hanoman 0.1.7 → 0.1.9

package/dist/server.js

@@ -4182,7 +4182,7 @@ function cmpVersion(a, b) {
   }
   return 0;
 }
-var zProject, zBriefPayload, zQaPayload, zGoalPayload, zSpec, NOTIFY_SOUNDS, E_5_6, E_LUNA, E_BASE, CODEX_MODELS, RETIRED_CODEX_MODELS, zCodex, CODEX_DEFAULTS, zSourceCommon, zScheduler, SCHEDULER_DEFAULTS, zGoal, GOAL_DEFAULTS, zConflict, CONFLICT_DEFAULTS, zLeadEngine, zLead, LEAD_DEFAULTS, zSetting, zNotification, zDocFile, zDeviceTokenView;
+var zProject, zBriefPayload, zQaPayload, zGoalPayload, zSpecBlocker, zSpec, NOTIFY_SOUNDS, E_5_6, E_LUNA, E_BASE, CODEX_MODELS, RETIRED_CODEX_MODELS, zCodex, CODEX_DEFAULTS, zSourceCommon, zScheduler, SCHEDULER_DEFAULTS, zGoal, GOAL_DEFAULTS, zConflict, CONFLICT_DEFAULTS, zLeadEngine, zLead, LEAD_DEFAULTS, zSetting, zNotification, zDocFile, zDeviceTokenView;
 var init_entities = __esm({
   "../shared/src/entities.ts"() {
     "use strict";
@@ -4225,6 +4225,10 @@ var init_entities = __esm({
       constraints: external_exports.string(),
       priority: zPriority
     });
+    zSpecBlocker = external_exports.object({
+      id: external_exports.string(),
+      reason: external_exports.enum(["missing", "unfinished", "unmerged"])
+    });
     zSpec = external_exports.object({
       id: external_exports.string(),
       projectId: external_exports.string(),
@@ -4243,7 +4247,13 @@ var init_entities = __esm({
       // SPEC-408 · ADR-0090 · stempel waktu backlog (ISO string di wire — kolom DateTime di DB).
       // `startedAt` null = belum pernah dikerjakan; ia tak pernah ditulis ulang saat sesi dilanjutkan.
       createdAt: external_exports.string(),
-      startedAt: external_exports.string().nullable()
+      startedAt: external_exports.string().nullable(),
+      // SPEC-447 · ADR-0093 · id backlog yang harus selesai & ter-merge lebih dulu. Server selalu
+      // menormalkannya ke array (kolom DB-nya `Json?`); `.default([])` menjaga respons lama.
+      dependsOn: external_exports.array(external_exports.string()).default([]),
+      // Turunan (bukan kolom): dihitung `liveSpecs` dari stage dependency + git. Klien tak pernah
+      // mengirimkannya — `.default([])` supaya bentuk lama tetap parse.
+      blockedBy: external_exports.array(zSpecBlocker).default([])
     });
     NOTIFY_SOUNDS = [
       "off",
@@ -4436,7 +4446,12 @@ var init_agent = __esm({
       // baris jejak & bisa menggerakkan sesi), dan SPEC-405 sudah membuktikan apa yang terjadi saat
       // endpoint tulis menumpang prefix status yang dipetakan tanpa melihat method (AC-5).
       "lead:read",
-      "lead:write"
+      "lead:write",
+      // SPEC-450 · ADR-0094 · custom agent. Domain TERSENDIRI, dipetakan MENURUT METHOD: menulis
+      // definisi agen mengubah apa yang dilihat SETIAP sesi baru di seluruh workspace, jadi izin
+      // baca tak pernah cukup untuk itu (kelas bug SPEC-405).
+      "agents:read",
+      "agents:write"
     ];
     zCapability = external_exports.enum(CAPABILITY_IDS);
     zCapabilityInfo = external_exports.object({
@@ -4467,7 +4482,9 @@ var init_agent = __esm({
       { id: "notifications:read", domain: "notifications", access: "read", label: "Notifikasi \u2014 baca", desc: "Lihat notifikasi." },
       { id: "notifications:write", domain: "notifications", access: "write", label: "Notifikasi \u2014 tulis", desc: "Tandai terbaca / bersihkan notifikasi." },
       { id: "lead:read", domain: "lead", access: "read", label: "Lead \u2014 baca", desc: "Baca jejak keputusan hanoman-lead & statusnya." },
-      { id: "lead:write", domain: "lead", access: "write", label: "Lead \u2014 tulis", desc: "Minta putusan ke hanoman-lead (keputusan bisa menggerakkan sesi).", risk: "exec" }
+      { id: "lead:write", domain: "lead", access: "write", label: "Lead \u2014 tulis", desc: "Minta putusan ke hanoman-lead (keputusan bisa menggerakkan sesi).", risk: "exec" },
+      { id: "agents:read", domain: "agents", access: "read", label: "Custom agent \u2014 baca", desc: "Lihat katalog custom agent global & per project." },
+      { id: "agents:write", domain: "agents", access: "write", label: "Custom agent \u2014 tulis", desc: "Buat/ubah/hapus custom agent; definisinya dipakai setiap sesi baru.", risk: "exec" }
     ];
     zAgentTokenView = external_exports.object({
       id: external_exports.string(),
@@ -4492,6 +4509,103 @@ var init_agent = __esm({
   }
 });
 
