: i.gate,
+      kind: i.kind,
+      question: i.question,
+      answer: i.answer,
+      reason: i.reason,
+      refs: i.refs,
+      confidence: i.confidence,
+      action: i.action,
+      status: i.status ?? "berlaku",
+      weighty: i.weighty ?? false,
+      actor: i.actor ?? "lead"
+    }
+  });
+}
+async function listDecisions(f = {}) {
+  return prisma.leadDecision.findMany({
+    where: {
+      ...f.projectId ? { projectId: f.projectId } : {},
+      ...f.specId ? { specId: f.specId } : {},
+      ...f.sessionId ? { sessionId: f.sessionId } : {},
+      ...f.status ? { status: f.status } : {}
+    },
+    orderBy: { createdAt: "desc" },
+    take: Math.min(f.take ?? 50, 200),
+    skip: f.skip ?? 0
+  });
+}
+async function overrideDecision(id, answer, reason) {
+  const old = await prisma.leadDecision.findUnique({ where: { id } });
+  if (!old || old.status !== "berlaku") return null;
+  const next = await recordDecision({
+    projectId: old.projectId,
+    specId: old.specId,
+    sessionId: old.sessionId,
+    gate: old.gate,
+    kind: old.kind,
+    question: old.question,
+    answer,
+    reason: reason || "ditimpa operator",
+    refs: [],
+    confidence: "tinggi",
+    action: "none",
+    actor: "operator"
+  });
+  const updated = await prisma.leadDecision.update({
+    where: { id },
+    data: { status: "ditimpa", supersededById: next.id }
+  });
+  return { old: updated, next };
+}
+async function cancelDecision(id) {
+  const row = await prisma.leadDecision.findUnique({ where: { id } });
+  if (!row || row.status !== "berlaku") return null;
+  return prisma.leadDecision.update({ where: { id }, data: { status: "dibatalkan" } });
+}
+function toDecisionView(r) {
+  return {
+    id: r.id,
+    projectId: r.projectId,
+    specId: r.specId,
+    sessionId: r.sessionId,
+    gate: r.gate,
+    kind: r.kind,
+    question: r.question,
+    answer: r.answer,
+    reason: r.reason,
+    refs: Array.isArray(r.refs) ? r.refs.map(String) : [],
+    confidence: r.confidence,
+    action: r.action,
+    status: r.status,
+    weighty: r.weighty,
+    supersededById: r.supersededById,
+    createdAt: r.createdAt.toISOString()
+  };
+}
+
+// src/services/lead/brain.ts
+init_config2();
+import { execFile as execFile9 } from "node:child_process";
+var binFor = (agent) => agent === "codex" ? effectiveStr("HANOMAN_CODEX_BIN") ?? "codex" : effectiveStr("HANOMAN_CLAUDE_BIN") ?? "claude";
+function leadArgv(o) {
+  if (o.agent === "codex") {
+    return [
+      "exec",
+      ...o.model ? ["-m", o.model] : [],
+      ...o.effort ? ["-c", `model_reasoning_effort="${o.effort}"`] : [],
+      "--dangerously-bypass-approvals-and-sandbox",
+      o.prompt
+    ];
+  }
+  return [
+    "-p",
+    ...o.model ? ["--model", o.model] : [],
+    ...o.effort ? ["--effort", o.effort] : [],
+    "--dangerously-skip-permissions",
+    o.prompt
+  ];
+}
+function think(prompt, o) {
+  const bin = binFor(o.agent);
+  const args = leadArgv({ agent: o.agent, model: o.model, effort: o.effort, prompt });
+  return new Promise((resolve15, reject) => {
+    execFile9(bin, args, {
+      cwd: o.cwd,
+      timeout: o.timeoutMs,
+      maxBuffer: 16 * 1024 * 1024,
+      encoding: "utf8",
+      killSignal: "SIGTERM"
+    }, (err, stdout, stderr) => {
+      if (err) {
+        const killed = err.killed;
+        reject(new Error(killed ? `lead ${o.agent} kehabisan waktu ${o.timeoutMs} ms` : `lead ${o.agent} gagal: ${(stderr || err.message).trim().slice(0, 500)}`));
+        return;
+      }
+      resolve15(stdout);
+    });
+  });
+}
+
+// src/services/lead/decide.ts
+var prodDecideDeps = {
+  think,
+  defaults: leadAgentDefaults,
+  repoDir: resolveRepoDir,
+  liveSessions: () => {
+    try {
+      return listSessions();
+    } catch {
+      return [];
+    }
+  },
+  notify: recordLeadDecision
+};
+var notifTitle = (kind, question, answer, confidence) => {
+  const q = question.replace(/\s+/g, " ").trim().slice(0, 70);
+  const a = answer.replace(/\s+/g, " ").trim().slice(0, 90);
+  const tag2 = confidence === "ragu" ? "Lead (ragu)" : "Lead";
+  return `${tag2} \xB7 ${kind}: ${q ? `"${q}" \u2192 ` : ""}${a}`;
+};
+async function decide(req, deps = prodDecideDeps) {
+  const cfg = await getLead();
+  if (!leadActive(cfg, req.projectId)) return null;
+  const project = await prisma.project.findUnique({ where: { id: req.projectId }, select: { name: true } });
