hanoman 0.1.8 → 0.1.10

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.8",
-  "sha": "a749553",
-  "builtAt": "2026-07-31T17:13:08.743Z"
+  "version": "0.1.10",
+  "sha": "db30c30",
+  "builtAt": "2026-08-01T02:45:06.324Z"
 }

package/dist/cli.js

@@ -155,81 +155,6 @@ var init_agent_cli = __esm({
   }
 });
 
-// ../runner/src/paths.ts
-import { homedir } from "node:os";
-import { dirname, isAbsolute, join, resolve } from "node:path";
-function resolveHome(env = process.env, home = homedir()) {
-  const v = env.HANOMAN_HOME?.trim();
-  return v ? v : join(home, ".hanoman");
-}
-function schemeOf(raw) {
-  return raw.split("://")[0] ?? "?";
-}
-function resolveDbUrl(env, schemaDir) {
-  const own = env.HANOMAN_DATABASE_URL?.trim();
-  if (own) {
-    if (!own.startsWith("file:")) {
-      throw new Error(
-        `HANOMAN_DATABASE_URL harus URL SQLite \`file:\u2026\` sejak ADR-0086 (dapat \`${schemeOf(own)}\`). Masih punya data Postgres? Pindahkan sekali: hanoman migrate-from-postgres --from "<url-postgres>"`
-      );
-    }
-    return absoluteFileUrl(own, schemaDir);
-  }
-  const raw = env.DATABASE_URL?.trim();
-  if (!raw || !raw.startsWith("file:")) return `file:${join(resolveHome(env), "hanoman.db")}`;
-  return absoluteFileUrl(raw, schemaDir);
-}
-function absoluteFileUrl(raw, schemaDir) {
-  const p = raw.slice("file:".length);
-  if (p.startsWith(":")) return raw;
-  return `file:${isAbsolute(p) ? p : resolve(schemaDir, p)}`;
-}
-function dbUrlNotice(env) {
-  if (env.HANOMAN_DATABASE_URL?.trim()) return null;
-  const raw = env.DATABASE_URL?.trim();
-  if (!raw || raw.startsWith("file:")) return null;
-  return `hanoman: DATABASE_URL bertipe \`${schemeOf(raw)}\` DIABAIKAN \u2014 hanoman memakai SQLite (ADR-0086), dan var itu biasanya milik project lain.
-  \u2022 Punya data Postgres hanoman? Pindahkan sekali: hanoman migrate-from-postgres --from "<url>"
-  \u2022 Mau menunjuk berkas DB tertentu? Pakai HANOMAN_DATABASE_URL=file:/path/hanoman.db (atau --db)`;
-}
-function dbFilePath(url) {
-  if (!url.startsWith("file:")) throw new Error(`bukan URL SQLite: ${url}`);
-  return url.slice("file:".length);
-}
-function prismaCliPath(resolver) {
-  for (const spec of ["prisma/build/index.js", "prisma/package.json"]) {
-    try {
-      const p = resolver(spec);
-      return spec.endsWith("package.json") ? join(dirname(p), "build", "index.js") : p;
-    } catch {
-    }
-  }
-  throw new Error("CLI prisma tak ditemukan \u2014 `prisma` wajib terpasang sebagai dependency");
-}
-var init_paths = __esm({
-  "../runner/src/paths.ts"() {
-    "use strict";
-  }
-});
-
-// ../runner/src/index.ts
-var init_src = __esm({
-  "../runner/src/index.ts"() {
-    "use strict";
-    init_types();
-    init_prompt();
-    init_reverse_standard();
-    init_git();
-    init_settings();
-    init_goal();
-    init_goal_spec();
-    init_codex_settings();
-    init_agent_cli();
-    init_verify_scope();
-    init_paths();
-  }
-});
-
 // ../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/util.js
 var util, objectUtil, ZodParsedType, getParsedType;
 var init_util = __esm({
@@ -4602,7 +4527,12 @@ var init_agent = __esm({
       // baris jejak & bisa menggerakkan sesi), dan SPEC-405 sudah membuktikan apa yang terjadi saat
       // endpoint tulis menumpang prefix status yang dipetakan tanpa melihat method (AC-5).