+// ../shared/src/custom-agent.ts
+function mentionsOf(v) {
+  if (!Array.isArray(v)) return [];
+  const out3 = [];
+  for (const x of v) if (typeof x === "string" && x && !out3.includes(x)) out3.push(x);
+  return out3;
+}
+function toolsOf(v) {
+  if (!Array.isArray(v)) return null;
+  const out3 = [];
+  for (const x of v) if (typeof x === "string" && x && !out3.includes(x)) out3.push(x);
+  return out3;
+}
+function resolveTools(a) {
+  const base = a.tools ?? [...DEFAULT_AGENT_TOOLS];
+  const canMention = (a.mentions ?? []).length > 0;
+  const out3 = base.filter((t) => t !== MENTION_TOOL);
+  if (canMention) out3.push(MENTION_TOOL);
+  return out3;
+}
+function detectCycle(nodes) {
+  const edges = new Map(nodes.map((n) => [n.name, n.mentions]));
+  const state = /* @__PURE__ */ new Map();
+  const stack = [];
+  const walk = (name2) => {
+    if (state.get(name2) === 1) return [...stack.slice(stack.indexOf(name2)), name2];
+    if (state.get(name2) === 2) return null;
+    state.set(name2, 1);
+    stack.push(name2);
+    for (const next of edges.get(name2) ?? []) {
+      if (!edges.has(next)) continue;
+      const found = walk(next);
+      if (found) return found;
+    }
+    stack.pop();
+    state.set(name2, 2);
+    return null;
+  };
+  for (const n of nodes) {
+    const found = walk(n.name);
+    if (found) return found;
+  }
+  return null;
+}
+function effectiveAgents(globals, project) {
+  const byName = /* @__PURE__ */ new Map();
+  for (const a of globals) byName.set(a.name, a);
+  for (const a of project) byName.set(a.name, a);
+  return [...byName.values()].filter((a) => a.enabled).sort((x, y) => x.name.localeCompare(y.name));
+}
+var AGENT_NAME_RE, DEFAULT_AGENT_TOOLS, MENTION_TOOL, MENTION_MAX_HOPS, GLOBAL_SCOPE, zCustomAgent, zCreateCustomAgent, zUpdateCustomAgent, customAgentId;
+var init_custom_agent = __esm({
+  "../shared/src/custom-agent.ts"() {
+    "use strict";
+    init_zod();
+    AGENT_NAME_RE = /^[a-z][a-z0-9-]{1,39}$/;
+    DEFAULT_AGENT_TOOLS = [
+      "Read",
+      "Write",
+      "Edit",
+      "Bash",
+      "Glob",
+      "Grep",
+      "WebFetch",
+      "WebSearch"
+    ];
+    MENTION_TOOL = "Task";
+    MENTION_MAX_HOPS = 3;
+    GLOBAL_SCOPE = "global";
+    zCustomAgent = external_exports.object({
+      id: external_exports.string(),
+      projectId: external_exports.string().nullable(),
+      name: external_exports.string().regex(AGENT_NAME_RE),
+      description: external_exports.string(),
+      instructions: external_exports.string(),
+      tools: external_exports.array(external_exports.string()).nullable(),
+      model: external_exports.string().nullable(),
+      mentions: external_exports.array(external_exports.string()).nullable(),
+      enabled: external_exports.boolean(),
+      createdAt: external_exports.string(),
+      updatedAt: external_exports.string()
+    });
+    zCreateCustomAgent = external_exports.object({
+      projectId: external_exports.string().nullable().optional(),
+      name: external_exports.string().regex(AGENT_NAME_RE),
+      description: external_exports.string().trim().min(1).max(500),
+      instructions: external_exports.string().trim().min(1).max(2e4),
+      tools: external_exports.array(external_exports.string()).nullable().optional(),
+      model: external_exports.string().nullable().optional(),
+      mentions: external_exports.array(external_exports.string()).nullable().optional(),
+      enabled: external_exports.boolean().optional()
+    });
+    zUpdateCustomAgent = zCreateCustomAgent.omit({ name: true, projectId: true }).partial();
+    customAgentId = (projectId, name2) => `${projectId ?? GLOBAL_SCOPE}:${name2}`;
+  }
+});
+
 // ../shared/src/lead.ts
 function leadActionAllowed(action) {
   return LEAD_ACTIONS.includes(action);
@@ -4650,7 +4764,9 @@ var init_dto = __esm({
       title: external_exports.string().min(1),
       priority: zPriority,
       payload: external_exports.union([zBriefPayload, zQaPayload, zGoalPayload]),
-      branchFrom: external_exports.string().min(1).optional()
+      branchFrom: external_exports.string().min(1).optional(),
+      // SPEC-447 · ADR-0093 · divalidasi server (id ada / satu project / bukan diri sendiri / non-siklus).
+      dependsOn: external_exports.array(external_exports.string()).optional()
     }).superRefine((o, ctx) => {
       const shape = "severity" in o.payload ? "qa" : "goal" in o.payload ? "goal" : "brief";
       const want = o.source === "qa" ? "qa" : o.source === "goal" ? "goal" : "brief";
@@ -4664,8 +4780,12 @@ var init_dto = __esm({
       // SPEC-186 · edit konten selagi item belum dimulai. Ditolak server bila sudah mulai.
       title: external_exports.string().min(1).optional(),
       priority: zPriority.optional(),
-      payload: external_exports.union([zBriefPayload, zQaPayload, zGoalPayload]).optional()
+      payload: external_exports.union([zBriefPayload, zQaPayload, zGoalPayload]).optional(),
       // SPEC-407 · +goal
+      // SPEC-447 · ADR-0093 · SENGAJA di luar gerbang `editingContent` (SPEC-186): gerbang itu
+      // melindungi konten yang sudah jadi dasar kerja sesi berjalan, sedangkan dependsOn hanya
+      // menggerbangi peluncuran BERIKUTNYA. `[]` = kosongkan.
+      dependsOn: external_exports.array(external_exports.string()).optional()
     });
     zIntegrate = external_exports.object({
       op: external_exports.enum(["merge", "rebase"]),
@@ -4861,7 +4981,10 @@ var init_dto = __esm({
         goal: external_exports.boolean().optional(),
         goalCondition: external_exports.string().max(4e3).optional(),
         agent: zAgent.optional(),
-        verifyScope: zVerifyScope.optional()
+        verifyScope: zVerifyScope.optional(),
+        // SPEC-447 · ADR-0093 — lewati gerbang dependency. Hanya jalur manusia; UI hanya
+        // mengirimkannya sesudah operator melihat daftar pemblokirnya.
+        force: external_exports.boolean().optional()
       })
     ]);
     zDocFileContent = external_exports.object({ content: external_exports.string() });
@@ -5095,6 +5218,9 @@ var init_api = __esm({
       leadDecisions: `${API}/lead/decisions`,
       leadDecisionOverride: (id) => `${API}/lead/decisions/${encodeURIComponent(id)}/override`,
       leadDecisionCancel: (id) => `${API}/lead/decisions/${encodeURIComponent(id)}/cancel`,
+      // SPEC-450 · ADR-0094 · katalog custom agent. `?projectId=` → himpunan EFEKTIF (global+project).
+      customAgents: `${API}/custom-agents`,
+      customAgent: (id) => `${API}/custom-agents/${encodeURIComponent(id)}`,
       // SPEC-268 · ADR-0066 · pemicu sync manual (cookie-authed)
       syncNow: `${API}/sync/now`,
       // SPEC-270 · ADR-0067 · antrean konflik rekonsil (cookie-authed)
@@ -5415,6 +5541,7 @@ var init_src = __esm({
     init_enums();
     init_entities();
     init_agent();
+    init_custom_agent();
     init_lead();
     init_dto();
     init_api();
@@ -5989,6 +6116,17 @@ var init_git = __esm({
           { cwd: repo, encoding: "utf8" }
         );
         return r.status === 0 ? r.stdout.trim() : null;
+      },
+      // SPEC-447 · `git merge-base --is-ancestor A B` = exit 0 (ya) / 1 (tidak) / lainnya (error).
+      // `--end-of-options` menjaga ADR-0032: sha & ref datang dari DB/kolom, jangan sampai terbaca
+      // sebagai flag. Ref yang tak resolve membuat git exit 128 → dibaca sebagai "belum" (fail-closed).
+      isAncestor: (repo, sha, ref) => {
+        const r = spawnSync(
+          "git",
+          ["merge-base", "--is-ancestor", "--end-of-options", sha, ref],
+          { cwd: repo, encoding: "utf8" }
+        );
+        return r.status === 0;
       }
     };
   }
@@ -6172,6 +6310,74 @@ var init_agent_cli = __esm({
   }
 });
 
+// ../runner/src/custom-agents.ts
+function agentPromptOf(def2, roster) {
+  const can = liveMentions(def2, roster);
+  if (can.length === 0) {
+    return `${def2.instructions}
+
+---
+Kamu TIDAK boleh mendelegasikan ke agen lain. Selesaikan sendiri lalu laporkan hasilnya.`;
+  }
+  const list2 = can.map((m) => `@${m}`).join(", ");
+  return [
+    def2.instructions,
+    "",
+    "---",
+    `Kamu boleh mendelegasikan HANYA ke: ${list2}. Panggil lewat ${MENTION_TOOL} dengan nama agennya.`,
+    `Anggaran rantai delegasi seluruh sesi ini ${MENTION_MAX_HOPS} hop. Bila kamu sudah berada di hop ke-${MENTION_MAX_HOPS}, JANGAN mendelegasikan lagi \u2014 selesaikan sendiri lalu laporkan.`,
+    "Sebutkan hop keberapa kamu berada saat mendelegasikan, dan jangan pernah memanggil agen yang sudah ada di rantai yang membawamu ke sini."
+  ].join("\n");
+}
+function renderAgentsJson(defs) {
+  if (defs.length === 0) return "";
+  const out3 = {};
+  for (const d of defs) {
+    out3[d.name] = {
+      description: d.description,
+      prompt: agentPromptOf(d, defs),
+      tools: resolveTools({ tools: d.tools, mentions: d.mentions }),
+      ...d.model ? { model: d.model } : {}
+    };
+  }
+  return JSON.stringify(out3);
+}
+function agentRosterBlock(defs) {
+  if (defs.length === 0) return "";
+  const lines2 = [
+    "",
+    "## Custom agent hanoman",
+    "",
+    "Peran berikut tersedia untuk sesi ini. Saat sebuah tugas cocok dengan salah satunya, ADOPSI",
+    "perannya (baca instruksinya, kerjakan dengan sudut pandang itu) lalu kembali ke peranmu sendiri.",
+    "Jangan melahirkan proses agen baru.",
+    ""
+  ];
+  for (const d of defs) {
+    const can = liveMentions(d, defs);
+    lines2.push(`### @${d.name} \u2014 ${d.description}`);
+    lines2.push("");
+    lines2.push(d.instructions);
+    lines2.push("");
+    lines2.push(
+      can.length ? `Boleh berkonsultasi ke: ${can.map((m) => `@${m}`).join(", ")} (maks ${MENTION_MAX_HOPS} hop berantai).` : "Tidak boleh berkonsultasi ke peran lain."
+    );
+    lines2.push("");
+  }
+  return lines2.join("\n");
+}
+var liveMentions;
+var init_custom_agents = __esm({
+  "../runner/src/custom-agents.ts"() {
+    "use strict";
+    init_src();
+    liveMentions = (def2, roster) => {
+      const names = new Set(roster.map((r) => r.name));
+      return def2.mentions.filter((m) => names.has(m) && m !== def2.name);
+    };
+  }
+});
+
 // ../runner/src/paths.ts
 import { homedir } from "node:os";
 import { dirname as dirname2, isAbsolute as isAbsolute2, join, resolve as resolve4 } from "node:path";
@@ -6232,6 +6438,7 @@ var init_src2 = __esm({
     init_goal_spec();
     init_codex_settings();
     init_agent_cli();
+    init_custom_agents();
     init_verify_scope();
     init_paths();
   }
@@ -6361,6 +6568,74 @@ var init_session_phases = __esm({
   }
 });
 