+  const spec = req.specId ? await prisma.spec.findUnique({
+    where: { id: req.specId },
+    select: { id: true, title: true, objective: true, stage: true, priority: true }
+  }) : null;
+  const repoDir = await deps.repoDir(req.projectId).catch(() => null);
+  const prior = await prisma.leadDecision.findMany({
+    where: { projectId: req.projectId, status: "berlaku" },
+    orderBy: { createdAt: "desc" },
+    take: 10
+  });
+  const ctx = {
+    projectId: req.projectId,
+    projectName: project?.name ?? req.projectId,
+    repoDir,
+    spec,
+    liveSessions: deps.liveSessions().filter((s) => !s.exited && s.projectId === req.projectId && s.id !== req.sessionId).map((s) => ({ id: s.id, specId: s.specId, flow: s.flow, branch: s.branch })),
+    priorDecisions: prior.map((d) => ({
+      question: d.question,
+      answer: d.answer,
+      reason: d.reason,
+      createdAt: d.createdAt.toISOString()
+    })),
+    notes: req.notes
+  };
+  const { agent, model, effort } = await deps.defaults();
+  const prompt = leadPrompt({ kind: req.kind, question: req.question, options: req.options }, ctx);
+  if (req.sessionId) markDeciding(req.sessionId);
+  let raw;
+  try {
+    raw = await deps.think(prompt, { agent, model, effort, cwd: repoDir ?? void 0, timeoutMs: cfg.timeoutSec * 1e3 });
+  } catch (e) {
+    return fail(req, deps, `lead tak menghasilkan keputusan: ${e.message}`);
+  } finally {
+    if (req.sessionId) clearDeciding(req.sessionId);
+  }
+  const verdict = parseLeadVerdict(raw);
+  if (!verdict) return fail(req, deps, "keluaran lead tak memuat blok json keputusan yang sah");
+  const refs2 = keepExistingRefs(verdict.refs, repoDir);
+  const allowed = leadActionAllowed(verdict.action);
+  const action = allowed ? verdict.action : "none";
+  const kind = allowed ? req.kind : "refusal";
+  const reason = allowed ? verdict.reason : `${verdict.reason}
+
+DITOLAK: ${leadRefusalReason(verdict.action)} berada di luar permukaan tindakan lead (ADR-0091 \xB7 AC-31/32).`;
+  const weighty = isWeightyDecision({ kind, action, confidence: verdict.confidence });
+  const row = await recordDecision({
+    projectId: req.projectId,
+    specId: req.specId,
+    sessionId: req.sessionId,
+    gate: req.gate,
+    kind,
+    question: req.question,
+    answer: verdict.decision,
+    reason,
+    refs: refs2,
+    confidence: verdict.confidence,
+    action,
+    weighty
+  });
+  if (weighty) {
+    await deps.notify(
+      row.id,
+      notifTitle(kind, req.question, verdict.decision, verdict.confidence),
+      req.projectId,
+      req.specId ?? null,
+      req.sessionId ?? null
+    );
+  }
+  lastReply.set(row.id, verdict.reply || verdict.decision);
+  return row;
+}
+var lastReply = /* @__PURE__ */ new Map();
+function takeReply(decisionId) {
+  const v = lastReply.get(decisionId) ?? "";
+  lastReply.delete(decisionId);
+  return v;
+}
+async function fail(req, deps, reason) {
+  const row = await recordDecision({
+    projectId: req.projectId,
+    specId: req.specId,
+    sessionId: req.sessionId,
+    gate: req.gate,
+    kind: req.kind,
+    question: req.question,
+    answer: "",
+    reason,
+    refs: [],
+    confidence: "ragu",
+    action: "none",
+    status: "gagal",
+    weighty: true
+  });
+  await deps.notify(
+    row.id,
+    `Lead gagal memutuskan: ${req.question.replace(/\s+/g, " ").slice(0, 90)}`,
+    req.projectId,
+    req.specId ?? null,
+    req.sessionId ?? null
+  );
+  return row;
+}
+
+// src/services/lead/apply.ts
+init_src();
+init_db();
+init_pty();
+init_session_phases();
+var prodApplyDeps = {
+  killSession: (id) => {
+    try {
+      return killSession(id);
+    } catch {
+      return false;
+    }
+  },
+  sessionExists: (id) => {
+    try {
+      return !!getSession(id);
+    } catch {
+      return false;
+    }
+  },
+  startSpec: startSpecSession,
+  repoDir: resolveRepoDir,
+  planDone: planComplete,
+  integrate,
+  notify: recordLeadDecision
+};
+async function applyAction(row, deps = prodApplyDeps) {
+  const action = row.action;
+  if (!leadActionAllowed(action)) {
+    await deps.notify(
+      row.id,
+      `Lead menolak tindakan terkunci: ${leadRefusalReason(action)}`,
+      row.projectId,
+      row.specId,
+      row.sessionId
+    );
+    return { ok: false, detail: `tindakan terkunci: ${leadRefusalReason(action)}` };
+  }
+  switch (action) {
+    // Keputusan yang wujudnya memang hanya baris jejak.
