hanoman 0.1.5 → 0.1.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hanoman",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "description": "Orchestrator + dashboard workflow docs-driven untuk sesi Claude Code / Codex",
   "type": "module",
   "repository": {

package/prisma/migrations/20260731000000_spec_created_started_at/migration.sql

@@ -0,0 +1,43 @@
+-- SPEC-408 · ADR-0090 · stempel waktu backlog: `Spec.createdAt` + `Spec.startedAt`.
+--
+-- SQLite melarang `ALTER TABLE … ADD COLUMN … DEFAULT CURRENT_TIMESTAMP` (default non-konstan),
+-- jadi kolom ber-default waktu HARUS lewat redefinisi tabel. Redefinisi itu sekaligus tempat
+-- backfill baris lama: `updatedAt` adalah satu-satunya jejak waktu yang pernah ada, dan `baseSha`
+-- adalah penanda "pernah dikerjakan" yang sudah dipakai sistem (scheduler sources/backlog.ts).
+-- Backfill ini APROKSIMASI dan dinyatakan terbuka di ADR-0090 — mengisinya dengan waktu migration
+-- dijalankan akan membuat seluruh backlog lama tampak dibuat hari ini, yang lebih menyesatkan.
+PRAGMA foreign_keys=OFF;
+PRAGMA defer_foreign_keys=ON;
+
+CREATE TABLE "new_Spec" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "projectId" TEXT NOT NULL,
+    "title" TEXT NOT NULL,
+    "source" TEXT NOT NULL,
+    "stage" TEXT NOT NULL,
+    "priority" TEXT NOT NULL,
+    "author" TEXT NOT NULL,
+    "objective" TEXT NOT NULL,
+    "payload" JSONB,
+    "branchFrom" TEXT,
+    "baseSha" TEXT,
+    "headSha" TEXT,
+    "version" INTEGER NOT NULL DEFAULT 0,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "startedAt" DATETIME,
+    "updatedAt" DATETIME NOT NULL,
+    CONSTRAINT "Spec_projectId_fkey" FOREIGN KEY ("projectId") REFERENCES "Project" ("id") ON DELETE CASCADE ON UPDATE CASCADE
+);
+
+INSERT INTO "new_Spec" ("id","projectId","title","source","stage","priority","author","objective","payload","branchFrom","baseSha","headSha","version","createdAt","startedAt","updatedAt")
+SELECT "id","projectId","title","source","stage","priority","author","objective","payload","branchFrom","baseSha","headSha","version",
+       "updatedAt",
+       CASE WHEN "baseSha" IS NOT NULL THEN "updatedAt" ELSE NULL END,
+       "updatedAt"
+FROM "Spec";
+
+DROP TABLE "Spec";
+ALTER TABLE "new_Spec" RENAME TO "Spec";
+
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/migrations/20260731120000_lead_decision/migration.sql

@@ -0,0 +1,33 @@
+-- SPEC-409 · ADR-0091 · hanoman-lead: jejak keputusan + opt-in lead per project.
+--
+-- Ditulis tangan (bukan `migrate dev`): worktree tetangga membuat `migrate dev` me-reset DB saat
+-- ada drift. Keduanya ADITIF — tak ada tabel yang diredefinisi, tak ada data yang disentuh.
+--
+-- `Project.leadOptIn` boleh lewat ALTER TABLE karena default-nya KONSTAN (`false`); larangan SQLite
+-- hanya berlaku untuk default non-konstan seperti CURRENT_TIMESTAMP (lihat migration SPEC-408).
+ALTER TABLE "Project" ADD COLUMN "leadOptIn" BOOLEAN NOT NULL DEFAULT false;
+
+CREATE TABLE "LeadDecision" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "projectId" TEXT NOT NULL,
+    "specId" TEXT,
+    "sessionId" TEXT,
+    "gate" TEXT NOT NULL,
+    "kind" TEXT NOT NULL,
+    "question" TEXT NOT NULL,
+    "answer" TEXT NOT NULL,
+    "reason" TEXT NOT NULL,
+    "refs" JSONB NOT NULL,
+    "confidence" TEXT NOT NULL,
+    "action" TEXT NOT NULL DEFAULT 'none',
+    "status" TEXT NOT NULL DEFAULT 'berlaku',
+    "weighty" BOOLEAN NOT NULL DEFAULT false,
+    "supersededById" TEXT,
+    "actor" TEXT NOT NULL DEFAULT 'lead',
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL
+);
+
+CREATE INDEX "LeadDecision_projectId_createdAt_idx" ON "LeadDecision"("projectId", "createdAt");
+CREATE INDEX "LeadDecision_specId_idx" ON "LeadDecision"("specId");
+CREATE INDEX "LeadDecision_sessionId_idx" ON "LeadDecision"("sessionId");

