hanoman 0.1.56 → 0.1.58

package/README.md

@@ -31,6 +31,7 @@ sebagai root. Nyalakan hardening dari wizard (atau Settings → Setup awal) begi
 | `git` | tiap sesi jalan di git worktree terisolasi |
 | `tmux` | sesi agen hidup di tmux, selamat dari restart server |
 | `claude` **atau** `codex` | agen yang mengerjakan backlog |
+| `curl` | hook sesi mengirim pertanyaan agen ke server — tanpanya **hanoman-lead tak menerima satu pun pertanyaan** (SPEC-909/ADR-0146). Tidak fatal: hook selalu `exit 0` dan tak pernah memblokir agen, jadi sesi cuma kembali menunggu manusia — dan justru karena senyap, `doctor` menandainya `!` alih-alih `✗` |
 
 `hanoman doctor` melaporkan mana yang belum ada, dan keluar dengan kode ≠ 0 bila ada yang wajib.
 

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.56",
-  "sha": "5fe3c6ff",
-  "builtAt": "2026-08-22T15:22:43.448Z"
+  "version": "0.1.58",
+  "sha": "36f46443",
+  "builtAt": "2026-08-23T16:44:16.513Z"
 }

package/dist/cli.js

@@ -5326,7 +5326,7 @@ var init_cron_expr = __esm({
 });
 