+// src/services/tui-dialog.ts
+function readChoiceDialog(paneText2) {
+  const lines2 = paneText2.split("\n").map((l) => l.trimEnd());
+  let footer = -1;
+  for (let i = lines2.length - 1; i >= 0; i--) {
+    if (FOOTER.test(lines2[i] ?? "")) {
+      footer = i;
+      break;
+    }
+  }
+  if (footer < 0) return null;
+  const found = [];
+  for (const line of lines2.slice(0, footer)) {
+    const m = ROW.exec(line);
+    if (m) found.push({ n: Number(m[1]), label: (m[2] ?? "").trim() });
+  }
+  if (found.length < 2) return null;
+  const run2 = [];
+  let expected = found[found.length - 1].n;
+  for (let i = found.length - 1; i >= 0 && expected >= 1; i--) {
+    const row = found[i];
+    if (row.n !== expected) break;
+    run2.unshift(row);
+    expected -= 1;
+  }
+  if (run2.length < 2 || run2[0].n !== 1) return null;
+  const rows = run2.map((r) => ({
+    n: r.n,
+    label: r.label,
+    free: PLACEHOLDER.test(r.label),
+    chat: CHAT_ROW.test(r.label)
+  }));
+  return {
+    rows,
+    freeIndex: rows.find((r) => r.free)?.n ?? null,
+    options: rows.filter((r) => !r.free && !r.chat).map((r) => r.label)
+  };
+}
+function freeTextFilled(paneText2, n) {
+  const row = readChoiceDialog(paneText2)?.rows.find((r) => r.n === n);
+  if (!row) return false;
+  return row.label.length > 0 && !PLACEHOLDER.test(row.label);
+}
+async function answerChoiceDialog(io, freeIndex, line, chunkMs) {
+  io.literal(String(freeIndex));
+  await io.sleep(DIALOG_SETTLE_MS);
+  for (const chunk of goalChunks(line)) {
+    io.literal(chunk);
+    await io.sleep(chunkMs);
+  }
+  await io.sleep(DIALOG_SETTLE_MS);
+  if (!freeTextFilled(io.capture(), freeIndex)) return false;
+  io.enter();
+  return true;
+}
+var FOOTER, ROW, PLACEHOLDER, CHAT_ROW, DIALOG_SETTLE_MS;
+var init_tui_dialog = __esm({
+  "src/services/tui-dialog.ts"() {
+    "use strict";
+    init_src2();
+    FOOTER = /enter to (?:select|confirm)\b/i;
+    ROW = /^\s*[❯>›]?\s*(\d{1,2})\.\s+(\S.*)$/;
+    PLACEHOLDER = /^(?:type something\.?|other)$/i;
+    CHAT_ROW = /^chat about this$/i;
+    DIALOG_SETTLE_MS = 250;
+  }
+});
+
 // src/config.ts
 var config_exports = {};
 __export(config_exports, {
@@ -6470,6 +6745,9 @@ function listPanes() {
 function registerSessionHooks(h) {
   hooks = h;
 }
+function registerCustomAgentSource(fn) {
+  customAgentSource = fn;
+}
 function sessionKind(o, projectId, cwd) {
   if (o.specId) return "spec";
   if (o.flow === "reverse" || o.flow === "prd" || o.flow === "scaffold" || o.flow === "breakdown") return o.flow;
@@ -6491,11 +6769,14 @@ function createSession(projectId, cwd, opts = {}) {
   const existing = getSession(id);
   if (existing && !existing.exited) return existing;
   if (existing) killSession(id);
+  const agentForDefs = opts.agent ?? "claude";
+  const customDefs = opts.command ? [] : customAgentsFor(projectId);
+  const rosterBlock = agentForDefs === "codex" ? agentRosterBlock(customDefs) : "";
   let promptArg = "";
   if (!opts.command && opts.prompt) {
     const promptFile = promptFilePath(id);
     mkdirSync3(dirname4(promptFile), { recursive: true });
-    writeFileSync(promptFile, opts.prompt);
+    writeFileSync(promptFile, opts.prompt + rosterBlock);
     promptArg = `"$(cat ${sq(promptFile)})"`;
   }
   const agent = opts.agent ?? "claude";
@@ -6517,6 +6798,15 @@ function createSession(projectId, cwd, opts = {}) {
       }), { mode: 493 });
     }
     const effort = agent === "codex" && opts.model && opts.effort ? coerceCodexEffort(opts.model, opts.effort) : opts.effort;
+    let agentsFile;
+    if (agent === "claude") {
+      const json = renderAgentsJson(customDefs);
+      if (json) {
+        agentsFile = agentsFilePath(id);
+        mkdirSync3(dirname4(agentsFile), { recursive: true });
+        writeFileSync(agentsFile, json);
+      }
+    }
     const flags = agentFlags({
       agent,
       model: opts.model,
@@ -6525,7 +6815,8 @@ function createSession(projectId, cwd, opts = {}) {
       goal: opts.goal,
       goalGate
     }).map(sq).join(" ");
-    argv = [sq(agentBin(agent)), promptArg, flags].filter(Boolean).join(" ");
+    const agentsArg = agentsFile ? `--agents "$(cat ${sq(agentsFile)})"` : "";
+    argv = [sq(agentBin(agent)), promptArg, flags, agentsArg].filter(Boolean).join(" ");
   }
   const envPairs = [];
   if (!opts.command && agent === "claude") {
@@ -6630,11 +6921,23 @@ async function sendToPane(id, text, chunkMs = 50) {
   const line = text.replace(/\s*\r?\n\s*/g, " ").trim();
   if (!line) return false;
   try {
+    const io = {
+      capture: () => capturePane(id, DIALOG_CAPTURE_LINES),
+      literal: (s) => {
+        tmux("send-keys", "-t", name(id), "-l", s);
+      },
+      enter: () => {
+        tmux("send-keys", "-t", name(id), "Enter");
+      },
+      sleep
+    };
+    const free = readChoiceDialog(io.capture())?.freeIndex ?? null;
+    if (free !== null) return await answerChoiceDialog(io, free, line, chunkMs);
     for (const chunk of goalChunks(line)) {
-      tmux("send-keys", "-t", name(id), "-l", chunk);
+      io.literal(chunk);
       await sleep(chunkMs);
     }
-    tmux("send-keys", "-t", name(id), "Enter");
+    io.enter();
     return true;
   } catch {
     return false;
@@ -6728,7 +7031,7 @@ function end(id, code) {
 function pollPhases(p, a) {
   if (!p.flow || !p.phaseFile) return;
   const phases = readPhases(p.phaseFile, p.flow);
-  const complete = sessionComplete(phases, p.cwd, p.specId);
+  const complete = paneComplete(p);
   const json = phaseKey(phases, complete);
   if (json === a.lastPhases) return;
   a.lastPhases = json;
@@ -6775,7 +7078,7 @@ function attach(id, c) {
   if (a.scrollback) c.send(frame({ t: "data", d: a.scrollback }));
   if (p.flow && p.phaseFile) {
     const phases = readPhases(p.phaseFile, p.flow);
-    const complete = sessionComplete(phases, p.cwd, p.specId);
+    const complete = paneComplete(p);
     a.lastPhases = phaseKey(phases, complete);
     c.send(frame({ t: "phase", phases, complete }));
   }
@@ -6814,13 +7117,14 @@ function spawnPty(...args) {
     );
   }
 }
-var socket, PREFIX, MAX_SCROLLBACK, POLL_MS, markerFilled, attached, claudeBin, shellBin, codexBin, agentBin, rootBypassEnv, frame, name, promptFilePath, goalGatePath, goalStatePath, NO_SERVER, TmuxError, sq, sessionIdForSpec, idFor, FMT, listSessions, liveDecisions, getSession, hooks, emitBirth, emitDeath, sleep, paneText, GOAL_ARMED_MARKERS, goalArmed, phaseKey, poll, detach;
+var socket, PREFIX, MAX_SCROLLBACK, POLL_MS, markerFilled, attached, claudeBin, shellBin, codexBin, agentBin, rootBypassEnv, frame, name, promptFilePath, goalGatePath, goalStatePath, agentsFilePath, NO_SERVER, TmuxError, sq, sessionIdForSpec, idFor, FMT, listSessions, liveDecisions, getSession, hooks, emitBirth, emitDeath, customAgentSource, customAgentsFor, sleep, paneText, DIALOG_CAPTURE_LINES, GOAL_ARMED_MARKERS, goalArmed, phaseKey, paneComplete, sessionFinished, poll, detach;
 var init_pty = __esm({
   "src/services/pty.ts"() {
     "use strict";
     init_src2();
     init_src();
     init_session_phases();
+    init_tui_dialog();
     init_config2();
     socket = () => effectiveStr("HANOMAN_TMUX_SOCKET") ?? "hanoman";
     PREFIX = "hanoman-";
@@ -6844,6 +7148,7 @@ var init_pty = __esm({
     promptFilePath = (id) => `${tmpdir()}/hanoman-prompts/${id}`;
     goalGatePath = (id) => `${tmpdir()}/hanoman-goal-gates/${id}.sh`;
     goalStatePath = (id) => `${tmpdir()}/hanoman-goal-gates/${id}.count`;
+    agentsFilePath = (id) => `${tmpdir()}/hanoman-agents/${id}.json`;
     NO_SERVER = /no server running|error connecting to/i;
     TmuxError = class extends Error {
       constructor(message, noServer) {
@@ -6896,7 +7201,17 @@ var init_pty = __esm({
       } catch {
       }
     };
-    sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+    customAgentSource = () => [];
+    customAgentsFor = (projectId) => {
+      try {
+        return customAgentSource(projectId);
+      } catch {
+        return [];
+      }
+    };
+    sleep = (ms) => new Promise((r) => {
+      setTimeout(r, ms);
+    });
     paneText = (id) => {
       try {
         return tmux("capture-pane", "-p", "-t", name(id));
@@ -6904,6 +7219,7 @@ var init_pty = __esm({
         return "";
       }
     };
+    DIALOG_CAPTURE_LINES = 60;
     GOAL_ARMED_MARKERS = {
       claude: ["/goal"],
       codex: ["Goal active", "Pursuing goal", "Goal achieved"]
@@ -6913,6 +7229,11 @@ var init_pty = __esm({
       return GOAL_ARMED_MARKERS[agent].some((m) => text.includes(m));
     };
     phaseKey = (phases, complete) => JSON.stringify({ phases, complete });
+    paneComplete = (p) => !!p.flow && !!p.phaseFile && sessionComplete(readPhases(p.phaseFile, p.flow), p.cwd, p.specId);
+    sessionFinished = (id) => {
+      const p = getSession(id);
+      return !!p && paneComplete(p);
+    };
     detach = (id, c) => {
       attached.get(id)?.clients.delete(c);
     };
@@ -7000,6 +7321,7 @@ var init_rename_project = __esm({
 var sync_exports = {};
 __export(sync_exports, {
   SYNCED: () => SYNCED,
+  __FIELDS_FOR_TEST: () => __FIELDS_FOR_TEST,
   applyPush: () => applyPush,
   backfillFeed: () => backfillFeed,
   isEntity: () => isEntity,
@@ -7137,33 +7459,41 @@ async function upsertLocal(entity, id, version, data) {
 function setAcceptedHook(hook) {
   onAccepted = hook;
 }
-var SYNCED, DELEGATE, FIELDS, DATE_FIELDS, onAccepted;
+var SYNCED, DELEGATE, FIELDS, DATE_FIELDS, onAccepted, __FIELDS_FOR_TEST;
 var init_sync = __esm({
   "src/services/sync.ts"() {
     "use strict";
     init_db();
     init_rename_project();
-    SYNCED = ["project", "spec", "vps", "sessionResult", "ticket", "ticketAttachment"];
+    SYNCED = ["project", "spec", "vps", "sessionResult", "ticket", "ticketAttachment", "customAgent"];
     DELEGATE = {
       project: prisma.project,
       spec: prisma.spec,
       vps: prisma.vps,
       sessionResult: prisma.sessionResult,
       ticket: prisma.ticket,
-      ticketAttachment: prisma.ticketAttachment
+      ticketAttachment: prisma.ticketAttachment,
+      customAgent: prisma.customAgent
     };
     FIELDS = {
       project: ["name", "desc", "kind", "stack", "gitRemote", "updatedAt"],
       // SPEC-408 · ADR-0090 · createdAt/startedAt ikut menyeberang — sejajar baseSha/headSha. Tanpa
       // ini spec asal-hub mendapat createdAt lokal palsu di tiap client (kolom NOT NULL ber-default).
-      spec: ["projectId", "title", "source", "stage", "priority", "author", "objective", "payload", "branchFrom", "baseSha", "headSha", "createdAt", "startedAt", "updatedAt"],
+      // SPEC-447 · ADR-0093 · dependsOn ikut juga: tanpa itu client tak tahu urutannya dan akan
+      // meluncurkan pekerjaan yang di hub terblokir. Bukan DATE_FIELDS — nilainya array string.
+      spec: ["projectId", "title", "source", "stage", "priority", "author", "objective", "payload", "branchFrom", "baseSha", "headSha", "dependsOn", "createdAt", "startedAt", "updatedAt"],
       vps: ["name", "host", "port", "user", "health", "audit", "hardened", "lastSeenAt", "lastAuditAt", "updatedAt"],
       sessionResult: ["projectId", "specId", "oldStage", "newStage", "commitSha", "branch", "prUrl", "status", "deviceId", "author", "createdAt", "updatedAt"],
       // SPEC-268 · ADR-0066 · metadata tiket (lampiran biner tak disync). accessKeyHash wajib
       // (kolom required @unique tanpa default); kunci plaintext tak pernah menyeberang.
       ticket: ["projectId", "number", "category", "title", "detail", "reporterEmail", "status", "accessKeyHash", "specId", "createdAt", "updatedAt"],
       // SPEC-272 · ADR-0068 · metadata lampiran (byte tak disync; ditarik lazy dari hub saat dibuka).
-      ticketAttachment: ["ticketId", "projectId", "filename", "mimeType", "size", "storageKey", "createdAt", "updatedAt"]
+      ticketAttachment: ["ticketId", "projectId", "filename", "mimeType", "size", "storageKey", "createdAt", "updatedAt"],
+      // SPEC-450 · ADR-0094 · SELURUH kolom bermakna ikut menyeberang. `enabled` & `mentions` wajib
+      // ada: `upsert` yang tak menyebut kolom ber-default TETAP berhasil, jadi kolom yang terlewat
+      // mendarat sebagai default palsu di tiap client tanpa satu pun error (kelas ADR-0090/0093).
+      // `version` tak pernah masuk FIELDS — ia stempel mekanisme sync itu sendiri.
+      customAgent: ["projectId", "name", "description", "instructions", "tools", "model", "mentions", "enabled", "createdAt", "updatedAt"]
     };
     DATE_FIELDS = {
       project: ["updatedAt"],
@@ -7171,8 +7501,10 @@ var init_sync = __esm({
       vps: ["lastSeenAt", "lastAuditAt", "updatedAt"],
       sessionResult: ["createdAt", "updatedAt"],
       ticket: ["createdAt", "updatedAt"],
-      ticketAttachment: ["createdAt", "updatedAt"]
+      ticketAttachment: ["createdAt", "updatedAt"],
+      customAgent: ["createdAt", "updatedAt"]
     };
+    __FIELDS_FOR_TEST = FIELDS;
   }
 });
 