package/prisma/migrations/20260731180000_drop_errors_sdk_crossaudit/migration.sql

@@ -0,0 +1,58 @@
+-- SPEC-384 · ADR-0092 · cabut error monitoring (SPEC-249/254/269/271/276/296) dan cross-audit
+-- (SPEC-337). Pemantauan error produksi pindah ke Uptrace; data di bawah ini tak punya pembaca
+-- lagi. DESTRUKTIF & TAK BISA DIBATALKAN.
+--
+-- Byte source-map hidup di HANOMAN_UPLOAD_DIR dengan nama opaque `<uuid>.map` — DIREKTORI YANG
+-- SAMA dengan lampiran tiket. Migration SQL tak bisa menyentuh filesystem, jadi pembersihannya
+-- adalah langkah runbook manual yang dijalankan SEBELUM migration ini: baca
+-- `SELECT storageKey FROM SourceMapArtifact` lalu hapus tepat berkas-berkas itu (JANGAN direktorinya
+-- — lampiran tiket ikut hilang). Lihat internal/docs/operations/production.md. Melewatkannya hanya
+-- menyisakan byte inert.
+
+-- `defer_foreign_keys` wajib berpasangan dengan `foreign_keys=OFF` di sini: Spec & Ticket memegang
+-- FK ke "Project", dan rebuild di bawah menjatuhkan tabel itu sebelum penggantinya bernama sama.
+-- Idiom yang sama dipakai migration SPEC-408.
+PRAGMA foreign_keys=OFF;
+PRAGMA defer_foreign_keys=ON;
+
+-- 1. Tabel. ErrorEvent dulu (FK → ErrorGroup).
+DROP TABLE IF EXISTS "ErrorEvent";
+DROP TABLE IF EXISTS "SourceMapArtifact";
+DROP TABLE IF EXISTS "ErrorGroup";
+DROP TABLE IF EXISTS "ProjectLink";
+
+-- 2. Project kehilangan kolom DSN. Table rebuild (pola Prisma untuk SQLite), bukan DROP COLUMN:
+--    berkas DB ini bisa dibuka SQLite versi mana pun yang dibawa instalasi npm pengguna.
+CREATE TABLE "new_Project" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "name" TEXT NOT NULL,
+    "desc" TEXT NOT NULL,
+    "kind" TEXT NOT NULL,
+    "repoDir" TEXT,
+    "gitRemote" TEXT,
+    "stack" TEXT NOT NULL DEFAULT '',
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "version" INTEGER NOT NULL DEFAULT 0,
+    "updatedAt" DATETIME NOT NULL,
+    "helpEnabled" BOOLEAN NOT NULL DEFAULT false,
+    "schedulerOptIn" BOOLEAN NOT NULL DEFAULT false,
+    "leadOptIn" BOOLEAN NOT NULL DEFAULT false
+);
+INSERT INTO "new_Project" ("id","name","desc","kind","repoDir","gitRemote","stack","createdAt","version","updatedAt","helpEnabled","schedulerOptIn","leadOptIn")
+SELECT "id","name","desc","kind","repoDir","gitRemote","stack","createdAt","version","updatedAt","helpEnabled","schedulerOptIn","leadOptIn" FROM "Project";
+DROP TABLE "Project";
+ALTER TABLE "new_Project" RENAME TO "Project";
+
+-- 3. Baris yang nilainya tak lagi sah menurut zod. Dibiarkan hidup, ia menggagalkan pembacaan
+--    daftar notifikasi / backlog dengan galat parse — bukan dengan pesan yang berguna.
+DELETE FROM "Notification" WHERE "type" = 'error';
+-- Spec bersumber cross-audit DINORMALKAN, bukan dihapus: backlog item-nya pekerjaan nyata dengan
+-- branch & dokumen; yang hilang cuma label asalnya.
+UPDATE "Spec" SET "source" = 'audit' WHERE "source" = 'cross-audit';
+DELETE FROM "SyncLog" WHERE "entity" = 'errorGroup';
+DELETE FROM "SyncOutbox" WHERE "entity" = 'errorGroup';
+DELETE FROM "SyncConflict" WHERE "entity" = 'errorGroup';
+DELETE FROM "SchedulerQueueItem" WHERE "source" = 'errors';
+
+PRAGMA foreign_keys=ON;
+PRAGMA defer_foreign_keys=OFF;

