hanoman 0.1.55 → 0.1.57

package/docs/agent-integration.md

@@ -100,7 +100,7 @@ perlu mengambilnya, cukup rujuk tabel di bawah:
 |---|---|---|
 | `projects` | `/api/projects*` | project, branch, binding, Help Center |
 | `backlog` | `/api/specs*` | spec/backlog, dokumen, review diff, integrate |
-| `sessions` | `/api/terminal*` (+ WS terminal) | jalankan sesi agen/shell, kirim input — **high-risk (RCE)** |
+| `sessions` | `/api/terminal*` (+ WS terminal) | jalankan sesi agen/shell, kirim input, baca & jawab dialog sesi (SPEC-899) — **high-risk (RCE)** |
 | `docs` | `/api/prds*`, `/api/projects/:id/{docs,prds}*` | dokumen SoT project & PRD |
 | `ide` | `/api/projects/:id/{tree,file,file-diff,working-status,graph,commit,git,status,stashes,remotes,compare,archive,pr-url}*` | tree/file working tree, operasi git |
 | `vps` | `/api/vps*` | kelola VPS, audit, harden, konsol — **high-risk (remote exec)** |
@@ -149,6 +149,11 @@ token selalu **403**, apa pun capability-nya, dan tak ada capability yang bisa m
   tak ada capability yang bisa berarti apa pun di sana. Backlog & tiket yang sama tersedia lewat
   `/api/specs` dan `/api/tickets` dengan capability `backlog`/`support` (ADR-0110)
 - `/api/client-accounts*` — membuat & mencabut akun klien beserta password awalnya (ADR-0110)
+- `/api/session-events` — event pertanyaan sesi untuk hanoman-lead (SPEC-909/ADR-0146). Pemanggilnya
+  **hook sesi**, bukan manusia dan bukan agen: kredensialnya token turunan per sesi, dan agen yang
+  bisa memalsukan "sesi X bertanya Y" bisa menggerakkan lead atas nama sesi mana pun — itu peniruan
+  identitas, bukan capability. Agent token di sini menerima **401** (token sesi tak cocok), bukan
+  403: gate cookie mem-bypass path-nya dan route menegakkan tokennya sendiri
 - `POST /api/update/apply` dan tulis lain di bawah prefix status (`/api/limits`, `/api/update`,
   `/api/events`, `/api/fs`, `/api/health`) — **baca**-nya terbuka untuk token mana pun, **tulis**-nya
   cookie-only
@@ -466,6 +471,15 @@ dan seluruh `/api/vps*` (remote exec) **tidak ikut**, begitu pula merge/rebase (
 penghapusan backlog, dan perubahan `stage`. Batasan ini ada di katalog toolnya, bukan di token:
 token yang punya `sessions:write` sekalipun tak akan menemukan tool untuk memakainya. Lihat §8.
 
+**Menjawab dialog sesi** (`GET /api/terminal/sessions/:id/dialog`,
+`POST /api/terminal/sessions/:id/dialog/answer`, dan sejak SPEC-909 · ADR-0146 juga
+`POST /api/terminal/sessions/:id/dialog/takeover` — merebut sesi dari hanoman-lead) sengaja **tak
+punya tool** — dan alasannya lebih tajam dari sekadar "mengeksekusi": endpoint itu menjawab pertanyaan
+yang **secara desain ditujukan kepada manusia** (`AskUserQuestion`). Agen yang bisa memanggilnya
+bisa menjawab pertanyaannya sendiri, dan gerbang "manusia terakhir yang memutuskan" runtuh lewat
+pintu belakang. Capability-nya tetap ada (`sessions:read`/`sessions:write`) karena peta itu berlaku
+untuk seluruh permukaan HTTP, bukan hanya untuk yang muncul di MCP.
+
 **Lampiran backlog** (`/api/specs/:id/attachments*`, SPEC-843 · ADR-0124) juga sengaja **tak punya
 tool**: berkasnya lahir dari disk manusia, bukan dari model, dan tool MCP berbentuk JSON sehingga
 byte biner tak punya representasi di sana. REST-nya tetap terjangkau agent token

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hanoman",
-  "version": "0.1.55",
+  "version": "0.1.57",
   "description": "Orchestrator + dashboard workflow docs-driven untuk sesi Claude Code / Codex",
   "type": "module",
   "repository": {
@@ -23,6 +23,7 @@
     "web",
     "prisma",
     "docs",
+    "scripts",
     "README.md",
     "LICENSE"
   ],

package/prisma/migrations/20260821120000_project_handled_by/migration.sql

@@ -0,0 +1,9 @@
+-- SPEC-880 · ADR-0135 · penanda "ditangani oleh": daftar hanoman client pemegang project.
+--
+-- Ditulis tangan (bukan `migrate dev`): worktree tetangga membuat `migrate dev` me-reset DB saat
+-- ada drift. ADITIF murni — satu kolom NULLABLE tanpa default, tak ada tabel diredefinisi.
+--
+-- TANPA backfill, sengaja: sebelum spec ini penandanya memang tak ada di mana pun, dan menebaknya
+-- dari SessionResult.deviceId akan mencampur "jejak eksekusi" dengan "pernyataan kepemilikan".
+-- NULL = "belum ditetapkan", dan itu jawaban yang jujur.
+ALTER TABLE "Project" ADD COLUMN "handledBy" JSONB;