+    case "none":
+    case "answer-session":
+    // sudah diketikkan ke pane oleh pintu deteksi
+    case "order-queue":
+      return { ok: true, detail: "tak ada tindakan tersisa" };
+    // Ditata sebagai keputusan, dieksekusi operator di versi ini (lihat ADR-0091 §Konsekuensi).
+    case "hold-work":
+    case "push-branch":
+    case "run-migration":
+      return { ok: true, detail: `dicatat sebagai keputusan; "${action}" dieksekusi operator di versi ini` };
+    case "stop-session":
+      return stopSession(row, deps);
+    case "start-session":
+    case "resume-session":
+    case "restart-session":
+      return relaunch(row, deps);
+    case "integrate-main":
+      return integrateMain(row, deps);
+  }
+}
+function stopSession(row, deps) {
+  if (!row.sessionId) return { ok: false, detail: "keputusan ini tak menunjuk sesi" };
+  const killed = deps.killSession(row.sessionId);
+  return killed ? { ok: true, detail: `sesi ${row.sessionId} dihentikan; worktree dibiarkan utuh (AC-32a)` } : { ok: false, detail: `sesi ${row.sessionId} tak ada` };
+}
+async function relaunch(row, deps) {
+  if (!row.specId) return { ok: false, detail: "keputusan ini tak menunjuk backlog" };
+  const spec = await prisma.spec.findUnique({ where: { id: row.specId } });
+  if (!spec) return { ok: false, detail: `backlog ${row.specId} tak ada` };
+  const sid = sessionIdForSpec(spec.id);
+  if (deps.sessionExists(sid)) deps.killSession(sid);
+  const r = await deps.startSpec(spec, { flow: flowForSource(spec.source) });
+  return { ok: true, detail: `sesi ${r.id}${r.resumed ? " dilanjutkan" : " dimulai"}` };
+}
+async function integrateMain(row, deps) {
+  if (!row.specId) return { ok: false, detail: "keputusan ini tak menunjuk backlog" };
+  const cfg = await getLead();
+  const repoDir = await deps.repoDir(row.projectId);
+  if (!repoDir) return { ok: false, detail: `project ${row.projectId} belum di-bind ke checkout lokal` };
+  const spec = await prisma.spec.findUnique({ where: { id: row.specId } });
+  if (!spec) return { ok: false, detail: `backlog ${row.specId} tak ada` };
+  const evidence = [];
+  if (cfg.requireGreenBeforeIntegrate) {
+    const wt = worktreeDir(repoDir, spec.id);
+    const done = deps.planDone(wt, spec.id);
+    evidence.push(done ? "plan tak menyisakan `- [ ]`" : "plan MASIH menyisakan `- [ ]`");
+    const sid = sessionIdForSpec(spec.id);
+    const pane = deps.sessionExists(sid);
+    evidence.push(pane ? `pane ${sid} masih ada` : `pane ${sid} sudah tak ada`);
+    if (!done) {
+      await recordEvidence(row, evidence, "integrasi DIBATALKAN \u2014 syarat objektif tak terpenuhi");
+      await deps.notify(
+        row.id,
+        `Lead membatalkan integrasi ${spec.id}: plan belum tuntas`,
+        row.projectId,
+        row.specId,
+        row.sessionId
+      );
+      return { ok: false, detail: "syarat integrasi tak terpenuhi: plan masih menyisakan `- [ ]`" };
+    }
+  } else {
+    evidence.push("syarat objektif dimatikan operator (lead.requireGreenBeforeIntegrate = false)");
+  }
+  const res = await deps.integrate(repoDir, spec.id, "merge", "local:main");
+  evidence.push(`integrate \u2192 ${res.status}`);
+  await recordEvidence(row, evidence, res.status === "clean" ? "integrasi bersih" : `integrasi tak bersih: ${res.status}`);
+  if (res.status !== "clean") {
+    await deps.notify(
+      row.id,
+      `Integrasi ${spec.id} oleh lead tak bersih (${res.status}) \u2014 butuh operator`,
+      row.projectId,
+      row.specId,
+      row.sessionId
+    );
+  }
+  return { ok: res.status === "clean", detail: evidence.join("; ") };
+}
+async function recordEvidence(row, evidence, verdict) {
+  await prisma.leadDecision.update({
+    where: { id: row.id },
+    data: { reason: `${row.reason}
+
+Bukti integrasi: ${evidence.join("; ")} \u2192 ${verdict}.` }
+  }).catch(() => {
+  });
+}
+
+// src/services/lead/detect.ts
+init_pty();
+
+// src/services/lead/pane.ts
+var CLEAN = /[│┃┆┊┌┐└┘├┤┬┴┼─━╭╮╰╯>❯]/g;