package/prisma/schema.prisma

@@ -18,34 +18,11 @@ model Project {
   createdAt DateTime @default(now())
   version   Int      @default(0) // SPEC-213 · version-stamp sync (ADR-0045)
   updatedAt DateTime @updatedAt
-  ingestKeyHash   String? // SPEC-249 · sha256(ingest key) hex; null = monitoring off. TAK PERNAH ke client.
-  ingestKeyPrefix String? // SPEC-249 · ~12-16 char awal key untuk hint UI (bukan rahasia)
   helpEnabled Boolean @default(false) // SPEC-253 · opt-in Help Center publik
   schedulerOptIn Boolean @default(false) // SPEC-294 · ADR-0072 · opt-in scheduler otonom (LOCAL — tak masuk FIELDS sync)
+  leadOptIn      Boolean @default(false) // SPEC-409 · ADR-0091 · opt-in hanoman-lead (LOCAL — cermin schedulerOptIn)
   specs       Spec[]
-  errorGroups ErrorGroup[]
   tickets     Ticket[]
-  sourceMaps  SourceMapArtifact[] // SPEC-276 · source-map ter-upload per release (symbolication)
-  linksOut    ProjectLink[] @relation("ProjectLinkFrom") // SPEC-337 · project ini bergantung pada …
-  linksIn     ProjectLink[] @relation("ProjectLinkTo")   // SPEC-337 · … yang bergantung pada project ini
-}
-
-// SPEC-337 · ADR-0075 · relasi integrasi/dependency BERARAH antar project: from BERGANTUNG PADA to.
-// LOCAL-only (tak masuk SYNCED): id cuid + unique pasangan bertabrakan saat upsert-by-id lintas device.
-// onUpdate: Cascade → rename project (ADR-0064) merambat gratis; tak ada ref longgar baru.
-model ProjectLink {
-  id            String   @id @default(cuid())
-  fromProjectId String
-  toProjectId   String
-  kind          String   // api | sdk | data | event | lainnya (zLinkKind)
-  note          String   @default("") // bentuk integrasinya — disalin apa adanya ke prompt sesi audit lintas
-  createdAt     DateTime @default(now())
-  updatedAt     DateTime @updatedAt
-  from Project @relation("ProjectLinkFrom", fields: [fromProjectId], references: [id], onDelete: Cascade, onUpdate: Cascade)
-  to   Project @relation("ProjectLinkTo",   fields: [toProjectId],   references: [id], onDelete: Cascade, onUpdate: Cascade)
-
-  @@unique([fromProjectId, toProjectId])
-  @@index([toProjectId])
 }
 