package/prisma/migrations/20260822120000_vps_provision/migration.sql

@@ -0,0 +1,10 @@
+-- SPEC-883 · ADR-0137 · penandaan komponen hasil probe + profil provisioning.
+--
+-- Ditulis tangan (bukan `migrate dev`): worktree tetangga membuat `migrate dev` me-reset DB saat
+-- ada drift. ADITIF murni — tiga kolom NULLABLE tanpa default, tak ada tabel diredefinisi.
+--
+-- TANPA backfill, sengaja: sebelum spec ini status komponen memang tak pernah diukur di mana pun.
+-- NULL = "belum diperiksa", dan itu jawaban yang jujur — bukan "tak ada komponen".
+ALTER TABLE "Vps" ADD COLUMN "components" JSONB;
+ALTER TABLE "Vps" ADD COLUMN "componentsCheckedAt" DATETIME;
+ALTER TABLE "Vps" ADD COLUMN "provisionProfile" TEXT;

package/prisma/migrations/20260822130000_vps_last_published_at/migration.sql

@@ -0,0 +1,3 @@
+-- SPEC-885 · ADR-0138 · aditif, nullable, tanpa default: nol backfill dan aman untuk hub
+-- produksi yang sedang berjalan (hub = live, migrate additif saja).
+ALTER TABLE "Vps" ADD COLUMN "lastPublishedAt" DATETIME;

package/prisma/schema.prisma

@@ -24,6 +24,10 @@ model Project {
   // SPEC-486 · ADR-0103 · kebijakan auto-merge saat backlog item selesai (LOCAL — tak masuk
   // FIELDS sync, cermin repoDir/schedulerOptIn). null = tanpa auto-merge (default, nol backfill).
   autoMerge      Json?
+  // SPEC-880 · ADR-0135 · daftar hanoman client yang memegang project ini: [{deviceId,name}].
+  // BERBEDA dari repoDir/schedulerOptIn/leadOptIn/autoMerge di atas — kolom ini MASUK FIELDS sync,
+  // karena justru menyeberangnya nilai ini yang jadi inti SPEC-880. null = belum ditetapkan.
+  handledBy      Json?
   specs        Spec[]
   tickets      Ticket[]
   customAgents CustomAgent[] // SPEC-450 · ADR-0094 · custom agent milik project ini
@@ -287,6 +291,17 @@ model Vps {
   lastAuditAt DateTime?
   audit       Json?     // VpsCheck[] — [{ check, status, detail }]
   hardened    Boolean   @default(false) // derived: semua check kritis pass
+  // SPEC-883 · ADR-0137 · hasil MODE=probe provision.sh: { [ComponentId]: { status, detail } }.
+  // DITULIS HANYA dari probe, tak pernah dari niat "kami barusan memasang X" (SPEC-487).
+  // LOCAL-ONLY: ketiganya sengaja di luar FIELDS.vps (pelajaran SPEC-880).
+  components          Json?
+  componentsCheckedAt DateTime?
+  provisionProfile    String? // "lab" | "production" — profil yang terakhir diterapkan
+  // SPEC-885 · ADR-0138 · kapan baris ini TERAKHIR diterbitkan ke change-feed. LOCAL-ONLY dengan
+  // alasan yang sama seperti tiga kolom di atas: ia properti mesin ini, bukan pernyataan bersama.
+  // Dipakai `runHealth` untuk denyut berjangka saat `health` tak berubah — tanpa itu `lastSeenAt`
+  // (yang IKUT menyeberang) akan mendarat basi selamanya di tiap client.
+  lastPublishedAt     DateTime?
   version     Int       @default(0) // SPEC-213 · version-stamp sync (ADR-0045)
   updatedAt   DateTime  @updatedAt
   snapshots   VpsAuditSnapshot[] // SPEC-220 · riwayat audit kepatuhan

package/scripts/vps/agent.Containerfile

@@ -0,0 +1,12 @@
+# SPEC-883 · ADR-0137 · image sesi agen untuk profil production (ADR-0117).
+# Kredensial TIDAK pernah masuk image: sandboxArgv me-mount HANOMAN_AGENT_CREDENTIAL_DIR
+# sebagai /agent-home:ro dan menyetel HOME=/agent-home.
+FROM docker.io/library/node:22-bookworm-slim
+
+# SPEC-909 · ADR-0146 · `curl` dipakai hook sesi untuk mengirim pertanyaan agen ke server.
+# Tanpanya hook diam & `exit 0` — tak pernah memblokir agen, tapi juga tak pernah sampai.
+RUN apt-get update && apt-get install -y --no-install-recommends \
+      git ca-certificates ripgrep curl && rm -rf /var/lib/apt/lists/*
+RUN npm i -g @anthropic-ai/claude-code @openai/codex
+
+WORKDIR /workspace