+var tail = (text, lines2) => text.split("\n").map((l) => l.replace(CLEAN, " ").trimEnd()).filter((l) => l.trim()).slice(-lines2);
+var CODEX_FINISHED = [
+  /Goal achieved/i,
+  /Goal unmet/i,
+  /\btokens used\b/i,
+  /\bTo continue this session\b/i
+];
+var ASK_SIGNALS = [
+  /\?\s*$/m,
+  /^\s*\[?\d+[).\]]\s+\S/m,
+  /\b(pilih|apakah|haruskah|mana yang|opsi|which|should i|do you want|proceed\?)\b/i
+];
+function readPaneQuestion(text, agent) {
+  const lines2 = tail(text, 40);
+  const body = lines2.join("\n").trim();
+  if (!body) return { asking: false, question: "", reason: "layar kosong" };
+  const question = tail(text, 25).join("\n").trim();
+  if (agent === "codex") {
+    const finished = CODEX_FINISHED.find((re) => re.test(body));
+    if (finished) return { asking: false, question, reason: "sesi codex selesai wajar (ADR-0074)" };
+    if (!ASK_SIGNALS.some((re) => re.test(body)))
+      return { asking: false, question, reason: "tak ada sinyal pertanyaan di layar codex" };
+  }
+  return { asking: true, question, reason: "" };
+}
+
+// src/services/lead/detect.ts
+var answers = /* @__PURE__ */ new Map();
+var capped = /* @__PURE__ */ new Set();
+function resetSession(sessionId2) {
+  answers.delete(sessionId2);
+  capped.delete(sessionId2);
+}
+var prodDetectDeps = {
+  live: () => {
+    try {
+      return liveDecisions();
+    } catch {
+      return [];
+    }
+  },
+  filled: markerFilled,
+  pane: (id) => capturePane(id),
+  agentOf: (id) => {
+    try {
+      return getSession(id)?.agent ?? null;
+    } catch {
+      return null;
+    }
+  },
+  // SPEC-402 · tmux tak terbaca ≠ pane mati. Ragu → perlakukan sebagai mati: yang hilang cuma satu
+  // jawaban otomatis (sesi jatuh ke perilaku hari ini), sementara salah arah membuat lead mengetik
+  // ke pane yang sudah tak ada.
+  exited: (id) => {
+    try {
+      return getSession(id)?.exited ?? true;
+    } catch {
+      return true;
+    }
+  },
+  send: (id, text) => sendToPane(id, text),
+  decide,
+  decideDeps: prodDecideDeps,
+  optIn: leadProjects,
+  notify: recordLeadDecision,
+  cfg: getLead
+};
+async function scanAndAnswer(deps = prodDetectDeps) {
+  const out3 = { answered: [], skipped: [] };
+  const cfg = await deps.cfg();
+  if (!cfg.enabled || cfg.paused) return out3;
+  const optIn = new Set(await deps.optIn());
+  const sessions = deps.live();
+  sweep(sessions.map((s) => s.id));
+  for (const s of sessions) {
+    const skip = (reason) => out3.skipped.push({ id: s.id, reason });
+    if (!optIn.has(s.projectId)) {
+      skip("project tak opt-in lead");
+      continue;
+    }
+    if (!leadActive(cfg, s.projectId)) {
+      skip("lead dijeda untuk project ini");
+      continue;
+    }
+    if (!deps.filled(s.decisionFile)) continue;
+    if (deps.exited(s.id)) {
+      skip("pane mati");
+      continue;
+    }
+    if ((answers.get(s.id) ?? 0) >= cfg.maxAutoAnswers) {
+      if (!capped.has(s.id)) {
+        capped.add(s.id);
+        const row2 = await recordDecision({
+          projectId: s.projectId,
+          specId: s.specId,
+          sessionId: s.id,
+          gate: "detected",
+          kind: "quality",
+          question: `Sesi ${s.id} sudah dijawab otomatis ${cfg.maxAutoAnswers}\xD7 berturut-turut.`,
+          answer: "Berhenti menjawab sesi ini; serahkan ke operator.",
+          reason: "Batas jawaban otomatis per sesi tercapai \u2014 pengulangan menandakan lead tak benar-benar membuka jalan buntunya (AC-11).",
+          refs: [],
+          confidence: "tinggi",
+          action: "none",
+          weighty: true
+        });
+        await deps.notify(
+          row2.id,
+          `Lead berhenti menjawab sesi ${s.id} (batas ${cfg.maxAutoAnswers}\xD7 tercapai)`,
+          s.projectId,
+          s.specId ?? null,
+          s.id
+        );
+      }
+      skip("batas jawaban otomatis tercapai");
+      continue;
+    }
+    const agent = deps.agentOf(s.id) ?? "claude";
+    const read = readPaneQuestion(deps.pane(s.id), agent);
+    if (!read.asking) {
+      skip(read.reason);
+      continue;
+    }