@@ -15360,6 +15692,128 @@ async function readEscalation(specId, sessions = listSessions()) {
   };
 }
 
+// src/services/spec-deps.ts
+init_db();
+init_src2();
+var REASON_LABEL = {
+  missing: "tak ditemukan",
+  unfinished: "belum selesai",
+  unmerged: "belum ter-merge"
+};
+function dependsOnOf(spec) {
+  const v = spec.dependsOn;
+  if (!Array.isArray(v)) return [];
+  const out3 = [];
+  for (const x of v) if (typeof x === "string" && x !== "" && !out3.includes(x)) out3.push(x);
+  return out3;
+}
+function blockersFor(spec, deps, isMerged) {
+  const ids = dependsOnOf(spec);
+  if (ids.length === 0) return [];
+  const base = spec.branchFrom ?? "HEAD";
+  const out3 = [];
+  for (const id of ids) {
+    const d = deps.get(id);
+    if (!d) {
+      out3.push({ id, reason: "missing" });
+      continue;
+    }
+    if (d.stage !== "done") {
+      out3.push({ id, reason: "unfinished" });
+      continue;
+    }
+    if (d.headSha && !isMerged(d.headSha, base)) out3.push({ id, reason: "unmerged" });
+  }
+  return out3;
+}
+function blockedNote(bl) {
+  return `menunggu ${bl.map((b) => `${b.id} (${REASON_LABEL[b.reason]})`).join(", ")}`;
+}
+function reaches(edges, from, target2) {
+  const seen = /* @__PURE__ */ new Set();
+  const stack = [...from];
+  while (stack.length) {
+    const cur = stack.pop();
+    if (cur === target2) return true;
+    if (seen.has(cur)) continue;
+    seen.add(cur);
+    for (const n of edges.get(cur) ?? []) stack.push(n);
+  }
+  return false;
+}
+var TTL_MS = 15e3;
+var mergeCache = /* @__PURE__ */ new Map();
+function mergedInto(repoDir, sha, baseRef) {
+  const key = `${repoDir} ${sha} ${baseRef}`;
+  const hit = mergeCache.get(key);
+  const now = Date.now();
+  if (hit && now - hit.at < TTL_MS) return hit.v;
+  let v = false;
+  try {
+    v = realGit.isAncestor(repoDir, sha, baseRef);
+  } catch {
+    v = false;
+  }
+  mergeCache.set(key, { at: now, v });
+  return v;
+}
+var merger = (repoDir) => (sha, base) => repoDir ? mergedInto(repoDir, sha, base) : false;
+var depRows = (ids) => prisma.spec.findMany({
+  where: { id: { in: ids } },
+  select: { id: true, stage: true, headSha: true }
+});
+async function blockersForSpec(spec, repoDir) {
+  const ids = dependsOnOf(spec);
+  if (ids.length === 0) return [];
+  const rows = await depRows(ids);
+  return blockersFor(spec, new Map(rows.map((r) => [r.id, r])), merger(repoDir));
+}
+async function decorateBlocked(specs) {
+  const ids = [...new Set(specs.flatMap(dependsOnOf))];
+  if (ids.length === 0) return specs.map((s) => ({ ...s, dependsOn: [], blockedBy: [] }));
+  const rows = await depRows(ids);
+  const deps = new Map(rows.map((r) => [r.id, r]));
+  const repos = /* @__PURE__ */ new Map();
+  const out3 = [];
+  for (const s of specs) {
+    const own = dependsOnOf(s);
+    if (own.length === 0) {
+      out3.push({ ...s, dependsOn: [], blockedBy: [] });
+      continue;
+    }
+    if (!repos.has(s.projectId)) repos.set(s.projectId, await resolveRepoDir(s.projectId));
+    out3.push({ ...s, dependsOn: own, blockedBy: blockersFor(s, deps, merger(repos.get(s.projectId))) });
+  }
+  return out3;
+}
+async function validateDependsOn(specId, projectId, raw) {
+  const ids = dependsOnOf({ dependsOn: raw });
+  if (ids.length === 0) return { ok: true, ids: [] };
+  if (specId && ids.includes(specId))
+    return { ok: false, error: "backlog tak bisa bergantung pada dirinya sendiri" };
+  const rows = await prisma.spec.findMany({
+    where: { id: { in: ids } },
+    select: { id: true, projectId: true }
+  });
+  const found = new Map(rows.map((r) => [r.id, r.projectId]));
+  const missing = ids.filter((i) => !found.has(i));
+  if (missing.length) return { ok: false, error: `backlog tak ditemukan: ${missing.join(", ")}` };
+  const foreign = ids.filter((i) => found.get(i) !== projectId);
+  if (foreign.length)
+    return { ok: false, error: `dependency harus di project yang sama: ${foreign.join(", ")}` };
+  if (specId) {
+    const all = await prisma.spec.findMany({
+      where: { projectId },
+      select: { id: true, dependsOn: true }
+    });
+    const edges = new Map(all.map((r) => [r.id, dependsOnOf(r)]));
+    edges.set(specId, ids);
+    if (reaches(edges, ids, specId))
+      return { ok: false, error: "dependency membentuk siklus" };
+  }
+  return { ok: true, ids };
+}
+
 // src/services/doc-export.ts
 import PDFDocument from "pdfkit";
 