package/scripts/vps/audit.sh

@@ -0,0 +1,158 @@
+#!/usr/bin/env bash
+# hanoman-audit · SPEC-164 — via `ssh <host> 'sudo -n bash -s' < audit.sh`.
+# Output per baris: CHECK <nama> <pass|fail|warn> <detail…> — diparsing server/src/services/vps-audit.ts.
+set -u
+emit() { echo "CHECK $1 $2 ${3:-}"; }
+emit_stack() { echo "STACK $1 $2 ${3:-}"; }  # SPEC-221 · deteksi stack app-layer (advisory)
+
+# Script sampai sini artinya ssh+bash hidup; yang diverifikasi tinggal root/sudo.
+if [ "$(id -u)" = 0 ]; then emit sudo_ok pass root
+else emit sudo_ok fail "bukan root — beri passwordless sudo pada user ini"; fi
+
+# ponytail: path overridable HANYA untuk test (fixture os-release); default = /etc/os-release
+. "${HANOMAN_OS_RELEASE:-/etc/os-release}" 2>/dev/null || true
+FAM=""
+case "${ID:-} ${ID_LIKE:-}" in
+  *debian*|*ubuntu*) FAM=deb ;;
+  *rhel*|*fedora*|*centos*|*rocky*|*alma*|*opencloudos*) FAM=rhel ;;
+esac
+if [ -n "$FAM" ]; then emit os_supported pass "${ID:-?} ${VERSION_ID:-?}"
+else
+  emit os_supported fail "${ID:-unknown} — hanya keluarga debian/rhel/opencloudos"
+  exit 0   # check lain tak bermakna di distro asing
+fi
+
+# --- sshd: konfigurasi EFEKTIF (sshd -T), bukan berkas — drop-in & default ikut terbaca.
+SSHD_T=$( (sshd -T 2>/dev/null || /usr/sbin/sshd -T 2>/dev/null) || true )
+sshd_opt() { echo "$SSHD_T" | awk -v k="$1" '$1==k{print $2; exit}'; }
+SSH_PORT=22
+if [ -z "$SSHD_T" ]; then
+  # Dua sebab: sshd tak terpasang, atau kita bukan root. Keduanya = konfigurasi tak terbaca.
+  emit ssh_root_login fail "sshd -T tak terbaca (sshd tak terpasang / bukan root)"
+  emit ssh_password_auth fail "sshd -T tak terbaca (sshd tak terpasang / bukan root)"
+else
+  v=$(sshd_opt permitrootlogin)
+  # `without-password` adalah bagaimana sshd -T menormalkan `prohibit-password` (alias lama):
+  # tanpa baris ini, VPS yang root-nya sudah key-only dilaporkan fail selamanya (ADR-0025 §5).
+  case "$v" in
+    no|prohibit-password|without-password) emit ssh_root_login pass "$v" ;;
+    *) emit ssh_root_login fail "PermitRootLogin ${v:-default}" ;;
+  esac
+  v=$(sshd_opt passwordauthentication)
+  if [ "$v" = "no" ]; then emit ssh_password_auth pass
+  else emit ssh_password_auth fail "PasswordAuthentication ${v:-default}"; fi
+  p=$(sshd_opt port); SSH_PORT=${p:-22}
+fi
+
+# --- firewall
+if [ "$FAM" = deb ]; then
+  if ufw status 2>/dev/null | grep -q "Status: active"; then emit firewall pass "ufw active"
+  else emit firewall fail "ufw tidak aktif"; fi
+else
+  if firewall-cmd --state 2>/dev/null | grep -q running; then emit firewall pass "firewalld running"
+  else emit firewall fail "firewalld tidak jalan"; fi
+fi
+
+# --- fail2ban
+if systemctl is-active --quiet fail2ban 2>/dev/null; then emit fail2ban pass aktif
+else emit fail2ban fail "service tidak aktif"; fi
+
+# --- auto security update
+if [ "$FAM" = deb ]; then
+  if grep -qs '"1"' /etc/apt/apt.conf.d/20auto-upgrades; then emit auto_updates pass "unattended-upgrades"
+  else emit auto_updates fail "unattended-upgrades belum dikonfigurasi"; fi
+else
+  if systemctl is-enabled --quiet dnf-automatic.timer 2>/dev/null; then emit auto_updates pass "dnf-automatic.timer"
+  else emit auto_updates fail "dnf-automatic.timer tidak aktif"; fi
+fi
+
+# --- warning-level
+if timedatectl show -p NTP --value 2>/dev/null | grep -qi yes; then emit ntp pass aktif
+else emit ntp warn "NTP tidak aktif — timedatectl set-ntp true"; fi
+
+# Listener publik di luar {port SSH, 80, 443}. Loopback tak dihitung.
+PORTS=$(ss -tlnH 2>/dev/null | awk '{print $4}' | grep -E '^(0\.0\.0\.0|\[::\]|\*):' \
+  | sed -E 's/.*:([0-9]+)$/\1/' | sort -un | grep -vE "^(${SSH_PORT}|80|443)$" \
+  | tr '\n' ',' | sed 's/,$//')
+if [ -n "$PORTS" ]; then emit open_ports warn "port publik tak terdaftar: $PORTS"
+else emit open_ports pass; fi
+
+if [ "$FAM" = deb ]; then
+  N=$(apt-get -s upgrade 2>/dev/null | grep -c '^Inst.*[Ss]ecurity')
+else
+  N=$(dnf -q updateinfo list security 2>/dev/null | grep -c .)
+fi
+if [ "${N:-0}" -gt 0 ] 2>/dev/null; then emit pending_updates warn "$N security update tertunda"
+else emit pending_updates pass; fi
+
+# =====================================================================================
+# SPEC-220 · CHECK per itemId katalog (item ber-probe). itemId = kunci kanonik katalog
+# (server/src/vps/catalog). Diparsing mapToCatalog() → scoring. Legacy CHECK di atas tetap.
+# =====================================================================================