+    const row = await deps.decide({
+      projectId: s.projectId,
+      specId: s.specId,
+      sessionId: s.id,
+      gate: "detected",
+      kind: "answer",
+      question: read.question,
+      notes: [`Sesi ini menunggu di terminal; teks di bawah adalah layar terakhirnya. Jawablah sebagai masukan yang bisa langsung diketik ke terminal itu (isi \`reply\`).`]
+    }, deps.decideDeps);
+    if (!row || row.status !== "berlaku") {
+      skip("lead tak menghasilkan keputusan yang berlaku");
+      continue;
+    }
+    const reply = takeReply(row.id) || row.answer;
+    const sent = await deps.send(s.id, reply);
+    if (!sent) {
+      skip("gagal mengetik ke pane");
+      continue;
+    }
+    answers.set(s.id, (answers.get(s.id) ?? 0) + 1);
+    out3.answered.push(s.id);
+  }
+  return out3;
+}
+function sweep(liveIds) {
+  const live = new Set(liveIds);
+  for (const id of [...answers.keys()]) if (!live.has(id)) answers.delete(id);
+  for (const id of [...capped]) if (!live.has(id)) capped.delete(id);
+}
+
+// src/services/lead/pulse.ts
+init_db();
+init_pty();
+init_session_phases();
+var moduleOf = (p) => p.split("/").slice(0, 2).join("/");
+function findCollisions(areas) {
+  const out3 = [];
+  for (let i = 0; i < areas.length; i++) {
+    for (let j = i + 1; j < areas.length; j++) {
+      const a = areas[i], b = areas[j];
+      if (a.projectId !== b.projectId) continue;
+      const bp = new Set(b.paths);
+      const shared = a.paths.filter((p) => bp.has(p));
+      const bm = new Set(b.paths.map(moduleOf));
+      const nearby = [...new Set(a.paths.map(moduleOf))].filter((m) => bm.has(m) && !shared.some((s) => moduleOf(s) === m));
+      if (shared.length || nearby.length) out3.push({ a, b, shared, nearby });
+    }
+  }
+  return out3;
+}
+var prodPulseDeps = {
+  sessions: () => {
+    try {
+      return listSessions();
+    } catch {
+      return [];
+    }
+  },
+  areas: async (s) => {
+    const repoDir = await resolveRepoDir(s.projectId);
+    if (!repoDir) return [];
+    const spec = await prisma.spec.findUnique({ where: { id: s.specId }, select: { baseSha: true, branchFrom: true } });
+    if (!spec) return [];
+    try {
+      const r = await specReview(repoDir, s.specId, spec.baseSha, spec.branchFrom);
+      return r.changed.map((c) => c.path);
+    } catch {
+      return [];
+    }
+  },
+  planDone: planComplete,
+  decide,
+  decideDeps: prodDecideDeps,
+  apply: applyAction,
+  enqueue,
+  notify: recordLeadDecision,
+  optIn: leadProjects,
+  cfg: getLead
+};
+var lastReadySig = /* @__PURE__ */ new Map();
+async function pulse(deps = prodPulseDeps) {
+  const res = { ordered: 0, collisions: 0, quality: 0 };
+  const cfg = await deps.cfg();
+  if (!cfg.enabled || cfg.paused) return res;
+  const optIn = (await deps.optIn()).filter((p) => leadActive(cfg, p));
+  if (!optIn.length) return res;
+  try {
+    res.quality = await followUpFinished(cfg, optIn, deps);
+  } catch {
+  }
+  try {
+    res.collisions = await detectCollisions(optIn, deps);
+  } catch {
+  }
+  try {
+    res.ordered = await orderReadyWork(optIn, deps);
+  } catch {
+  }
+  return res;
+}
+async function followUpFinished(cfg, optIn, deps) {
+  let n = 0;
+  const opt = new Set(optIn);
+  for (const s of deps.sessions()) {
+    if (!s.exited || !s.specId || !opt.has(s.projectId)) continue;
+    const bad = (s.exitCode ?? 0) !== 0;
+    const unfinished = !deps.planDone(s.cwd, s.specId);
+    if (!bad && !unfinished) continue;
+    const seen = await prisma.leadDecision.findFirst({ where: { sessionId: s.id, kind: "quality", gate: "pulse" } });
+    if (seen) continue;
+    const why = [
+      bad ? `berakhir dengan kode keluar ${s.exitCode}` : null,
+      unfinished ? "plan-nya masih menyisakan kotak `- [ ]`" : null
+    ].filter(Boolean).join(" dan ");
+    const row = await deps.decide({
+      projectId: s.projectId,
+      specId: s.specId,
+      sessionId: s.id,
+      gate: "pulse",
+      kind: "quality",