       "lead:read",
-      "lead:write"
+      "lead:write",
+      // SPEC-450 · ADR-0094 · custom agent. Domain TERSENDIRI, dipetakan MENURUT METHOD: menulis
+      // definisi agen mengubah apa yang dilihat SETIAP sesi baru di seluruh workspace, jadi izin
+      // baca tak pernah cukup untuk itu (kelas bug SPEC-405).
+      "agents:read",
+      "agents:write"
     ];
     zCapability = external_exports.enum(CAPABILITY_IDS);
     zCapabilityInfo = external_exports.object({
@@ -4636,6 +4566,70 @@ var init_agent = __esm({
   }
 });
 
+// ../shared/src/custom-agent.ts
+var AGENT_NAME_RE, zCustomAgent, zCreateCustomAgent, zUpdateCustomAgent;
+var init_custom_agent = __esm({
+  "../shared/src/custom-agent.ts"() {
+    "use strict";
+    init_zod();
+    AGENT_NAME_RE = /^[a-z][a-z0-9-]{1,39}$/;
+    zCustomAgent = external_exports.object({
+      id: external_exports.string(),
+      projectId: external_exports.string().nullable(),
+      name: external_exports.string().regex(AGENT_NAME_RE),
+      description: external_exports.string(),
+      instructions: external_exports.string(),
+      tools: external_exports.array(external_exports.string()).nullable(),
+      model: external_exports.string().nullable(),
+      mentions: external_exports.array(external_exports.string()).nullable(),
+      enabled: external_exports.boolean(),
+      createdAt: external_exports.string(),
+      updatedAt: external_exports.string()
+    });
+    zCreateCustomAgent = external_exports.object({
+      projectId: external_exports.string().nullable().optional(),
+      name: external_exports.string().regex(AGENT_NAME_RE),
+      description: external_exports.string().trim().min(1).max(500),
+      instructions: external_exports.string().trim().min(1).max(2e4),
+      tools: external_exports.array(external_exports.string()).nullable().optional(),
+      model: external_exports.string().nullable().optional(),
+      mentions: external_exports.array(external_exports.string()).nullable().optional(),
+      enabled: external_exports.boolean().optional()
+    });
+    zUpdateCustomAgent = zCreateCustomAgent.omit({ name: true, projectId: true }).partial();
+  }
+});
+
+// ../shared/src/github.ts
+var zGithubIssueStatus, zNormalIssue, zGithubIssueView;
+var init_github = __esm({
+  "../shared/src/github.ts"() {
+    "use strict";
+    init_zod();
+    zGithubIssueStatus = external_exports.enum(["new", "accepted", "rejected"]);
+    zNormalIssue = external_exports.object({
+      number: external_exports.number().int().positive(),
+      title: external_exports.string(),
+      body: external_exports.string(),
+      authorLogin: external_exports.string(),
+      labels: external_exports.array(external_exports.string()),
+      url: external_exports.string(),
+      issueState: external_exports.enum(["open", "closed"]),
+      issueCreatedAt: external_exports.string(),
+      // ISO-8601 apa adanya dari GitHub
+      issueUpdatedAt: external_exports.string()
+    });
+    zGithubIssueView = zNormalIssue.extend({
+      id: external_exports.string(),
+      projectId: external_exports.string(),
+      repoSlug: external_exports.string(),
+      status: zGithubIssueStatus,
+      specId: external_exports.string().nullable(),
+      pulledAt: external_exports.string()
+    });
+  }
+});
+
 // ../shared/src/lead.ts
 var zLeadGate, zLeadKind, zLeadConfidence, zLeadStatus, LEAD_ACTIONS, zLeadAction, zLeadVerdict, zLeadAsk, zLeadOverride;
 var init_lead = __esm({
@@ -5222,6 +5216,9 @@ var init_api = __esm({
       leadDecisions: `${API}/lead/decisions`,
       leadDecisionOverride: (id) => `${API}/lead/decisions/${encodeURIComponent(id)}/override`,
       leadDecisionCancel: (id) => `${API}/lead/decisions/${encodeURIComponent(id)}/cancel`,
+      // SPEC-450 · ADR-0094 · katalog custom agent. `?projectId=` → himpunan EFEKTIF (global+project).