+
+# --- firewall aktif → fw-b1 (reuse deteksi FAM di atas)
+if [ "$FAM" = deb ]; then
+  ufw status 2>/dev/null | grep -q "Status: active" && emit fw-b1 pass || emit fw-b1 fail "ufw nonaktif"
+else
+  firewall-cmd --state 2>/dev/null | grep -q running && emit fw-b1 pass || emit fw-b1 fail "firewalld mati"
+fi
+# --- block ping/ICMP → fw-b3 (sysctl icmp_echo_ignore_all)
+[ "$(sysctl -n net.ipv4.icmp_echo_ignore_all 2>/dev/null)" = 1 ] && emit fw-b3 pass || emit fw-b3 fail "ICMP echo tidak diblok"
+# --- fail2ban → ids-b1
+systemctl is-active --quiet fail2ban 2>/dev/null && emit ids-b1 pass || emit ids-b1 fail "fail2ban nonaktif"
+# --- auto security update → sys-b1
+if [ "$FAM" = deb ]; then
+  grep -qs '"1"' /etc/apt/apt.conf.d/20auto-upgrades && emit sys-b1 pass || emit sys-b1 fail "unattended-upgrades belum aktif"
+else
+  systemctl is-enabled --quiet dnf-automatic.timer 2>/dev/null && emit sys-b1 pass || emit sys-b1 fail "dnf-automatic.timer nonaktif"
+fi
+
+# --- sshd (konfigurasi efektif via $SSHD_T / sshd_opt yang sudah didefinisikan di atas)
+if [ -n "$SSHD_T" ]; then
+  # ssh-b1 ganti port default
+  [ "$SSH_PORT" != 22 ] && emit ssh-b1 pass "port $SSH_PORT" || emit ssh-b1 fail "masih port 22"
+  # ssh-b2 disable root login
+  case "$(sshd_opt permitrootlogin)" in no|prohibit-password|without-password) emit ssh-b2 pass ;; *) emit ssh-b2 fail "PermitRootLogin $(sshd_opt permitrootlogin)" ;; esac
+  # ssh-b3 disable password auth
+  [ "$(sshd_opt passwordauthentication)" = no ] && emit ssh-b3 pass || emit ssh-b3 fail "PasswordAuthentication $(sshd_opt passwordauthentication)"
+  # ssh-i2 idle timeout (ClientAliveInterval > 0)
+  cai=$(sshd_opt clientaliveinterval); [ "${cai:-0}" -gt 0 ] 2>/dev/null && emit ssh-i2 pass "ClientAliveInterval $cai" || emit ssh-i2 fail "ClientAliveInterval 0"
+  # ssh-i3 X11 & TCP forwarding off
+  { [ "$(sshd_opt x11forwarding)" = no ] && [ "$(sshd_opt allowtcpforwarding)" = no ]; } && emit ssh-i3 pass || emit ssh-i3 fail "X11/TCP forwarding aktif"
+  # ssh-i5 MaxAuthTries <= 4
+  mat=$(sshd_opt maxauthtries); [ "${mat:-6}" -le 4 ] 2>/dev/null && emit ssh-i5 pass "MaxAuthTries $mat" || emit ssh-i5 fail "MaxAuthTries ${mat:-default}"
+else
+  for k in ssh-b1 ssh-b2 ssh-b3 ssh-i2 ssh-i3 ssh-i5; do emit "$k" fail "sshd -T tak terbaca"; done
+fi
+
+# --- kernel sysctl → ker-*
+sctl() { sysctl -n "$1" 2>/dev/null; }
+[ "$(sctl net.ipv4.ip_forward)" = 0 ] && emit ker-b1 pass || emit ker-b1 fail "ip_forward=$(sctl net.ipv4.ip_forward)"
+[ "$(sctl net.ipv4.tcp_syncookies)" = 1 ] && emit ker-b2 pass || emit ker-b2 fail "tcp_syncookies off"
+[ "$(sctl net.ipv4.conf.all.accept_source_route)" = 0 ] && emit ker-b3 pass || emit ker-b3 fail "source_route on"
+[ "$(sctl net.ipv4.conf.all.accept_redirects)" = 0 ] && emit ker-b4 pass || emit ker-b4 fail "icmp_redirects on"
+[ "$(sctl net.ipv4.conf.all.rp_filter)" = 1 ] && emit ker-b5 pass || emit ker-b5 fail "rp_filter off"
+[ "$(sctl kernel.randomize_va_space)" = 2 ] && emit ker-i4 pass || emit ker-i4 fail "ASLR != 2"
+[ "$(sctl fs.suid_dumpable)" = 0 ] && emit ker-i6 pass || emit ker-i6 fail "suid_dumpable != 0"
+
+# =============== SPEC-221 · deteksi stack app-layer (advisory) ===============
+# STACK <section> <present|absent> <detail>. `absent` BUKAN bukti pasti — layanan bisa jalan
+# di Docker yang tak terdeteksi probe bare-metal; karena itu jadi SARAN N/A, bukan auto-exclude.
+has_cmd() { command -v "$1" >/dev/null 2>&1; }
+# aaPanel
+{ [ -d /www/server/panel ] || has_cmd bt; } && emit_stack aapanel present "aaPanel terdeteksi" \
+  || emit_stack aapanel absent "tak ada /www/server/panel"
+# web server
+if has_cmd nginx || has_cmd apache2 || has_cmd httpd \
+   || pgrep -x nginx >/dev/null 2>&1 || pgrep -x apache2 >/dev/null 2>&1 || pgrep -x httpd >/dev/null 2>&1; then
+  emit_stack webserver present "nginx/apache terdeteksi"
+else emit_stack webserver absent "tak ada nginx/apache (cek Docker manual)"; fi
+# database
+if has_cmd mysql || has_cmd mariadb || has_cmd psql \
+   || pgrep -x mysqld >/dev/null 2>&1 || pgrep -x postgres >/dev/null 2>&1 \
+   || ss -tlnH 2>/dev/null | grep -qE ':(3306|5432)\b'; then
+  emit_stack database present "db terdeteksi"
+else emit_stack database absent "tak ada mysql/postgres (cek Docker manual)"; fi
+# ssl/tls
+if has_cmd certbot || [ -d /etc/letsencrypt/live ]; then emit_stack ssl present "certbot/letsencrypt"
+else emit_stack ssl absent "tak ada certbot"; fi