 // ../shared/src/dto.ts
-var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zUpdateProject, zCreateSpec, zPatchSpec, zChangeSpecSource, zMarkSpecDone, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerQueueCounts, zSchedulerState, zLeadDecisionView, zLeadFlowView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, USER_ROLES, zUserRole, zLogin, zSignup, zSetup, zSetupApply, zChangePassword, zCreateClientAccount, zUpdateClientAccount, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, PROVISION_PROFILES, COMPONENT_IDS, zProvision, UPDATE_RESTART_EXIT, CONFIG_RESTART_EXIT, zUpdateApplyBody, zTicketView, zTicketAttachmentView, zSpecAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus, zCronExpr, zCreateCron, zPatchCron, zSchedulerCron, zSchedulerCronRun;
+var zIssueDeviceToken, zSessionResult, zSessionHistory, zCreateProject, zProjectId, zRenameProject, zUpdateProject, zCreateSpec, zPatchSpec, zChangeSpecSource, zMarkSpecDone, zIntegrate, zSessionSummary, zProjectView, zSchedulerQueueItem, zSchedulerSourceView, zSchedulerSessionView, zSchedulerQueueCounts, zSchedulerState, zLeadDecisionView, zLeadFlowView, zLeadAnswer, zLeadProjectStatus, zLeadStatusView, zFlow, zPrdBrief, zPrdDoc, zBreakdownItem, zBreakdownDoc, zBatchCreateSpec, zEscalationTarget, zEscalationPrefill, zAuditEscalation, zAuditEscalationView, zTerminalSession, zDocFileContent, zDocIndexCat, zDocIndex, HOST_RE, USER_RE, zCreateVps, zPatchVps, USER_ROLES, zUserRole, zLogin, zSignup, zSetup, zSetupApply, zChangePassword, zCreateClientAccount, zUpdateClientAccount, zVpsCheck, zMarkNa, zMarkNaBulk, zAttest, zRemediate, PROVISION_PROFILES, COMPONENT_IDS, zProvision, UPDATE_RESTART_EXIT, CONFIG_RESTART_EXIT, zUpdateApplyBody, MAX_SUBS, zSubPage, zSubLimit, zTopicParams, zEventsClientMsg, zTicketView, zTicketAttachmentView, zSpecAttachmentView, zTicketDetail, zTicketEditInput, zHelpInfo, zPublicTicketStatus, zCronExpr, zCreateCron, zPatchCron, zSchedulerCron, zSchedulerCronRun;
 var init_dto = __esm({
   "../shared/src/dto.ts"() {
     "use strict";
@@ -5502,6 +5502,7 @@ var init_dto = __esm({
       specId: external_exports.string(),
       flow: external_exports.string().optional(),
       branch: external_exports.string().optional(),
+      // SPEC-903 · ADR-0143 · keadaan turunan yang sama dengan pil Terminal & pose pet, bukan isi marker.
       decision: external_exports.boolean(),
       exited: external_exports.boolean()
     });
@@ -5601,8 +5602,10 @@ var init_dto = __esm({
       // id sesi yang sedang disusun keputusannya (AC-3)
       queued: external_exports.array(external_exports.string()).default([]),
       // SPEC-479 · id sesi yang menunggu SLOT, bukan manusia
+      // SPEC-903 · ADR-0143 · id sesi yang bit "menunggu"-nya TURUNAN (marker terisi DAN pane diam),
+      // bukan daftar marker mentah — sumbernya `liveDecisions().waiting`, bit yang sama dengan pil
+      // Terminal. Membangunnya ulang dari marker menghasilkan superset yang berselisih tanpa error.
       waiting: external_exports.array(external_exports.string()),
-      // id sesi ber-marker keputusan terisi
       lastPulseAt: external_exports.string().nullable(),
       // SPEC-479 (QA) · keadaan gerbang konkurensi. Batas yang tak terlihat operator terbaca sebagai
       // "lead diam" — persis salah baca yang melahirkan tiket itu. `.default()` supaya klien lama
@@ -5831,6 +5834,44 @@ var init_dto = __esm({
     UPDATE_RESTART_EXIT = 75;
     CONFIG_RESTART_EXIT = 76;
     zUpdateApplyBody = external_exports.object({ confirm: external_exports.boolean().optional() });
+    MAX_SUBS = 16;
+    zSubPage = external_exports.number().int().min(1).max(1e4);
+    zSubLimit = external_exports.number().int().min(1).max(200);
+    zTopicParams = {
+      schedulerState: external_exports.object({}).strict(),
+      schedulerQueue: external_exports.object({
+        status: external_exports.enum(["queued", "launched", "done", "failed", "canceled"]),
+        page: zSubPage,
+        limit: zSubLimit
+      }).strict(),
+      tickets: external_exports.object({
+        project: external_exports.string().max(120).optional(),
+        status: external_exports.string().max(40).optional(),
+        q: external_exports.string().max(200).optional(),
+        page: zSubPage,
+        limit: zSubLimit
+      }).strict(),
+      lead: external_exports.object({
+        projectId: external_exports.string().max(120).optional(),
+        decPage: zSubPage,
+        flowPage: zSubPage,
+        limit: zSubLimit
+      }).strict(),
+      git: external_exports.object({
+        projectId: external_exports.string().max(120),
+        limit: external_exports.number().int().min(1).max(2e4),
+        branch: external_exports.string().max(200),
+        showRemote: external_exports.boolean(),
+        showTags: external_exports.boolean()
+      }).strict()
+    };
+    zEventsClientMsg = external_exports.object({
+      t: external_exports.literal("sub"),
+      subs: external_exports.array(external_exports.object({
+        topic: external_exports.string().max(40),
+        params: external_exports.record(external_exports.unknown())
+      })).max(MAX_SUBS)
+    }).strict();
     zTicketView = external_exports.object({
       id: external_exports.string(),
       projectId: external_exports.string(),
@@ -6050,6 +6091,8 @@ var init_api = __esm({
       // baris pun perubahan di services/agent-capabilities.ts.
       terminalDialog: (id) => `${API}/terminal/sessions/${id}/dialog`,
       terminalDialogAnswer: (id) => `${API}/terminal/sessions/${id}/dialog/answer`,
+      // SPEC-909 · ADR-0146 · hentikan hanoman-lead untuk sesi ini sebelum ia mengetik ke pane.
+      terminalDialogTakeover: (id) => `${API}/terminal/sessions/${id}/dialog/takeover`,
       terminalPhases: (id) => `${API}/terminal/sessions/${id}/phases`,
       // SPEC-230 · review + integrate ber-skop sesi (sesi project-level PRD, tanpa Spec).
       sessionReview: (id) => `${API}/terminal/sessions/${id}/review`,
@@ -7673,6 +7716,41 @@ var init_session_dialog = __esm({
   }
 });
 