+      customAgents: `${API}/custom-agents`,
+      customAgent: (id) => `${API}/custom-agents/${encodeURIComponent(id)}`,
       // SPEC-268 · ADR-0066 · pemicu sync manual (cookie-authed)
       syncNow: `${API}/sync/now`,
       // SPEC-270 · ADR-0067 · antrean konflik rekonsil (cookie-authed)
@@ -5244,6 +5241,14 @@ var init_api = __esm({
       ticketUnlink: (id) => `${API}/tickets/${id}/unlink`,
       // SPEC-271 · lepas tautan backlog
       ticketReject: (id) => `${API}/tickets/${id}/reject`,
+      // SPEC-471 · ADR-0095 · tarik & triase issue GitHub (di belakang gate cookie, capability `support`).
+      // hanoman TIDAK PERNAH menulis ke GitHub — tak ada path komentar/close di sini, dan itu disengaja.
+      githubPull: (id) => `${API}/projects/${encodeURIComponent(id)}/github/pull`,
+      githubIssues: (id) => `${API}/projects/${encodeURIComponent(id)}/github/issues`,
+      githubIssuesAccept: `${API}/github-issues/accept`,
+      githubIssueAccept: (id) => `${API}/github-issues/${encodeURIComponent(id)}/accept`,
+      githubIssueReject: (id) => `${API}/github-issues/${encodeURIComponent(id)}/reject`,
+      githubIssueUnlink: (id) => `${API}/github-issues/${encodeURIComponent(id)}/unlink`,
       // SPEC-361 · ADR-0078 · unduh dokumen: query ditempelkan ke URL endpoint dokumen yang sudah ada
       // (tak ada endpoint ekspor terpisah). `base` bisa sudah membawa query, mis. ideFile(?path=…).
       download: (base, fmt) => `${base}${base.includes("?") ? "&" : "?"}download=${fmt}`
@@ -5406,6 +5411,28 @@ var init_config_registry = __esm({
       // vps
       { key: "HANOMAN_SSH_KEY_DIR", group: "vps", label: "Dir key SSH", kind: "path", apply: "new-session", category: "knob", help: "Default ~/.hanoman." },
       { key: "HANOMAN_SSH_BIN", group: "vps", label: "Biner ssh", kind: "path", apply: "new-session", category: "knob", default: "ssh" },
+      // github (SPEC-471 · ADR-0095 · tarik issue → backlog). Dua mode auth, satu jalur kode:
+      // `gh` memakai keyring mesin; bila GITHUB_TOKEN diisi ia diteruskan sebagai GH_TOKEN ke
+      // proses gh DAN dipakai jalur REST (hub VPS yang tak punya keyring).
+      {
+        key: "GITHUB_TOKEN",
+        group: "github",
+        label: "GitHub token",
+        kind: "secret",
+        apply: "live",
+        category: "credential",
+        help: "PAT scope `repo` (atau `public_repo`). Kosong = andalkan `gh auth login` di mesin ini."
+      },
+      {
+        key: "HANOMAN_GH_BIN",
+        group: "github",
+        label: "Biner gh",
+        kind: "path",
+        apply: "live",
+        category: "knob",
+        default: "gh",
+        help: "Absen = tarik issue lewat HTTPS langsung ke api.github.com."