package/scripts/vps/harden.sh

@@ -0,0 +1,107 @@
+#!/usr/bin/env bash
+# hanoman-harden · SPEC-164 — idempotent; dijalankan HANYA lewat tombol Harden,
+# via `ssh <host> 'sudo -n env SSH_PORT=<port> SSH_USER=<user> bash -s' < harden.sh`.
+# Output: STEP <nama> <ok|fail> <detail…>. TIDAK membuat user, TIDAK mengganti port SSH,
+# TIDAK menyentuh service custom — itu jalur sesi Claude (SPEC-164 §5).
+set -u
+SSH_PORT="${SSH_PORT:-22}"
+step() { echo "STEP $1 $2 ${3:-}"; }
+
+[ "$(id -u)" = 0 ] || { step precheck fail "bukan root"; exit 1; }
+# ponytail: path overridable HANYA untuk test (fixture os-release); default = /etc/os-release
+. "${HANOMAN_OS_RELEASE:-/etc/os-release}" 2>/dev/null || true
+case "${ID:-} ${ID_LIKE:-}" in
+  *debian*|*ubuntu*) FAM=deb ;;
+  *rhel*|*fedora*|*centos*|*rocky*|*alma*|*opencloudos*) FAM=rhel ;;
+  *) step precheck fail "distro ${ID:-unknown} tidak didukung"; exit 1 ;;
+esac
+step precheck ok "$FAM ssh_port=$SSH_PORT"
+
+pkg() { if [ "$FAM" = deb ]; then DEBIAN_FRONTEND=noninteractive apt-get -qq install -y "$@" >/dev/null 2>&1
+        else dnf -q install -y "$@" >/dev/null 2>&1; fi; }
+[ "$FAM" = deb ] && apt-get -qq update >/dev/null 2>&1
+
+# 1 · firewall — allow port SSH DULU, baru enable (anti-lockout)
+if [ "$FAM" = deb ]; then
+  pkg ufw
+  if ufw allow "$SSH_PORT/tcp" >/dev/null 2>&1 && ufw allow 80/tcp >/dev/null 2>&1 \
+     && ufw allow 443/tcp >/dev/null 2>&1 && ufw --force enable >/dev/null 2>&1; then
+    step firewall ok "ufw aktif, allow $SSH_PORT/80/443"
+  else step firewall fail "ufw gagal"; fi
+else
+  pkg firewalld
+  if systemctl enable --now firewalld >/dev/null 2>&1 \
+     && firewall-cmd -q --permanent --add-port="$SSH_PORT/tcp" \
+     && firewall-cmd -q --permanent --add-service=http \
+     && firewall-cmd -q --permanent --add-service=https \
+     && firewall-cmd -q --reload; then
+    step firewall ok "firewalld aktif, allow $SSH_PORT/http/https"
+  else step firewall fail "firewalld gagal"; fi
+fi
+
+# 2 · fail2ban
+# fail2ban di RHEL-family butuh repo tambahan: EPEL, kecuali OpenCloudOS yang
+# memakai EPOL (epel-release tak ada di sana). Best-effort — gagal tak fatal.
+if [ "$FAM" = rhel ]; then
+  if [ "${ID:-}" = opencloudos ]; then pkg epol-release; else pkg epel-release; fi
+fi
+if pkg fail2ban; then
+  mkdir -p /etc/fail2ban/jail.d
+  cat > /etc/fail2ban/jail.d/hanoman.conf <<'EOF'
+[sshd]
+enabled = true
+# backend=systemd: baca journald, bukan /var/log/secure. Di RHEL/OpenCloudOS
+# journald-only berkas itu belum ada → backend file default gagal konfigurasi
+# jail sshd → service mati (SPEC-190). Deb sudah default systemd; aman lintas distro.
+backend = systemd
+maxretry = 3
+bantime = 1h
+findtime = 10m
+EOF
+  if systemctl enable --now fail2ban >/dev/null 2>&1 && systemctl restart fail2ban >/dev/null 2>&1; then
+    step fail2ban ok
+  else step fail2ban fail "service gagal start"; fi
+else step fail2ban fail "instalasi gagal"; fi
+
+# 3 · auto security update
+if [ "$FAM" = deb ]; then
+  if pkg unattended-upgrades; then
+    printf 'APT::Periodic::Update-Package-Lists "1";\nAPT::Periodic::Unattended-Upgrade "1";\n' \
+      > /etc/apt/apt.conf.d/20auto-upgrades
+    step auto_updates ok "unattended-upgrades"
+  else step auto_updates fail "instalasi gagal"; fi
+else
+  if pkg dnf-automatic && systemctl enable --now dnf-automatic.timer >/dev/null 2>&1; then
+    step auto_updates ok "dnf-automatic.timer"
+  else step auto_updates fail; fi
+fi
+
+# 4 · sshd — drop-in + sshd -t WAJIB pass sebelum reload (anti-lockout).
+# User terkonfigurasi = root → prohibit-password (key-only), bukan `no`:
+# `no` memutus akses hanoman sendiri (ADR-0025 §5).
+#
+# Nama berawalan `01-`, bukan `99-`: sshd memakai nilai PERTAMA yang ditemukan, dan
+# Include memuat drop-in berurutan nama. Image cloud Ubuntu memasang
+# 50-cloud-init.conf berisi `PasswordAuthentication yes` — sebuah 99-hanoman.conf
+# akan dibaca sesudahnya dan diabaikan diam-diam (diverifikasi dengan sshd -T).
+ROOT_LOGIN=no
+[ "${SSH_USER:-}" = root ] && ROOT_LOGIN=prohibit-password
+DROPIN=/etc/ssh/sshd_config.d/01-hanoman.conf
+mkdir -p /etc/ssh/sshd_config.d
+grep -qE '^Include /etc/ssh/sshd_config.d' /etc/ssh/sshd_config 2>/dev/null \
+  || sed -i '1i Include /etc/ssh/sshd_config.d/*.conf' /etc/ssh/sshd_config
+cat > "$DROPIN" <<EOF
+PermitRootLogin $ROOT_LOGIN
+PasswordAuthentication no
+MaxAuthTries 3
+EOF
+if sshd -t 2>/dev/null || /usr/sbin/sshd -t 2>/dev/null; then
+  systemctl reload sshd 2>/dev/null || systemctl reload ssh 2>/dev/null
+  step ssh ok "PermitRootLogin $ROOT_LOGIN · PasswordAuthentication no"
+else
+  rm -f "$DROPIN"
+  step ssh fail "sshd -t menolak konfigurasi — drop-in dibatalkan"
+fi
+
+# 5 · NTP
+if timedatectl set-ntp true 2>/dev/null; then step ntp ok; else step ntp fail; fi