@@ -17829,7 +18283,7 @@ async function liveSpecs(filter = {}) {
     orderBy: { id: "desc" }
   });
   const live = sessionPhasesBySpec();
-  if (live.size === 0) return specs;
+  if (live.size === 0) return decorateBlocked(specs);
   const advanced = [];
   const doneNow = [];
   const out3 = specs.map((s) => {
@@ -17847,7 +18301,7 @@ async function liveSpecs(filter = {}) {
       if (res.count > 0) await notifySynced("spec", a.id);
     }));
   await Promise.all(doneNow.map((d) => recordCompletion(d.specId, d.title, d.projectId)));
-  return out3;
+  return decorateBlocked(out3);
 }
 
 // src/routes/specs.ts
@@ -17887,6 +18341,8 @@ async function specs_default(app2) {
     const repoDir = await resolveRepoDir(b.project);
     if (b.branchFrom && await branchUnknown(repoDir, b.branchFrom))
       return reply.code(400).send({ error: `branch "${b.branchFrom}" tidak ada di repo project` });
+    const dep = await validateDependsOn(null, b.project, b.dependsOn ?? []);
+    if (!dep.ok) return reply.code(400).send({ error: dep.error });
     const isQa = b.source === "qa";
     const { priority, objective } = deriveSpecFields(b.source, b.payload, b.priority);
     const author = req.user?.email ?? "system";
@@ -17905,7 +18361,9 @@ async function specs_default(app2) {
             author: isQa ? `QA \xB7 ${author}` : b.source === "audit" ? `Audit \xB7 ${author}` : b.source === "goal" ? `Goal \xB7 ${author}` : author,
             objective,
             payload: b.payload,
-            branchFrom: b.branchFrom ?? null
+            branchFrom: b.branchFrom ?? null,
+            dependsOn: dep.ids
+            // SPEC-447 · ADR-0093
           }
         });
       } catch (e) {
@@ -17969,7 +18427,7 @@ ${item.context}` : item.context;
     if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
     const spec = await prisma.spec.findUnique({ where: { id } });
     if (!spec) return reply.code(404).send({ error: "not found" });
-    const { branchFrom, stage, confirmDelete, title, priority: newPriority, payload } = parsed.data;
+    const { branchFrom, stage, confirmDelete, title, priority: newPriority, payload, dependsOn } = parsed.data;
     const editingContent = title !== void 0 || newPriority !== void 0 || payload !== void 0;
     if (editingContent && (spec.stage !== "brainstorming" || spec.baseSha !== null))
       return reply.code(409).send({ error: "backlog item sudah dimulai \u2014 tak bisa diedit" });
@@ -17977,6 +18435,12 @@ ${item.context}` : item.context;
       if (await branchUnknown(await resolveRepoDir(spec.projectId), branchFrom))
         return reply.code(400).send({ error: `branch "${branchFrom}" tidak ada di repo project` });
     }
+    let depIds;
+    if (dependsOn !== void 0) {
+      const d = await validateDependsOn(spec.id, spec.projectId, dependsOn);
+      if (!d.ok) return reply.code(400).send({ error: d.error });
+      depIds = d.ids;
+    }
     if (stage !== void 0) {
       if (STAGES.indexOf(stage) >= STAGES.indexOf(spec.stage))
         return reply.code(422).send({ error: "stage hanya boleh dikembalikan mundur" });
@@ -17988,6 +18452,7 @@ ${item.context}` : item.context;
     }
     const data = {};
     if (branchFrom !== void 0) data.branchFrom = branchFrom;
+    if (depIds !== void 0) data.dependsOn = depIds;
     if (stage !== void 0) data.stage = stage;
     if (editingContent) {
       const effPayload = payload ?? spec.payload;
@@ -18020,8 +18485,21 @@ ${item.context}` : item.context;
   });
   app2.delete("/specs/:id", async (req, reply) => {
     const { id } = req.params;
+    const gone = await prisma.spec.findUnique({ where: { id }, select: { projectId: true } });
     await prisma.spec.delete({ where: { id } }).catch(() => {
     });
+    if (gone) {
+      const rows = await prisma.spec.findMany({
+        where: { projectId: gone.projectId },
+        select: { id: true, dependsOn: true }
+      });
+      for (const r of rows) {
+        const ids = dependsOnOf(r);
+        if (!ids.includes(id)) continue;
+        await prisma.spec.update({ where: { id: r.id }, data: { dependsOn: ids.filter((x) => x !== id) } });
+        await notifySynced("spec", r.id);
+      }
+    }
     return reply.code(204).send();
   });
   app2.post("/specs/:id/integrate", async (req, reply) => {
@@ -19251,9 +19729,11 @@ init_pty();
 init_session_phases();
 init_pty();
 var LaunchError = class extends Error {
-  constructor(message, kind) {
+  // SPEC-447 · `blockers` hanya terisi untuk kind "blocked"; route memetakannya ke body 409.
+  constructor(message, kind, blockers = []) {
     super(message);
     this.kind = kind;
+    this.blockers = blockers;
   }
 };
 function resumeState(repoDir, worktree, branchTo, headSha) {
@@ -19275,6 +19755,11 @@ async function startSpecSession(spec, opts) {
   const id = sessionIdForSpec(spec.id);
   const pane = getSession(id);
   if (pane && !pane.exited) return { id: pane.id, reused: true };
+  if (!opts.force) {
+    const blockers = await blockersForSpec(spec, repoDir);
+    if (blockers.length)
+      throw new LaunchError(`${spec.id} ${blockedNote(blockers)}`, "blocked", blockers);
+  }
   if (pane) killSession(id);
   const setting = await getSetting();
   const agent = opts.agent ?? setting.agent;
@@ -19437,12 +19922,16 @@ async function terminal_default(app2) {
           // SPEC-332 · ADR-0073
           agent: parsed.data.agent,
           // SPEC-338 · ADR-0074
-          verifyScope: parsed.data.verifyScope
+          verifyScope: parsed.data.verifyScope,
           // SPEC-376 · ADR-0080
+          force: parsed.data.force
+          // SPEC-447 · ADR-0093
         });
         return reply.code(201).send(r.resumed ? { id: r.id, resumed: true } : { id: r.id });
       } catch (e) {
         if (e instanceof LaunchError) {
+          if (e.kind === "blocked")
+            return reply.code(409).send({ error: e.message, blocked: true, blockers: e.blockers });
           return e.kind === "needs-bind" ? reply.code(400).send({ error: e.message, needsBind: true }) : reply.code(422).send({ error: e.message });
         }
         throw e;
@@ -20378,7 +20867,7 @@ import { readFileSync as readFileSync9 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
 import { join as join9 } from "node:path";
 var USAGE_URL = "https://api.anthropic.com/api/oauth/usage";
-var TTL_MS = 3e4;
+var TTL_MS2 = 3e4;
 var lastOk = null;
 var freshUntil = 0;
 var LABELS = {
@@ -20456,7 +20945,7 @@ async function fetchUsage() {
 async function getLimits() {
   if (lastOk && Date.now() < freshUntil) return lastOk;
   const dto = await fetchUsage();
-  if (dto.status === "ok") freshUntil = Date.now() + TTL_MS;
+  if (dto.status === "ok") freshUntil = Date.now() + TTL_MS2;
   return dto;
 }
 