 model Spec {
@@ -62,6 +39,13 @@ model Spec {
   baseSha    String? // SPEC-176 · ADR-0030 · commit detach worktree sesi (nilai balik addWorktree)
   headSha    String? // SPEC-176 · ADR-0030 · commit HEAD worktree di akhir sesi (sebelum removeWorktree)
   version    Int      @default(0) // SPEC-213 · version-stamp sync (ADR-0045)
+  // SPEC-408 · ADR-0090 · kapan item difilekan. Ditulis DB (@default), tak pernah oleh route —
+  // "dibuat" harus jadi fakta yang tak bisa diedit operator.
+  createdAt  DateTime @default(now())
+  // SPEC-408 · ADR-0090 · kapan sesi PERTAMA lahir untuk item ini. Ditulis di titik cekik yang
+  // sama dengan `baseSha` (services/session-launch.ts); jalur RESUME (ADR-0084) sengaja tidak
+  // menimpanya — melanjutkan sesi bukan "mulai lagi". null = belum pernah dikerjakan.
+  startedAt  DateTime?
   updatedAt  DateTime @updatedAt
   project   Project @relation(fields: [projectId], references: [id], onDelete: Cascade)
 }
@@ -302,7 +286,7 @@ model SchedulerQueueItem {
   id         String    @id @default(cuid())
   specId     String    @unique
   projectId  String
-  source     String    // backlog | errors | triase (asal checker)
+  source     String    // backlog | triase (asal checker) — SPEC-384 · `errors` dicabut (ADR-0092)
   priority   String    // tinggi | sedang | rendah (urutan drain)
   status     String    @default("queued") // queued | launched | done | failed
   sessionId  String?
@@ -313,6 +297,39 @@ model SchedulerQueueItem {
   @@index([status])
 }
 
+// SPEC-409 · ADR-0091 · jejak keputusan hanoman-lead. Data BARU yang harus bertahan (bukan nilai
+// turunan seperti coverage/PRD, ADR-0011/0018): pertanyaan yang ditanyakan sesi yang sudah mati,
+// dan alasan yang dipakai lead, tak bisa dihitung ulang dari sumber mana pun.
+//
+// LOCAL-ONLY (tak disync, cermin SessionHistory/SchedulerQueueItem): barisnya menunjuk sesi tmux &
+// worktree di MESIN INI — menyiarkannya ke hub akan mengirim rujukan yang tak ada di sana. Tanpa
+// `version`/notifySynced. Tak ada FK ke Project: sesi VPS memakai projectId sintetis
+// (konvensi yang sama dipakai SessionResult & SessionHistory).
+model LeadDecision {
+  id             String    @id @default(cuid())
+  projectId      String
+  specId         String?
+  sessionId      String?
+  gate           String    // contract | detected | pulse (pintu masuk)
+  kind           String    // answer | order | collision | quality | refusal
+  question       String
+  answer         String
+  reason         String
+  refs           Json      // string[] — hanya rujukan yang benar-benar ada di repo (AC-6)
+  confidence     String    // tinggi | sedang | ragu
+  action         String    @default("none") // permukaan tindakan lead (allowlist, shared/src/lead.ts)
+  status         String    @default("berlaku") // berlaku | ditimpa | dibatalkan | gagal
+  weighty        Boolean   @default(false)     // memicu notifikasi (AC-25)
+  supersededById String?   // baris yang menimpanya (jawaban operator, AC-28)
+  actor          String    @default("lead")    // lead | operator — siapa yang mengeluarkan baris ini
+  createdAt      DateTime  @default(now())
+  updatedAt      DateTime  @updatedAt
+
+  @@index([projectId, createdAt])
+  @@index([specId])
+  @@index([sessionId])
+}
+
 // SPEC-215 · ADR-0049 · LOCAL-ONLY: override config runtime (env → DB). Tak pernah disync.
 model RuntimeConfig {
   key       String   @id
@@ -320,68 +337,8 @@ model RuntimeConfig {
   updatedAt DateTime @updatedAt
 }
 