+      question: `Sesi ${s.id} untuk backlog ${s.specId} ${why}. Tindak lanjutnya apa: lanjutkan pekerjaan yang terputus, ulangi dari awal, atau hentikan?`,
+      options: [
+        "resume-session \u2014 lanjutkan dari keadaan worktree sekarang (ADR-0084)",
+        "restart-session \u2014 ulangi dari awal",
+        "none \u2014 terima apa adanya, sertakan alasannya"
+      ],
+      notes: [`Worktree sesi: ${s.cwd}`]
+    }, deps.decideDeps);
+    if (!row) continue;
+    n++;
+    if (row.status === "berlaku" && row.action !== "none") {
+      try {
+        await deps.apply(row);
+      } catch {
+      }
+    }
+  }
+  return n;
+}
+async function detectCollisions(optIn, deps) {
+  const opt = new Set(optIn);
+  const live = deps.sessions().filter((s) => !s.exited && s.specId && opt.has(s.projectId));
+  if (live.length < 2) return 0;
+  const areas = [];
+  for (const s of live) {
+    const paths2 = await deps.areas({ id: s.id, projectId: s.projectId, specId: s.specId });
+    if (paths2.length) areas.push({ specId: s.specId, sessionId: s.id, projectId: s.projectId, paths: paths2 });
+  }
+  let n = 0;
+  for (const c of findCollisions(areas)) {
+    const key = [c.a.sessionId, c.b.sessionId].sort().join("|");
+    const seen = await prisma.leadDecision.findFirst({
+      where: { kind: "collision", gate: "pulse", question: { contains: key } }
+    });
+    if (seen) continue;
+    const row = await deps.decide({
+      projectId: c.a.projectId,
+      specId: c.a.specId,
+      sessionId: c.a.sessionId,
+      gate: "pulse",
+      kind: "collision",
+      question: `Dua pekerjaan menyentuh area yang sama [${key}]: ${c.a.specId} dan ${c.b.specId}. Tunda salah satu, gabungkan, atau biarkan?`,
+      options: [
+        `hold-work \u2014 tunda salah satu sampai yang lain terintegrasi`,
+        `none \u2014 biarkan berjalan, sertakan alasan kenapa tabrakan ini aman`
+      ],
+      notes: [
+        c.shared.length ? `Berkas yang sama: ${c.shared.slice(0, 20).join(", ")}` : "",
+        c.nearby.length ? `Modul yang sama: ${c.nearby.slice(0, 20).join(", ")}` : ""
+      ].filter(Boolean)
+    }, deps.decideDeps);
+    if (row) n++;
+  }
+  return n;
+}
+async function orderReadyWork(optIn, deps) {
+  let total = 0;
+  for (const projectId of optIn) total += await orderProject(projectId, deps);
+  return total;
+}
+async function orderProject(projectId, deps) {
+  const ready = await prisma.spec.findMany({
+    where: { baseSha: null, projectId },
+    select: { id: true, projectId: true, title: true, priority: true, objective: true },
+    orderBy: { id: "asc" }
+  });
+  if (ready.length < 2) return 0;
+  const sig = ready.map((r) => r.id).join(",");
+  if (sig === lastReadySig.get(projectId)) return 0;
+  lastReadySig.set(projectId, sig);
+  const row = await deps.decide({
+    projectId,
+    gate: "pulse",
+    kind: "order",
+    question: `Ada ${ready.length} backlog siap dikerjakan. Urutkan mana yang lebih dulu berdasarkan isi pekerjaannya, lalu tuliskan urutan id-nya (dipisah koma) di \`decision\`.`,
+    options: ready.map((r) => `${r.id} \xB7 [${r.priority}] ${r.title}`),
+    notes: ready.map((r) => `${r.id}: ${r.objective.slice(0, 200)}`)
+  }, deps.decideDeps);
+  if (!row || row.status !== "berlaku") return 0;
+  const byId2 = new Map(ready.map((r) => [r.id.toLowerCase(), r]));
+  const named = [];
+  for (const tok of row.answer.split(/[,\s]+/).map((t) => t.trim().toLowerCase()).filter(Boolean)) {
+    const hit = byId2.get(tok);
+    if (hit && !named.includes(hit)) named.push(hit);
+  }
+  const ordered = [...named, ...ready.filter((r) => !named.includes(r))];
+  for (const r of ordered) {
+    await deps.enqueue({ specId: r.id, projectId: r.projectId, source: "lead", priority: r.priority });
+  }
+  await deps.notify(row.id, `Lead menata ${ordered.length} backlog siap kerja`, projectId, null, null);
+  return ordered.length;
+}
+
+// src/services/lead/engine.ts
+var TICK_MS = 5e3;
+var lastPulseAt = 0;
+var busy2 = false;
+var timer3;
+function lastPulse() {
+  return lastPulseAt;
+}