package/scripts/vps/provision.sh

@@ -0,0 +1,270 @@
+#!/usr/bin/env bash
+# hanoman-provision · SPEC-883 · ADR-0137
+#
+# Marker "hanoman-provision" di baris atas WAJIB: server mengirim skrip ini lewat stdin dan
+# fixture test (server/test/fixtures/fake-ssh.sh) mencabang atas isi stdin memakai marker itu.
+#
+# Dua mode, dipilih lewat env MODE:
+#   MODE=probe                                 → COMP <id> <ok|partial|absent> <detail>
+#   MODE=apply ITEMS=a,b PROFILE=lab DRY_RUN=1 → STEP <id> <would|ok|fail|skip> <detail>
+#
+# NOL asumsi tentang SSH: skrip ini dijalankan lewat `ssh … bash -s` DAN secara lokal oleh
+# `hanoman provision`. Jangan pernah membaca $SSH_*, /dev/tty, atau berasumsi ada tty.
+# NOL rahasia: tak pernah membaca, menulis, atau meminta kredensial agen.
+set -uo pipefail   # sengaja TANPA -e: satu komponen gagal tak boleh membunuh laporan sisanya
+
+MODE="${MODE:-probe}"
+PROFILE="${PROFILE:-lab}"
+DOMAIN="${DOMAIN:-}"
+DRY_RUN="${DRY_RUN:-}"
+HANOMAN_PORT="${HANOMAN_PORT:-8787}"
+HANOMAN_USER="${HANOMAN_USER:-hanoman}"
+HANOMAN_DATA="${HANOMAN_DATA:-/var/lib/hanoman}"
+IMAGE="${IMAGE:-hanoman-agent:latest}"
+
+comp() { echo "COMP $1 $2 ${3:-}"; }
+step() { echo "STEP $1 $2 ${3:-}"; }
+have() { command -v "$1" >/dev/null 2>&1; }
+
+# ---------- probe ----------
+
+probe_base()   { if have git && have tmux && have curl; then comp base ok "git+tmux+curl"; else comp base absent "paket dasar belum lengkap"; fi; }
+probe_node()   { if have node; then comp node ok "$(node --version 2>/dev/null | head -1)"; else comp node absent ""; fi; }
+probe_podman() { if have podman; then comp podman ok "$(podman --version 2>/dev/null | head -1)"; else comp podman absent ""; fi; }
+probe_gh()     { if have gh; then comp gh partial not-logged-in; else comp gh absent ""; fi; }
+
+probe_caddy() {
+  if ! have caddy; then comp caddy absent ""; return; fi
+  if systemctl is-active --quiet caddy 2>/dev/null; then comp caddy ok "$(caddy version 2>/dev/null | head -1)"
+  else comp caddy partial service-inactive; fi
+}
+
+probe_hanoman() {
+  if ! have hanoman; then comp hanoman absent ""; return; fi
+  local v; v="$(hanoman --version 2>/dev/null | head -1)"
+  if systemctl is-active --quiet hanoman 2>/dev/null; then comp hanoman ok "$v"
+  else comp hanoman partial "service-inactive $v"; fi
+}
+
+probe_agent_image() {
+  if ! have podman; then comp agent-image absent "podman tak ada"; return; fi
+  local id; id="$(podman image inspect --format '{{.Id}}' "$IMAGE" 2>/dev/null | head -1)"
+  if [ -n "$id" ]; then comp agent-image ok "${id:0:12}"; else comp agent-image absent ""; fi
+}
+
+# Komponen ber-login TIDAK PERNAH `ok`: biner ada ≠ siap dipakai (SPEC-487, marker ≠ bukti).
+probe_agent_cli() {
+  local id="$1"
+  if have "$id"; then comp "$id" partial "not-logged-in $("$id" --version 2>/dev/null | head -1)"
+  else comp "$id" absent ""; fi
+}
+
+do_probe() {
+  probe_base; probe_node; probe_hanoman; probe_caddy; probe_podman; probe_agent_image
+  probe_agent_cli claude; probe_agent_cli codex; probe_gh
+}
+
+# ---------- apply ----------
+
+FAILED=""                                   # daftar id yang gagal, dipakai gerbang blocked-by
+mark_failed() { FAILED="$FAILED $1"; }
+has_failed()  { case " $FAILED " in *" $1 "*) return 0 ;; *) return 1 ;; esac; }
+
+# Prasyarat per komponen, DUPLIKAT dari katalog TypeScript dengan sengaja: server sudah
+# mengirim daftar terurut & lengkap, tabel ini hanya dipakai untuk menerbitkan `blocked-by`
+# yang benar saat sebuah prasyarat gagal di tengah jalan. Jaga keduanya selaras.