+      },
       // runtime
       { key: "HANOMAN_EVENTS_TICK_MS", group: "runtime", label: "Interval events (ms)", kind: "int", apply: "live", category: "knob", default: "1000", min: 100 },
       { key: "HANOMAN_UPDATE_FETCH", group: "runtime", label: "Deteksi update saat boot", kind: "bool", apply: "live", category: "knob", default: "1" },
@@ -5491,12 +5518,14 @@ var init_semver = __esm({
 });
 
 // ../shared/src/index.ts
-var init_src2 = __esm({
+var init_src = __esm({
   "../shared/src/index.ts"() {
     "use strict";
     init_enums();
     init_entities();
     init_agent();
+    init_custom_agent();
+    init_github();
     init_lead();
     init_dto();
     init_api();
@@ -5509,6 +5538,90 @@ var init_src2 = __esm({
   }
 });
 
+// ../runner/src/custom-agents.ts
+var init_custom_agents = __esm({
+  "../runner/src/custom-agents.ts"() {
+    "use strict";
+    init_src();
+  }
+});
+
+// ../runner/src/paths.ts
+import { homedir } from "node:os";
+import { dirname, isAbsolute, join, resolve } from "node:path";
+function resolveHome(env = process.env, home = homedir()) {
+  const v = env.HANOMAN_HOME?.trim();
+  return v ? v : join(home, ".hanoman");
+}
+function schemeOf(raw) {
+  return raw.split("://")[0] ?? "?";
+}
+function resolveDbUrl(env, schemaDir) {
+  const own = env.HANOMAN_DATABASE_URL?.trim();
+  if (own) {
+    if (!own.startsWith("file:")) {
+      throw new Error(
+        `HANOMAN_DATABASE_URL harus URL SQLite \`file:\u2026\` sejak ADR-0086 (dapat \`${schemeOf(own)}\`). Masih punya data Postgres? Pindahkan sekali: hanoman migrate-from-postgres --from "<url-postgres>"`
+      );
+    }
+    return absoluteFileUrl(own, schemaDir);
+  }
+  const raw = env.DATABASE_URL?.trim();
+  if (!raw || !raw.startsWith("file:")) return `file:${join(resolveHome(env), "hanoman.db")}`;
+  return absoluteFileUrl(raw, schemaDir);
+}
+function absoluteFileUrl(raw, schemaDir) {
+  const p = raw.slice("file:".length);
+  if (p.startsWith(":")) return raw;
+  return `file:${isAbsolute(p) ? p : resolve(schemaDir, p)}`;
+}
+function dbUrlNotice(env) {
+  if (env.HANOMAN_DATABASE_URL?.trim()) return null;
+  const raw = env.DATABASE_URL?.trim();
+  if (!raw || raw.startsWith("file:")) return null;
+  return `hanoman: DATABASE_URL bertipe \`${schemeOf(raw)}\` DIABAIKAN \u2014 hanoman memakai SQLite (ADR-0086), dan var itu biasanya milik project lain.
+  \u2022 Punya data Postgres hanoman? Pindahkan sekali: hanoman migrate-from-postgres --from "<url>"
+  \u2022 Mau menunjuk berkas DB tertentu? Pakai HANOMAN_DATABASE_URL=file:/path/hanoman.db (atau --db)`;
+}
+function dbFilePath(url) {
+  if (!url.startsWith("file:")) throw new Error(`bukan URL SQLite: ${url}`);
+  return url.slice("file:".length);
+}
+function prismaCliPath(resolver) {
+  for (const spec of ["prisma/build/index.js", "prisma/package.json"]) {
+    try {
+      const p = resolver(spec);
+      return spec.endsWith("package.json") ? join(dirname(p), "build", "index.js") : p;
+    } catch {
+    }
+  }
+  throw new Error("CLI prisma tak ditemukan \u2014 `prisma` wajib terpasang sebagai dependency");
+}
+var init_paths = __esm({
+  "../runner/src/paths.ts"() {
+    "use strict";
+  }
+});
+
+// ../runner/src/index.ts
+var init_src2 = __esm({
+  "../runner/src/index.ts"() {
+    "use strict";
+    init_types();
+    init_prompt();
+    init_reverse_standard();
+    init_git();
+    init_settings();
+    init_goal();
+    init_goal_spec();
+    init_codex_settings();
+    init_agent_cli();
+    init_custom_agents();
+    init_verify_scope();
+    init_paths();
+  }
+});
+
 // src/layout.ts
 import { join as join2, resolve as resolve2 } from "node:path";
 function resolveLayout(distDir2, exists) {
@@ -5597,7 +5710,7 @@ var PKG, INSTALL_ARGS, DEFAULT_REGISTRY;
 var init_update = __esm({
   "src/commands/update.ts"() {
     "use strict";
-    init_src2();
+    init_src();
     init_router();
     PKG = "hanoman";
     INSTALL_ARGS = ["i", "-g", `${PKG}@latest`];
@@ -5883,8 +5996,8 @@ var MAX_UPDATE_RESTARTS;
 var init_start = __esm({
   "src/commands/start.ts"() {
     "use strict";
-    init_src();
     init_src2();
+    init_src();
     init_layout();
     init_update();
     MAX_UPDATE_RESTARTS = 5;
@@ -5908,6 +6021,12 @@ function doctorReport(p) {
     { mark: p.tmux ? "\u2713" : "\u2717", text: p.tmux ?? "tmux \u2014 TAK ADA (wajib: sesi agen hidup di tmux)", fatal: !p.tmux },
     { mark: p.claude ? "\u2713" : "\xB7", text: p.claude ? `claude ${p.claude}` : "claude \u2014 tak ada", fatal: false },
     { mark: p.codex ? "\u2713" : "\xB7", text: p.codex ? `codex ${p.codex}` : "codex \u2014 tak ada", fatal: false },
+    // SPEC-471 · ADR-0095 · `gh` opsional: tanpa dia tarik issue jatuh ke HTTPS + GITHUB_TOKEN.