-// SPEC-249 · ADR-0060 · grup error per project (fingerprint dedup). SPEC-268/ADR-0066: agregat
-// grup kini tersync (version-stamp); ErrorEvent mentah tetap server-local (tak disync).
-model ErrorGroup {
-  id          String   @id @default(cuid())
-  projectId   String
-  fingerprint String
-  type        String
-  message     String
-  sampleStack String?
-  sampleFrames Json?   // SPEC-276 · ADR-0070 · frame mentah sample (disymbolikasi saat display)
-  release     String?  // SPEC-276 · ADR-0070 · release terakhir (korelasi build + surface di UI)
-  environment String
-  status      String   @default("new") // new | escalated | resolved
-  count       Int      @default(0)
-  firstSeenAt DateTime @default(now())
-  lastSeenAt  DateTime @default(now())
-  specId      String?
-  createdAt   DateTime @default(now())
-  updatedAt   DateTime @updatedAt
-  version     Int      @default(0) // SPEC-268 · version-stamp sync (ADR-0066)
-  project     Project      @relation(fields: [projectId], references: [id], onDelete: Cascade)
-  events      ErrorEvent[]
-
-  @@unique([projectId, fingerprint])
-  @@index([projectId, lastSeenAt])
-}
-
-// SPEC-249 · ADR-0060 · kejadian error mentah, dipangkas retensi (cap per grup + umur).
-model ErrorEvent {
-  id          String     @id @default(cuid())
-  groupId     String
-  projectId   String
-  type        String
-  message     String
-  stack       String?
-  frames      Json?      // SPEC-276 · ADR-0070 · frame terstruktur mentah dari SDK
-  environment String
-  release     String?
-  context     Json?
-  receivedAt  DateTime   @default(now())
-  group       ErrorGroup @relation(fields: [groupId], references: [id], onDelete: Cascade)
-
-  @@index([groupId, receivedAt])
-  @@index([projectId, receivedAt])
-}
 
-// SPEC-276 · ADR-0070 · source-map ter-upload per release untuk symbolication. Byte map di
-// HANOMAN_UPLOAD_DIR (server-local, TAK disync — cermin TicketAttachment biner & ErrorEvent).
-model SourceMapArtifact {
-  id         String   @id @default(cuid())
-  projectId  String
-  release    String
-  filename   String   // basename artifact hasil-build (mis. index-4f3a2b.js) yang dipetakan map ini
-  debugId    String?
-  storageKey String   // berkas opaque (uuid.map) di upload dir
-  size       Int
-  createdAt  DateTime @default(now())
-  project    Project  @relation(fields: [projectId], references: [id], onDelete: Cascade)
 
-  @@unique([projectId, release, filename])
-  @@index([projectId, release])
-}
 
 // SPEC-253 · ADR-0062 · tiket keluhan Help Center. SPEC-268/ADR-0066: metadata tiket kini tersync
 // (version-stamp); lampiran (TicketAttachment, file biner) tetap server-local (tak disync).
@@ -396,7 +353,7 @@ model Ticket {
   status        String   @default("new") // new | accepted | rejected (zTicketStatus)
   accessKeyHash String   @unique // sha256(kunci opaque) — lookup cek status. Plaintext hanya sekali.
   shareToken    String?  @unique // SPEC-293 · token bagikan link status publik (hnm_shr_…); operator → pelapor
-  specId        String?  // soft-link Spec hasil promosi (cermin ErrorGroup.specId)
+  specId        String?  // soft-link Spec hasil promosi
   createdAt     DateTime @default(now())
   updatedAt     DateTime @updatedAt
   version       Int      @default(0) // SPEC-268 · version-stamp sync (ADR-0066)
@@ -411,7 +368,7 @@ model Ticket {
 model TicketAttachment {
   id         String   @id @default(cuid())
   ticketId   String
-  projectId  String   // denormal — isolasi & query murah (pola ErrorEvent.projectId)
+  projectId  String   // denormal — isolasi & query murah
   filename   String   // nama asli tersanitasi (display saja)
   mimeType   String   // image/png | image/jpeg | image/webp
   size       Int