+// ../shared/src/session-ask.ts
+var ASK_MAX_QUESTIONS, ASK_MAX_OPTIONS, zOption, zQuestion, zAskTool, zTurnEnd;
+var init_session_ask = __esm({
+  "../shared/src/session-ask.ts"() {
+    "use strict";
+    init_zod();
+    ASK_MAX_QUESTIONS = 8;
+    ASK_MAX_OPTIONS = 32;
+    zOption = external_exports.object({
+      label: external_exports.string().min(1),
+      description: external_exports.string().optional()
+    });
+    zQuestion = external_exports.object({
+      question: external_exports.string().min(1),
+      header: external_exports.string().default(""),
+      multiSelect: external_exports.boolean().default(false),
+      options: external_exports.array(zOption).max(ASK_MAX_OPTIONS).default([])
+    });
+    zAskTool = external_exports.object({
+      hook_event_name: external_exports.literal("PreToolUse"),
+      tool_name: external_exports.literal("AskUserQuestion"),
+      tool_use_id: external_exports.string().min(1),
+      tool_input: external_exports.object({ questions: external_exports.array(zQuestion).min(1).max(ASK_MAX_QUESTIONS) })
+    });
+    zTurnEnd = external_exports.object({
+      hook_event_name: external_exports.literal("Stop"),
+      turn_id: external_exports.string().min(1),
+      last_assistant_message: external_exports.string().optional(),
+      // Codex menyalakan bendera ini saat Stop dipicu oleh hook Stop lain. Melayani giliran yang
+      // dibangkitkan gate mode goal (ADR-0074) berarti lead menjawab dirinya sendiri.
+      stop_hook_active: external_exports.boolean().optional()
+    });
+  }
+});
+
 // ../shared/src/index.ts
 var init_src = __esm({
   "../shared/src/index.ts"() {
@@ -7711,6 +7789,7 @@ var init_src = __esm({
     init_terminal_workspace();
     init_terminal_io();
     init_session_dialog();
+    init_session_ask();
   }
 });
 
@@ -7843,9 +7922,18 @@ var init_git = __esm({
 });
 
 // ../runner/src/settings.ts
+var EVENT_HOOK_COMMAND;
 var init_settings = __esm({
   "../runner/src/settings.ts"() {
     "use strict";
+    EVENT_HOOK_COMMAND = [
+      'curl -sS -m 2 -X POST "$HANOMAN_EVENT_URL"',
+      "-H 'content-type: application/json'",
+      '-H "authorization: Bearer $HANOMAN_EVENT_TOKEN"',
+      '-H "x-hanoman-session: $HANOMAN_SESSION_ID"',
+      '${HANOMAN_EVENT_HOST:+-H "host: $HANOMAN_EVENT_HOST"}',
+      "--data-binary @- >/dev/null 2>&1; exit 0"
+    ].join(" ");
   }
 });
 
@@ -7865,6 +7953,7 @@ var init_codex_settings = __esm({
     "use strict";
     init_src();
     init_prompt();
+    init_settings();
   }
 });
 
@@ -8749,6 +8838,14 @@ function doctorReport(p) {
       text: p.gh ? `gh ${p.gh}` : "gh \u2014 tak ada (tarik issue akan lewat HTTP + GITHUB_TOKEN)",
       fatal: false
     },
+    // SPEC-909 · ADR-0146 · NON-FATAL dan itu disengaja: tanpa `curl` hook tetap `exit 0` — ia tak
+    // pernah memblokir agen — tapi hanoman-lead tak akan menerima SATU PUN pertanyaan sesi, dan tak
+    // ada error di mana pun yang akan mengatakannya. Kegagalan senyap justru yang layak dilaporkan.
+    {
+      mark: p.curl ? "\u2713" : "!",
+      text: p.curl ? `curl ${p.curl}` : "curl \u2014 TAK ADA: hanoman-lead tak akan menerima pertanyaan sesi (SPEC-909)",
+      fatal: false
+    },
     // Direktori turunan lahir saat dipakai, jadi izin tulis yang belum ada di situ adalah
     // peringatan — bukan alasan menyatakan hanoman tak bisa menjalankan sesi. Home tetap fatal.
     ...p.dirs.map((d) => ({
@@ -8836,6 +8933,7 @@ async function doctor(_argv, ctx) {
     claude,
     codex,
     gh: version(ctx.env.HANOMAN_GH_BIN ?? "gh", ["--version"]),
+    curl: version("curl", ["--version"]),
     dirs,
     web: layout.web !== null,
     db,