+    {
+      mark: p.gh ? "\u2713" : "\xB7",
+      text: p.gh ? `gh ${p.gh}` : "gh \u2014 tak ada (tarik issue akan lewat HTTP + GITHUB_TOKEN)",
+      fatal: false
+    },
     { mark: p.homeWritable ? "\u2713" : "\u2717", text: `data dir ${p.homeWritable ? "bisa ditulis" : "TAK bisa ditulis"}`, fatal: !p.homeWritable },
     { mark: p.web ? "\u2713" : "!", text: p.web ? "aset dashboard ada" : "aset dashboard tak ada \u2014 API jalan, dashboard tidak", fatal: false },
     { mark: "\xB7", text: `db ${p.db}`, fatal: false }
@@ -5948,6 +6067,7 @@ async function doctor(_argv, ctx) {
     tmux: version("tmux", ["-V"]),
     claude: version(ctx.env.HANOMAN_CLAUDE_BIN ?? "claude", ["--version"]),
     codex: version(ctx.env.HANOMAN_CODEX_BIN ?? "codex", ["--version"]),
+    gh: version(ctx.env.HANOMAN_GH_BIN ?? "gh", ["--version"]),
     homeWritable,
     web: layout.web !== null,
     db
@@ -5965,7 +6085,7 @@ ${notice}
 var init_doctor = __esm({
   "src/commands/doctor.ts"() {
     "use strict";
-    init_src();
+    init_src2();
     init_layout();
     init_start();
   }
@@ -6124,12 +6244,14 @@ var PG_ORDER, CHUNK, INT8_OID, delegateKey;
 var init_migrate_pg = __esm({
   "src/commands/migrate-pg.ts"() {
     "use strict";
-    init_src();
+    init_src2();
     init_layout();
     init_start();
     PG_ORDER = [
+      // SPEC-450 · ADR-0094 · CustomAgent sesudah Project (FK projectId nullable → cascade).
       "Project",
       "Spec",
+      "CustomAgent",
       "Setting",
       "Notification",
       "User",
@@ -6150,7 +6272,11 @@ var init_migrate_pg = __esm({
       "RuntimeConfig",
       "LeadDecision",
       "Ticket",
-      "TicketAttachment"
+      "TicketAttachment",
+      // SPEC-471 · ADR-0095 · GithubIssue sesudah Project (FK projectId) DAN sesudah Spec: `specId`
+      // memang tanpa FK, tapi memindahkannya lebih awal membuat urutan tabel tak lagi mencerminkan
+      // arah tautannya bagi pembaca berikutnya.
+      "GithubIssue"
     ];
     CHUNK = 200;
     INT8_OID = 20;
@@ -6169,7 +6295,7 @@ function loadConfig(repoRoot) {
 var init_config2 = __esm({
   "src/config.ts"() {
     "use strict";
-    init_src2();
+    init_src();
   }
 });
 
@@ -6264,7 +6390,7 @@ function scanCoverage(cwd) {
 var init_verify = __esm({
   "src/verify.ts"() {
     "use strict";
-    init_src2();
+    init_src();
     init_repo();
     init_docs_model();
   }
@@ -6358,7 +6484,7 @@ async function docs_index_default(args, ctx) {
 var init_docs_index = __esm({
   "src/commands/docs-index.ts"() {
     "use strict";
-    init_src2();
+    init_src();
     init_repo();
     init_docs_model();
     init_index_edit();