@@ -20464,7 +20953,7 @@ async function getLimits() {
 import { open as open2, readdir as readdir2, stat } from "node:fs/promises";
 import { homedir as homedir7 } from "node:os";
 import { join as join10 } from "node:path";
-var TTL_MS2 = 3e4;
+var TTL_MS3 = 3e4;
 var STALE_AFTER_MS = 12 * 36e5;
 var TAIL_BYTES = 512 * 1024;
 var MAX_FILES = 8;
@@ -20569,7 +21058,7 @@ async function getCodexLimits(dir2) {
   const dto = await readLimits(codexSessionsDir());
   if (dto.status !== "unavailable") {
     cache2 = dto;
-    freshUntil2 = Date.now() + TTL_MS2;
+    freshUntil2 = Date.now() + TTL_MS3;
   }
   return dto;
 }
@@ -20587,7 +21076,7 @@ import { execFile as execFile8 } from "node:child_process";
 import { promisify as promisify8 } from "node:util";
 var run = promisify8(execFile8);
 var CODEX_MIN_CLIENT = "0.144.0";
-var TTL_MS3 = 5 * 6e4;
+var TTL_MS4 = 5 * 6e4;
 var cache3 = null;
 var codexBin2 = () => effectiveStr("HANOMAN_CODEX_BIN") ?? "codex";
 function parseCodexVersion(out3) {
@@ -20595,7 +21084,7 @@ function parseCodexVersion(out3) {
   return m ? `${m[1]}.${m[2]}.${m[3]}` : null;
 }
 async function getCodexVersion(now = Date.now()) {
-  if (cache3 && now - cache3.at < TTL_MS3) return cache3.version;
+  if (cache3 && now - cache3.at < TTL_MS4) return cache3.version;
   let version = null;
   try {
     const { stdout } = await run(codexBin2(), ["--version"], { timeout: 5e3 });
@@ -21825,6 +22314,11 @@ async function markDone(id, note) {
     data: { status: "done", ...note ? { note } : {} }
   });
 }
+async function noteQueued(id, note) {
+  const row = await prisma.schedulerQueueItem.findUnique({ where: { id }, select: { note: true } });
+  if (row?.note === note) return;
+  await prisma.schedulerQueueItem.update({ where: { id }, data: { note } });
+}
 
 // src/services/scheduler/registry.ts
 var sources = /* @__PURE__ */ new Map();
@@ -22113,6 +22607,7 @@ function toDecisionView(r) {
 
 // src/services/lead/brain.ts
 init_config2();
+init_pty();
 import { execFile as execFile9 } from "node:child_process";
 var binFor = (agent) => agent === "codex" ? effectiveStr("HANOMAN_CODEX_BIN") ?? "codex" : effectiveStr("HANOMAN_CLAUDE_BIN") ?? "claude";
 function leadArgv(o) {
@@ -22133,14 +22628,16 @@ function leadArgv(o) {
     o.prompt
   ];
 }
+var leadEnv = (agent, base = process.env, uid = process.getuid?.()) => agent === "claude" ? { ...rootBypassEnv(uid), ...base } : { ...base };
 function think(prompt, o) {
   const bin = binFor(o.agent);
   const args = leadArgv({ agent: o.agent, model: o.model, effort: o.effort, prompt });
   return new Promise((resolve14, reject) => {
-    execFile9(bin, args, {
+    const child = execFile9(bin, args, {
       cwd: o.cwd,
       timeout: o.timeoutMs,
       maxBuffer: 16 * 1024 * 1024,
+      env: leadEnv(o.agent),
       encoding: "utf8",
       killSignal: "SIGTERM"
     }, (err, stdout, stderr) => {
@@ -22151,6 +22648,7 @@ function think(prompt, o) {
       }
       resolve14(stdout);
     });
+    child.stdin?.end();
   });
 }
 
@@ -22373,12 +22871,11 @@ async function integrateMain(row, deps) {
   if (!repoDir) return { ok: false, detail: `project ${row.projectId} belum di-bind ke checkout lokal` };
   const spec = await prisma.spec.findUnique({ where: { id: row.specId } });
   if (!spec) return { ok: false, detail: `backlog ${row.specId} tak ada` };
+  const sid = sessionIdForSpec(spec.id);
+  const done = deps.planDone(worktreeDir(repoDir, spec.id), spec.id);
   const evidence = [];
   if (cfg.requireGreenBeforeIntegrate) {
-    const wt = worktreeDir(repoDir, spec.id);
-    const done = deps.planDone(wt, spec.id);
     evidence.push(done ? "plan tak menyisakan `- [ ]`" : "plan MASIH menyisakan `- [ ]`");
-    const sid = sessionIdForSpec(spec.id);
     const pane = deps.sessionExists(sid);
     evidence.push(pane ? `pane ${sid} masih ada` : `pane ${sid} sudah tak ada`);
     if (!done) {
@@ -22397,6 +22894,9 @@ async function integrateMain(row, deps) {
   }
   const res = await deps.integrate(repoDir, spec.id, "merge", "local:main");
   evidence.push(`integrate \u2192 ${res.status}`);
+  if (res.status === "clean" && done && deps.sessionExists(sid)) {
+    evidence.push(deps.killSession(sid) ? `pane ${sid} dilepas (worktree utuh)` : `pane ${sid} gagal dilepas`);
+  }
   await recordEvidence(row, evidence, res.status === "clean" ? "integrasi bersih" : `integrasi tak bersih: ${res.status}`);
   if (res.status !== "clean") {
     await deps.notify(
@@ -22421,8 +22921,10 @@ Bukti integrasi: ${evidence.join("; ")} \u2192 ${verdict}.` }
 
 // src/services/lead/detect.ts
 init_pty();
+import { writeFileSync as writeFileSync4 } from "node:fs";
 
 // src/services/lead/pane.ts
+init_tui_dialog();
 var CLEAN = /[│┃┆┊┌┐└┘├┤┬┴┼─━╭╮╰╯>❯]/g;
 var tail = (text, lines2) => text.split("\n").map((l) => l.replace(CLEAN, " ").trimEnd()).filter((l) => l.trim()).slice(-lines2);
 var CODEX_FINISHED = [
@@ -22439,15 +22941,16 @@ var ASK_SIGNALS = [
 function readPaneQuestion(text, agent) {
   const lines2 = tail(text, 40);
   const body = lines2.join("\n").trim();
-  if (!body) return { asking: false, question: "", reason: "layar kosong" };
+  const choices = readChoiceDialog(text)?.options ?? [];
+  if (!body) return { asking: false, question: "", reason: "layar kosong", choices };
   const question = tail(text, 25).join("\n").trim();
   if (agent === "codex") {
     const finished = CODEX_FINISHED.find((re) => re.test(body));
-    if (finished) return { asking: false, question, reason: "sesi codex selesai wajar (ADR-0074)" };
+    if (finished) return { asking: false, question, reason: "sesi codex selesai wajar (ADR-0074)", choices };
     if (!ASK_SIGNALS.some((re) => re.test(body)))
-      return { asking: false, question, reason: "tak ada sinyal pertanyaan di layar codex" };
+      return { asking: false, question, reason: "tak ada sinyal pertanyaan di layar codex", choices };
   }
-  return { asking: true, question, reason: "" };
+  return { asking: true, question, reason: "", choices };
 }
 