+deps_of() {
+  case "$1" in
+    node)         echo "base" ;;
+    hanoman)      if [ "$PROFILE" = production ]; then echo "node podman"; else echo "node"; fi ;;
+    podman)       echo "base" ;;
+    agent-image)  echo "podman" ;;
+    claude|codex) if [ "$PROFILE" = production ]; then echo "agent-image"; else echo "node"; fi ;;
+    gh)           echo "base" ;;
+    *)            echo "" ;;
+  esac
+}
+
+pkg_install() {
+  if have apt-get; then DEBIAN_FRONTEND=noninteractive apt-get install -y "$@" >/dev/null 2>&1
+  elif have dnf;    then dnf install -y "$@" >/dev/null 2>&1
+  else return 127; fi
+}
+
+# Alamat publik mesin ini. curl ke resolver eksternal adalah satu-satunya cara yang jujur di
+# balik NAT; kegagalannya (offline) memulangkan string kosong dan gerbang DNS menolak apa adanya.
+public_ip() { curl -fsS --max-time 5 https://api.ipify.org 2>/dev/null | head -1; }
+resolve_a() { getent ahostsv4 "$1" 2>/dev/null | awk '{print $1}' | head -1; }
+
+apply_base() {
+  pkg_install curl git tmux ca-certificates build-essential python3 ||
+    pkg_install curl git tmux ca-certificates gcc gcc-c++ make python3
+}
+apply_node() { curl -fsSL https://deb.nodesource.com/setup_22.x 2>/dev/null | bash - >/dev/null 2>&1 && pkg_install nodejs; }
+apply_gh()   { pkg_install gh; }
+apply_claude() { npm i -g @anthropic-ai/claude-code >/dev/null 2>&1; }
+apply_codex()  { npm i -g @openai/codex >/dev/null 2>&1; }
+
+apply_podman() {
+  pkg_install podman || return 1
+  id -u "$HANOMAN_USER" >/dev/null 2>&1 || useradd --system --create-home --home-dir "$HANOMAN_DATA" "$HANOMAN_USER"
+  sudo -u "$HANOMAN_USER" podman network exists hanoman-egress 2>/dev/null ||
+    sudo -u "$HANOMAN_USER" podman network create --internal hanoman-egress >/dev/null 2>&1
+}
+
+apply_agent_image() {
+  local cf="${CONTAINERFILE:-/tmp/hanoman-agent.Containerfile}"
+  [ -f "$cf" ] || return 1
+  sudo -u "$HANOMAN_USER" podman build -t "$IMAGE" -f "$cf" >/dev/null 2>&1
+}
+
+# Profil lab TIDAK menyetel NODE_ENV=production: gerbang assertRuntimeBoundary menuntut Podman,
+# credential dir, dan egress proxy di sana. Konsekuensinya cookie sesi lahir tanpa flag `Secure`
+# (server/src/services/auth.ts) — itu sebabnya profil lab tak boleh melayani permukaan Help publik.
+write_env() {
+  umask 077
+  { echo "HANOMAN_HOME=$HANOMAN_DATA"
+    echo "PORT=$HANOMAN_PORT"
+    echo "HOST=127.0.0.1"
+    echo "HANOMAN_TMUX_SOCKET=hanoman-prod"
+    if [ "$PROFILE" = production ]; then
+      echo "NODE_ENV=production"
+      echo "HANOMAN_SESSION_SANDBOX=podman"
+      echo "HANOMAN_SESSION_IMAGE=$IMAGE"
+      echo "HANOMAN_SESSION_NETWORK=hanoman-egress"
+      echo "HANOMAN_EGRESS_PROXY=${EGRESS_PROXY:-http://127.0.0.1:3128}"
+      echo "HANOMAN_AGENT_CREDENTIAL_DIR=$HANOMAN_DATA/agent-credentials"
+      echo "HANOMAN_TRUST_PROXY=1"
+      echo "HANOMAN_SINGLE_ORIGIN=1"
+      [ -n "$DOMAIN" ] && echo "HANOMAN_CONTROL_ORIGINS=https://$DOMAIN"
+    fi
+  } > /etc/hanoman.env || return 1
+  chown "root:$HANOMAN_USER" /etc/hanoman.env 2>/dev/null
+  chmod 0640 /etc/hanoman.env
+}
+
+write_unit() {
+  cat > /etc/systemd/system/hanoman.service <<UNIT
+[Unit]
+Description=hanoman orchestrator + dashboard
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=$HANOMAN_USER
+Group=$HANOMAN_USER
+WorkingDirectory=$HANOMAN_DATA
+UMask=0077
+Environment=HOME=$HANOMAN_DATA
+EnvironmentFile=/etc/hanoman.env
+ExecStart=/usr/bin/env hanoman
+Restart=on-failure
+RestartSec=3
+NoNewPrivileges=true