+async function tick2(now, deps = {}) {
+  if (busy2) return;
+  busy2 = true;
+  try {
+    const cfg = await getLead();
+    if (!cfg.enabled) return;
+    try {
+      await scanAndAnswer(deps.detect ?? prodDetectDeps);
+    } catch (e) {
+      console.error("lead detect:", e);
+    }
+    if (cfg.paused) return;
+    if (now - lastPulseAt < cfg.everyMin * 6e4) return;
+    lastPulseAt = now;
+    try {
+      await pulse(deps.pulse ?? prodPulseDeps);
+    } catch (e) {
+      console.error("lead pulse:", e);
+    }
+  } catch (e) {
+    console.error("lead tick:", e);
+  } finally {
+    busy2 = false;
+  }
+}
+function startLead(deps = {}) {
+  if (timer3) return;
+  timer3 = setInterval(() => void tick2(Date.now(), deps), TICK_MS);
+  timer3.unref();
+  void tick2(Date.now(), deps);
+}
+
+// src/routes/lead.ts
+async function lead_default(app2) {
+  app2.get("/lead/config", async () => getLead());
+  app2.put("/lead/config", async (req, reply) => {
+    const parsed = zLead.safeParse(req.body);
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    return setLead(parsed.data);
+  });
+  app2.get("/lead/status", async () => {
+    const cfg = await getLead();
+    const projects = await prisma.project.findMany({
+      where: { leadOptIn: true },
+      select: { id: true, name: true },
+      orderBy: { id: "asc" }
+    });
+    const since = new Date(Date.now() - 24 * 60 * 60 * 1e3);
+    let live = [];
+    try {
+      live = listSessions().filter((s) => !s.exited);
+    } catch {
+    }
+    let waiting = [];
+    try {
+      waiting = liveDecisions().filter((d) => markerFilled(d.decisionFile)).map((d) => d.id);
+    } catch {
+    }
+    const rows = await Promise.all(projects.map(async (p) => ({
+      projectId: p.id,
+      name: p.name,
+      optIn: true,
+      paused: !leadActive(cfg, p.id),
+      decisions24h: await prisma.leadDecision.count({ where: { projectId: p.id, createdAt: { gte: since } } }),
+      openSessions: live.filter((s) => s.projectId === p.id).length
+    })));
+    const last = lastPulse();
+    return {
+      config: cfg,
+      projects: rows,
+      queue: (await listQueue()).map((q) => ({
+        id: q.id,
+        specId: q.specId,
+        projectId: q.projectId,
+        source: q.source,
+        priority: q.priority,
+        status: q.status,
+        sessionId: q.sessionId,
+        note: q.note,
+        enqueuedAt: q.enqueuedAt.toISOString(),
+        launchedAt: q.launchedAt ? q.launchedAt.toISOString() : null
+      })),
+      deciding: decidingIds(),
+      waiting,
+      lastPulseAt: last ? new Date(last).toISOString() : null
+    };
+  });
+  app2.get("/lead/decisions", async (req) => {
+    const q = req.query;
+    const rows = await listDecisions({
+      projectId: q.projectId,
+      specId: q.specId,
+      sessionId: q.sessionId,
+      status: q.status,
+      take: q.take ? Number(q.take) : void 0,
+      skip: q.skip ? Number(q.skip) : void 0
+    });
+    return { items: rows.map(toDecisionView) };
+  });
+  app2.post("/lead/decisions", async (req, reply) => {
+    const parsed = zLeadAsk.safeParse(req.body);
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    const ask = parsed.data;
+    const project = await prisma.project.findUnique({ where: { id: ask.projectId }, select: { leadOptIn: true } });
+    if (!project) return reply.code(404).send({ error: "project not found" });
+    const cfg = await getLead();
+    if (!project.leadOptIn || !leadActive(cfg, ask.projectId))
+      return reply.code(409).send({ error: "lead tidak aktif untuk project ini" });
+    const row = await decide({
+      projectId: ask.projectId,
+      specId: ask.specId ?? null,
+      sessionId: ask.sessionId ?? null,
+      gate: "contract",
+      kind: "answer",
+      question: ask.question,
+      options: ask.options,
+      notes: ask.context ? [ask.context] : void 0
+    });
+    if (!row) return reply.code(409).send({ error: "lead tidak aktif untuk project ini" });
+    takeReply(row.id);