 // src/services/lead/detect.ts
@@ -22485,6 +22988,12 @@ var prodDetectDeps = {
     }
   },
   send: (id, text) => sendToPane(id, text),
+  clearMarker: (file) => {
+    try {
+      writeFileSync4(file, "");
+    } catch {
+    }
+  },
   decide,
   decideDeps: prodDecideDeps,
   optIn: leadProjects,
@@ -22547,6 +23056,10 @@ async function scanAndAnswer(deps = prodDetectDeps) {
       skip(read.reason);
       continue;
     }
+    const notes = [`Sesi ini menunggu di terminal; teks di bawah adalah layar terakhirnya. Jawablah sebagai masukan yang bisa langsung diketik ke terminal itu (isi \`reply\`).`];
+    if (read.choices.length) {
+      notes.push("Layarnya adalah dialog pilihan. `reply` akan dimasukkan sebagai JAWABAN BEBAS ke dialog itu, jadi tulislah jawaban yang berdiri sendiri \u2014 sebut opsi yang kamu pilih beserta alasan singkatnya, bukan nomornya saja.");
+    }
     const row = await deps.decide({
       projectId: s.projectId,
       specId: s.specId,
@@ -22554,7 +23067,8 @@ async function scanAndAnswer(deps = prodDetectDeps) {
       gate: "detected",
       kind: "answer",
       question: read.question,
-      notes: [`Sesi ini menunggu di terminal; teks di bawah adalah layar terakhirnya. Jawablah sebagai masukan yang bisa langsung diketik ke terminal itu (isi \`reply\`).`]
+      options: read.choices.length ? read.choices : void 0,
+      notes
     }, deps.decideDeps);
     if (!row || row.status !== "berlaku") {
       skip("lead tak menghasilkan keputusan yang berlaku");
@@ -22566,6 +23080,7 @@ async function scanAndAnswer(deps = prodDetectDeps) {
       skip("gagal mengetik ke pane");
       continue;
     }
+    deps.clearMarker(s.decisionFile);
     answers.set(s.id, (answers.get(s.id) ?? 0) + 1);
     out3.answered.push(s.id);
   }
@@ -22618,6 +23133,13 @@ var prodPulseDeps = {
     }
   },
   planDone: planComplete,
+  finished: (id) => {
+    try {
+      return sessionFinished(id);
+    } catch {
+      return false;
+    }
+  },
   decide,
   decideDeps: prodDecideDeps,
   apply: applyAction,
@@ -22638,6 +23160,10 @@ async function pulse(deps = prodPulseDeps) {
     res.quality = await followUpFinished(cfg, optIn, deps);
   } catch {
   }
+  try {
+    res.quality += await followUpComplete(optIn, deps);
+  } catch {
+  }
   try {
     res.collisions = await detectCollisions(optIn, deps);
   } catch {
@@ -22690,6 +23216,49 @@ async function followUpFinished(cfg, optIn, deps) {
   }
   return n;
 }
+async function followUpComplete(optIn, deps) {
+  let n = 0;
+  const opt = new Set(optIn);
+  for (const s of deps.sessions()) {
+    if (!s.specId || !opt.has(s.projectId)) continue;
+    if ((s.exitCode ?? 0) !== 0) continue;
+    if (!deps.finished(s.id)) continue;
+    const mark = `Backlog ${s.specId} sudah selesai di sesi ${s.id}`;
+    const seen = await prisma.leadDecision.findFirst({
+      where: { sessionId: s.id, gate: "pulse", question: { startsWith: mark } }
+    });
+    if (seen) continue;
+    const row = await deps.decide({
+      projectId: s.projectId,
+      specId: s.specId,
+      sessionId: s.id,
+      gate: "pulse",
+      kind: "quality",
+      question: `${mark}: seluruh fasenya tercatat dan plan-nya tak menyisakan kotak \`- [ ]\`. Selama sesinya belum dilepas, ia memegang satu slot concurrency scheduler sehingga backlog lain tak bisa mulai. Integrasikan hasilnya ke main, hentikan sesinya saja, atau biarkan?`,
+      options: [
+        "integrate-main \u2014 merge branch sesi ini ke main; panenya ikut dilepas, worktree tetap utuh",
+        "stop-session \u2014 lepas panenya tanpa mengintegrasikan (worktree tetap utuh, ADR-0084 masih bisa melanjutkan)",
+        "none \u2014 biarkan sesinya berdiri, sertakan alasan kenapa slot itu layak ditahan"
+      ],
+      notes: [
+        `Worktree sesi: ${s.cwd}`,
+        // Rebase sengaja tak ditawarkan: `LEAD_ACTIONS` adalah konstanta tertutup (AC-31), dan
+        // merge adalah yang PALING MUDAH DIBATALKAN dari keduanya — kriteria yang diperintahkan
+        // prompt lead sendiri. Rebase tetap tindakan operator lewat POST /specs/:id/integrate.
+        "Rebase tidak tersedia untukmu; bila hasilnya menuntut rebase, pilih `none` dan katakan begitu."
+      ]
+    }, deps.decideDeps);
+    if (!row) continue;
+    n++;
+    if (row.status === "berlaku" && row.action !== "none") {
+      try {
+        await deps.apply(row);
+      } catch {
+      }
+    }
+  }
+  return n;
+}
 async function detectCollisions(optIn, deps) {
   const opt = new Set(optIn);
   const live = deps.sessions().filter((s) => !s.exited && s.specId && opt.has(s.projectId));
@@ -22736,11 +23305,22 @@ async function orderReadyWork(optIn, deps) {
 async function orderProject(projectId, deps) {
   const project = await prisma.project.findUnique({ where: { id: projectId }, select: { schedulerOptIn: true } });
   if (!project?.schedulerOptIn) return 0;
-  const ready = await prisma.spec.findMany({
+  const readyRaw = await prisma.spec.findMany({
     where: { ...UNSTARTED_SPEC_WHERE, projectId },
-    select: { id: true, projectId: true, title: true, priority: true, objective: true },
+    select: {
+      id: true,
+      projectId: true,
+      title: true,
+      priority: true,
+      objective: true,
+      branchFrom: true,
+      dependsOn: true
+    },
     orderBy: { id: "asc" }
   });
+  const repoDir = await resolveRepoDir(projectId);
+  const ready = [];
+  for (const r of readyRaw) if ((await blockersForSpec(r, repoDir)).length === 0) ready.push(r);
   if (ready.length < 2) return 0;
   const already = new Set((await prisma.schedulerQueueItem.findMany({
     where: { specId: { in: ready.map((r) => r.id) } },
@@ -22951,6 +23531,190 @@ async function lead_default(app2) {
   });
 }
 
+// src/routes/custom-agents.ts
+init_src();
+init_db();
+
+// src/services/custom-agents.ts
+init_db();
+init_src();
+init_pty();
+var cache4 = [];
+var asCustomAgent = (r) => ({
+  id: r.id,
+  projectId: r.projectId,
+  name: r.name,
+  description: r.description,
+  instructions: r.instructions,
+  tools: toolsOf(r.tools),
+  model: r.model,
+  mentions: mentionsOf(r.mentions),
+  enabled: r.enabled,
+  createdAt: "",
+  updatedAt: ""
+  // tak dipakai lapis ini
+});
+async function loadCustomAgents() {
+  try {
+    cache4 = await prisma.customAgent.findMany();
+  } catch {
+    cache4 = [];
+  }
+}
+function agentDefsFor(projectId) {
+  const globals = cache4.filter((r) => r.projectId === null).map(asCustomAgent);
+  const project = cache4.filter((r) => r.projectId === projectId).map(asCustomAgent);
+  return effectiveAgents(globals, project).map((a) => ({
+    name: a.name,
+    description: a.description,
+    instructions: a.instructions,
+    tools: a.tools,
+    model: a.model,
+    mentions: a.mentions ?? []
+  }));
+}
+function validateGraph(rows) {
+  const projectScopes = [...new Set(rows.map((r) => r.projectId).filter((p) => p !== null))];
+  const globals = rows.filter((r) => r.projectId === null).map(asCustomAgent);
+  for (const scope of [null, ...projectScopes]) {
+    const project = scope === null ? [] : rows.filter((r) => r.projectId === scope).map(asCustomAgent);
+    const nodes = effectiveAgents(globals, project).map((a) => ({ name: a.name, mentions: a.mentions ?? [] }));
+    const cycle = detectCycle(nodes);
+    if (cycle) return { scope: scope ?? GLOBAL_SCOPE, cycle };
+  }
+  return null;
+}
+function unknownMentions(row, all) {
+  const visible = new Set(
+    all.filter((r) => r.projectId === null || row.projectId !== null && r.projectId === row.projectId).map((r) => r.name)
+  );
+  return mentionsOf(row.mentions).filter((m) => !visible.has(m));
+}
+async function installCustomAgents() {
+  await loadCustomAgents();
+  registerCustomAgentSource((projectId) => agentDefsFor(projectId));
+}
+
+// src/routes/custom-agents.ts
+var rowsOf = async () => await prisma.customAgent.findMany();
+var view6 = (r, projectId) => ({
+  id: r.id,
+  projectId: r.projectId,
+  name: r.name,
+  description: r.description,
+  instructions: r.instructions,
+  tools: toolsOf(r.tools),
+  model: r.model,
+  mentions: mentionsOf(r.mentions),
+  enabled: r.enabled,
+  ...projectId ? { inherited: r.projectId === null } : {}
+});
+async function custom_agents_default(app2) {
+  app2.get("/custom-agents", async (req) => {
+    const projectId = req.query.projectId;
+    const rows = await prisma.customAgent.findMany({
+      where: projectId ? { OR: [{ projectId: null }, { projectId }] } : { projectId: null },
+      orderBy: { name: "asc" }
+    });
+    const byName = /* @__PURE__ */ new Map();
+    for (const r of rows) if (r.projectId === null) byName.set(r.name, r);
+    for (const r of rows) if (r.projectId !== null) byName.set(r.name, r);
+    return [...byName.values()].sort((a, b) => a.name.localeCompare(b.name)).map((r) => view6(r, projectId));
+  });
+  app2.post("/custom-agents", async (req, reply) => {
+    const parsed = zCreateCustomAgent.safeParse(req.body);
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    const p = parsed.data;
+    const projectId = p.projectId ?? null;
+    if (projectId && !await prisma.project.findUnique({ where: { id: projectId } }))
+      return reply.code(400).send({ error: "project tak ditemukan", projectId });
+    const id = customAgentId(projectId, p.name);
+    if (await prisma.customAgent.findUnique({ where: { id } }))
+      return reply.code(409).send({ error: "nama sudah dipakai di scope ini", id });
+    const candidate = {
+      id,
+      projectId,
+      name: p.name,
+      description: p.description,
+      instructions: p.instructions,
+      tools: p.tools ?? null,
+      model: p.model ?? null,
+      mentions: p.mentions ?? [],
+      enabled: p.enabled ?? true
+    };
+    const all = [...await rowsOf(), candidate];
+    const unknown = unknownMentions(candidate, all);
+    if (unknown.length) return reply.code(400).send({ error: "mention tak dikenal", unknown });
+    const cycle = validateGraph(all);
+    if (cycle) return reply.code(409).send({ error: "mention membentuk siklus", ...cycle });
+    const row = await prisma.customAgent.create({ data: {
+      id,
+      projectId,
+      name: p.name,
+      description: p.description,
+      instructions: p.instructions,
+      tools: candidate.tools,
+      model: candidate.model,
+      mentions: candidate.mentions,
+      enabled: candidate.enabled
+    } });
+    await loadCustomAgents();
+    await notifySynced("customAgent", id);
+    return reply.code(201).send(view6(row));
+  });
+  app2.patch("/custom-agents/:id", async (req, reply) => {
+    const { id } = req.params;
+    const body = req.body ?? {};
+    if ("name" in body || "projectId" in body)
+      return reply.code(400).send({ error: "name & projectId tak bisa diubah \u2014 hapus lalu buat baru" });
+    const parsed = zUpdateCustomAgent.safeParse(body);
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    const existing = await prisma.customAgent.findUnique({ where: { id } });
+    if (!existing) return reply.code(404).send({ error: "not found" });
+    const before = existing;
+    const candidate = {
+      ...before,
+      ...parsed.data,
+      mentions: parsed.data.mentions ?? mentionsOf(before.mentions),
+      tools: parsed.data.tools !== void 0 ? parsed.data.tools : toolsOf(before.tools)
+    };
+    const all = (await rowsOf()).map((r) => r.id === id ? candidate : r);
+    const unknown = unknownMentions(candidate, all);
+    if (unknown.length) return reply.code(400).send({ error: "mention tak dikenal", unknown });
+    const cycle = validateGraph(all);
+    if (cycle) return reply.code(409).send({ error: "mention membentuk siklus", ...cycle });
+    const row = await prisma.customAgent.update({ where: { id }, data: {
+      description: candidate.description,
+      instructions: candidate.instructions,
+      tools: candidate.tools,
+      model: candidate.model,
+      mentions: candidate.mentions,
+      enabled: candidate.enabled
+    } });
+    await loadCustomAgents();
+    await notifySynced("customAgent", id);
+    return view6(row);
+  });
+  app2.delete("/custom-agents/:id", async (req, reply) => {
+    const { id } = req.params;
+    const existing = await prisma.customAgent.findUnique({ where: { id } });
+    if (!existing) return reply.code(404).send({ error: "not found" });
+    await prisma.customAgent.delete({ where: { id } });
+    const name2 = existing.name;
+    for (const r of await rowsOf()) {
+      const m = mentionsOf(r.mentions);
+      if (!m.includes(name2)) continue;
+      await prisma.customAgent.update({
+        where: { id: r.id },
+        data: { mentions: m.filter((x) => x !== name2) }
+      });
+      await notifySynced("customAgent", r.id);
+    }
+    await loadCustomAgents();
+    return reply.code(204).send();
+  });
+}
+
 // src/app.ts
 var import_multipart = __toESM(require_multipart2(), 1);
 