+PrivateTmp=true
+
+[Install]
+WantedBy=multi-user.target
+UNIT
+}
+
+apply_hanoman() {
+  id -u "$HANOMAN_USER" >/dev/null 2>&1 || useradd --system --create-home --home-dir "$HANOMAN_DATA" "$HANOMAN_USER"
+  install -d -o "$HANOMAN_USER" -g "$HANOMAN_USER" -m 0700 "$HANOMAN_DATA" || return 1
+  npm i -g hanoman >/dev/null 2>&1 || return 1
+  write_env || return 1
+  write_unit || return 1
+  systemctl daemon-reload >/dev/null 2>&1
+  systemctl enable --now hanoman >/dev/null 2>&1
+}
+
+apply_caddy() {
+  pkg_install caddy || return 1
+  mkdir -p /etc/caddy
+  cat > /etc/caddy/Caddyfile <<CADDY
+$DOMAIN {
+	header {
+		Strict-Transport-Security "max-age=31536000; includeSubDomains"
+		X-Content-Type-Options "nosniff"
+		Referrer-Policy "no-referrer"
+	}
+	encode zstd gzip
+	reverse_proxy 127.0.0.1:$HANOMAN_PORT
+}
+CADDY
+  caddy validate --config /etc/caddy/Caddyfile >/dev/null 2>&1 || return 1
+  systemctl enable --now caddy >/dev/null 2>&1
+  systemctl reload caddy >/dev/null 2>&1
+}
+
+# Gerbang DNS mendahului instalasi apa pun: sertifikat ACME yang gagal terbit meninggalkan Caddy
+# hidup tanpa TLS DAN membakar rate-limit Let's Encrypt. Menolak di depan jauh lebih murah.
+caddy_gate() {
+  [ -n "$DOMAIN" ] || { echo "domain-required"; return 1; }
+  local want got
+  want="$(public_ip)"; got="$(resolve_a "$DOMAIN")"
+  [ -n "$got" ] || { echo "dns-unresolved $DOMAIN"; return 1; }
+  [ "$got" = "$want" ] || { echo "dns-mismatch $got != ${want:-tak-diketahui}"; return 1; }
+  return 0
+}
+
+# Status satu komponen (kolom ketiga baris COMP) — dipakai gerbang idempotensi.
+probe_one() {
+  case "$1" in
+    base) probe_base ;; node) probe_node ;; hanoman) probe_hanoman ;; caddy) probe_caddy ;;
+    podman) probe_podman ;; agent-image) probe_agent_image ;; gh) probe_gh ;;
+    claude|codex) probe_agent_cli "$1" ;;
+  esac | awk '{print $3}'
+}
+
+# Komponen ber-login berhenti di `partial`, jadi `partial` DIANGGAP sudah terpasang untuk mereka —
+# memasang ulang biner tak akan membuat siapa pun login.
+already_present() {
+  local id="$1" st="$2"
+  [ "$st" = ok ] && return 0
+  if [ "$st" = partial ]; then
+    case "$id" in claude|codex|gh) return 0 ;; esac
+  fi
+  return 1
+}
+
+apply_one() {
+  local id="$1"
+
+  for d in $(deps_of "$id"); do
+    if has_failed "$d"; then step "$id" skip "blocked-by $d"; mark_failed "$id"; return; fi
+  done
+
+  if [ "$id" = caddy ]; then
+    local why
+    if ! why="$(caddy_gate)"; then step caddy fail "$why"; mark_failed caddy; return; fi
+  fi
+
+  local st; st="$(probe_one "$id")"
+  if already_present "$id" "$st"; then step "$id" skip "already-present"; return; fi
+
+  if [ -n "$DRY_RUN" ]; then step "$id" would "akan dipasang"; return; fi
+
+  local rc=0
+  case "$id" in
+    base) apply_base || rc=$? ;; node) apply_node || rc=$? ;; hanoman) apply_hanoman || rc=$? ;;
+    caddy) apply_caddy || rc=$? ;; podman) apply_podman || rc=$? ;;
+    agent-image) apply_agent_image || rc=$? ;; claude) apply_claude || rc=$? ;;
+    codex) apply_codex || rc=$? ;; gh) apply_gh || rc=$? ;;
+    *) step "$id" fail "komponen tak dikenal"; mark_failed "$id"; return ;;
+  esac
+
+  if [ "$rc" -eq 0 ]; then step "$id" ok "terpasang"; else step "$id" fail "kode keluar $rc"; mark_failed "$id"; fi
+}
+
+do_apply() {
+  IFS=',' read -ra arr <<< "${ITEMS:-}"
+  for id in "${arr[@]}"; do [ -n "$id" ] && apply_one "$id"; done
+}
+
+case "$MODE" in
+  probe) do_probe ;;
+  apply) do_apply ;;
+  *)     echo "STEP _ fail MODE tak dikenal: $MODE"; exit 2 ;;
+esac