+    if (row.status === "gagal") return reply.code(504).send({ error: row.reason, id: row.id });
+    if (row.action !== "none") {
+      try {
+        await applyAction(row);
+      } catch {
+      }
+    }
+    const answer = {
+      id: row.id,
+      decision: row.answer,
+      reason: row.reason,
+      refs: Array.isArray(row.refs) ? row.refs.map(String) : [],
+      confidence: row.confidence,
+      action: row.action
+    };
+    return reply.code(201).send(answer);
+  });
+  app2.post("/lead/decisions/:id/override", async (req, reply) => {
+    const { id } = req.params;
+    const parsed = zLeadOverride.safeParse(req.body);
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    const r = await overrideDecision(id, parsed.data.answer, parsed.data.reason);
+    if (!r) return reply.code(409).send({ error: "keputusan tak ada atau sudah tak berlaku" });
+    let delivered = false;
+    if (r.next.sessionId) {
+      resetSession(r.next.sessionId);
+      delivered = await sendToPane(r.next.sessionId, parsed.data.answer).catch(() => false);
+    }
+    return { old: toDecisionView(r.old), next: toDecisionView(r.next), delivered };
+  });
+  app2.post("/lead/decisions/:id/cancel", async (req, reply) => {
+    const { id } = req.params;
+    const row = await cancelDecision(id);
+    if (!row) return reply.code(409).send({ error: "keputusan tak ada atau sudah tak berlaku" });
+    if (row.sessionId) resetSession(row.sessionId);
+    return toDecisionView(row);
+  });
+}
+
 // src/app.ts
 var import_multipart = __toESM(require_multipart2(), 1);
 
@@ -23329,6 +24634,7 @@ function capabilityForRoute(method, path) {
   if (top === "limits" || top === "update" || top === "events" || top === "fs" || top === "health")
     return read ? "GLOBAL_READ" : "COOKIE_ONLY";
   if (top === "scheduler") return rw("settings");
+  if (top === "lead") return rw("lead");
   if (top === "settings" || top === "config") return rw("settings");
   if (top === "specs") return rw("backlog");
   if (top === "notifications") return rw("notifications");
@@ -23439,9 +24745,10 @@ function buildApp({ requireAuth = true } = {}) {
     await api.register(scheduler_default);
     await api.register(audit_default);
     await api.register(codex);
+    await api.register(lead_default);
   }, { prefix: "/api" });
   if (process.env.NODE_ENV === "production") {
-    const dist = pickWebDir(dirname12(fileURLToPath4(import.meta.url)), process.env, existsSync10);
+    const dist = pickWebDir(dirname12(fileURLToPath4(import.meta.url)), process.env, existsSync11);
     if (dist) {
       app2.register(fastifyStatic, { root: dist });
       app2.setNotFoundHandler((req, reply) => req.url.startsWith("/api") ? reply.code(404).send({ error: "not found" }) : reply.sendFile("index.html"));
@@ -23588,7 +24895,7 @@ var prodEnd = {
   reconcile: () => reconcile(reconcileProdDeps),
   scanDecisions: () => scanDecisions()
 };
-async function tick2(now, deps, end2 = prodEnd) {
+async function tick3(now, deps, end2 = prodEnd) {
   const cfg = await getScheduler();
   if (!cfg.enabled) return;
   for (const src of listSources()) {
@@ -23629,13 +24936,13 @@ var prodDeps = {
     return r.id;
   }
 };
-var TICK_MS = 1e4;
-var timer3;
+var TICK_MS2 = 1e4;
+var timer4;
 function startScheduler(deps = prodDeps) {
-  if (timer3) return;
-  timer3 = setInterval(() => void tick2(Date.now(), deps), TICK_MS);
-  timer3.unref();
-  void tick2(Date.now(), deps);
+  if (timer4) return;
+  timer4 = setInterval(() => void tick3(Date.now(), deps), TICK_MS2);
+  timer4.unref();
+  void tick3(Date.now(), deps);
 }
 
 // src/services/scheduler/sources/backlog.ts
@@ -23746,6 +25053,7 @@ app.listen({ port, host }).then(() => {
   registerErrorsSource();
   registerTriaseSource();
   startScheduler();
+  startLead();
   void (async () => {
     const { loadConfig: loadConfig2 } = await Promise.resolve().then(() => (init_config2(), config_exports));
     const { applyConfigOnBoot: applyConfigOnBoot2 } = await Promise.resolve().then(() => (init_config_apply(), config_apply_exports));