@@ -23032,7 +23796,7 @@ function cookieOpts() {
 }
 
 // src/routes/auth.ts
-var view6 = (u) => ({ id: u.id, email: u.email, createdAt: u.createdAt.toISOString() });
+var view7 = (u) => ({ id: u.id, email: u.email, createdAt: u.createdAt.toISOString() });
 async function issue(reply, userId) {
   const token = await createSession2(userId);
   reply.setCookie(COOKIE_NAME, token, cookieOpts());
@@ -23050,7 +23814,7 @@ async function auth_default(app2) {
       data: { email: p.data.email, passwordHash: await hashPassword(p.data.password) }
     });
     await issue(reply, user.id);
-    return { user: view6(user) };
+    return { user: view7(user) };
   });
   app2.post("/auth/login", async (req, reply) => {
     if (loginThrottle(req.ip).blocked) return reply.code(429).send({ error: "too many attempts" });
@@ -23063,7 +23827,7 @@ async function auth_default(app2) {
     }
     clearLoginFails(req.ip);
     await issue(reply, user.id);
-    return { user: view6(user) };
+    return { user: view7(user) };
   });
   app2.post("/auth/logout", async (req, reply) => {
     const token = req.cookies?.[COOKIE_NAME];
@@ -23071,7 +23835,7 @@ async function auth_default(app2) {
     reply.clearCookie(COOKIE_NAME, { path: "/" });
     return reply.code(204).send();
   });
-  app2.get("/auth/users", async () => (await prisma.user.findMany({ orderBy: { createdAt: "asc" } })).map(view6));
+  app2.get("/auth/users", async () => (await prisma.user.findMany({ orderBy: { createdAt: "asc" } })).map(view7));
   app2.post("/auth/users", async (req, reply) => {
     const p = zSignup.safeParse(req.body);
     if (!p.success) return reply.code(400).send({ error: p.error.flatten() });
@@ -23080,7 +23844,7 @@ async function auth_default(app2) {
     const user = await prisma.user.create({
       data: { email: p.data.email, passwordHash: await hashPassword(p.data.password) }
     });
-    return view6(user);
+    return view7(user);
   });
   app2.delete("/auth/users/:id", async (req, reply) => {
     if (await prisma.user.count() <= 1) return reply.code(400).send({ error: "tak bisa hapus user terakhir" });
@@ -23100,7 +23864,7 @@ async function auth_default(app2) {
     });
     await deleteUserSessions(user.id);
     await issue(reply, user.id);
-    return { user: view6(user) };
+    return { user: view7(user) };
   });
 }
 
@@ -23179,15 +23943,15 @@ async function agent_tokens_default(app2) {
   app2.post("/agent-tokens", async (req, reply) => {
     const p = zAgentTokenCreate.safeParse(req.body);
     if (!p.success) return reply.code(400).send({ error: p.error.flatten() });
-    const { view: view7, token } = await issueAgentToken({ ...p.data, createdBy: req.user?.id });
-    return reply.code(201).send({ ...view7, token });
+    const { view: view8, token } = await issueAgentToken({ ...p.data, createdBy: req.user?.id });
+    return reply.code(201).send({ ...view8, token });
   });
   app2.patch("/agent-tokens/:id", async (req, reply) => {
     const p = zAgentTokenPatch.safeParse(req.body);
     if (!p.success) return reply.code(400).send({ error: p.error.flatten() });
     const { id } = req.params;
-    const view7 = await patchAgentToken(id, p.data);
-    return view7 ? reply.send(view7) : reply.code(404).send({ error: "not found" });
+    const view8 = await patchAgentToken(id, p.data);
+    return view8 ? reply.send(view8) : reply.code(404).send({ error: "not found" });
   });
   app2.delete("/agent-tokens/:id", async (req, reply) => {
     const { id } = req.params;
@@ -23235,6 +23999,7 @@ function capabilityForRoute(method, path) {
     return read ? "GLOBAL_READ" : "COOKIE_ONLY";
   if (top === "scheduler") return rw("settings");
   if (top === "lead") return rw("lead");
+  if (top === "custom-agents") return rw("agents");
   if (top === "settings" || top === "config") return rw("settings");
   if (top === "specs") return rw("backlog");
   if (top === "notifications") return rw("notifications");
@@ -23341,6 +24106,7 @@ function buildApp({ requireAuth = true } = {}) {
     await api.register(scheduler_default);
     await api.register(codex);
     await api.register(lead_default);
+    await api.register(custom_agents_default);
   }, { prefix: "/api" });
   if (process.env.NODE_ENV === "production") {
     const dist = pickWebDir(dirname12(fileURLToPath4(import.meta.url)), process.env, existsSync11);
@@ -23407,6 +24173,11 @@ async function drain(cfg, deps) {
         await markDone(item.id, ALREADY_DONE_NOTE);
         continue;
       }
+      const blocked = await deps.blockers(item.specId);
+      if (blocked.length) {
+        await noteQueued(item.id, blockedNote(blocked));
+        continue;
+      }
       const liveId = deps.isLive(item.specId);
       if (liveId) {
         await markLaunched(item.id, liveId);
@@ -23536,6 +24307,13 @@ var prodDeps = {
     const s = await prisma.spec.findUnique({ where: { id: specId }, select: { stage: true } });
     return s?.stage === "done";
   },
+  // SPEC-447 · ADR-0093 · dibaca ULANG dari DB tepat sebelum launch, seperti `isDone`: `dependsOn`
+  // bisa ditulis operator selagi item mengantre, dan merged-ness bergerak sendiri saat ada integrate.
+  blockers: async (specId) => {
+    const spec = await prisma.spec.findUnique({ where: { id: specId } });
+    if (!spec) return [];
+    return blockersForSpec(spec, await resolveRepoDir(spec.projectId));
+  },
   launch: async (item, autonomy) => {
     const spec = await prisma.spec.findUnique({ where: { id: item.specId } });
     if (!spec) throw new Error(`spec ${item.specId} tak ada`);
@@ -23614,8 +24392,9 @@ async function shutdown(sig) {
 }
 process.on("SIGTERM", () => void shutdown("SIGTERM"));
 process.on("SIGINT", () => void shutdown("SIGINT"));
-app.listen({ port, host }).then(() => {
+app.listen({ port, host }).then(async () => {
   console.log(`hanoman api ${host}:${port}`);
+  await installCustomAgents();
   installSessionHistory();
   try {
     const liveIds = listSessions().map((s) => s.id);