hanoman 0.1.8 → 0.1.10

package/dist/server.js

@@ -4446,7 +4446,12 @@ var init_agent = __esm({
       // baris jejak & bisa menggerakkan sesi), dan SPEC-405 sudah membuktikan apa yang terjadi saat
       // endpoint tulis menumpang prefix status yang dipetakan tanpa melihat method (AC-5).
       "lead:read",
-      "lead:write"
+      "lead:write",
+      // SPEC-450 · ADR-0094 · custom agent. Domain TERSENDIRI, dipetakan MENURUT METHOD: menulis
+      // definisi agen mengubah apa yang dilihat SETIAP sesi baru di seluruh workspace, jadi izin
+      // baca tak pernah cukup untuk itu (kelas bug SPEC-405).
+      "agents:read",
+      "agents:write"
     ];
     zCapability = external_exports.enum(CAPABILITY_IDS);
     zCapabilityInfo = external_exports.object({
@@ -4477,7 +4482,9 @@ var init_agent = __esm({
       { id: "notifications:read", domain: "notifications", access: "read", label: "Notifikasi \u2014 baca", desc: "Lihat notifikasi." },
       { id: "notifications:write", domain: "notifications", access: "write", label: "Notifikasi \u2014 tulis", desc: "Tandai terbaca / bersihkan notifikasi." },
       { id: "lead:read", domain: "lead", access: "read", label: "Lead \u2014 baca", desc: "Baca jejak keputusan hanoman-lead & statusnya." },
-      { id: "lead:write", domain: "lead", access: "write", label: "Lead \u2014 tulis", desc: "Minta putusan ke hanoman-lead (keputusan bisa menggerakkan sesi).", risk: "exec" }
+      { id: "lead:write", domain: "lead", access: "write", label: "Lead \u2014 tulis", desc: "Minta putusan ke hanoman-lead (keputusan bisa menggerakkan sesi).", risk: "exec" },
+      { id: "agents:read", domain: "agents", access: "read", label: "Custom agent \u2014 baca", desc: "Lihat katalog custom agent global & per project." },
+      { id: "agents:write", domain: "agents", access: "write", label: "Custom agent \u2014 tulis", desc: "Buat/ubah/hapus custom agent; definisinya dipakai setiap sesi baru.", risk: "exec" }
     ];
     zAgentTokenView = external_exports.object({
       id: external_exports.string(),
@@ -4502,6 +4509,144 @@ var init_agent = __esm({
   }
 });
 
+// ../shared/src/custom-agent.ts
+function mentionsOf(v) {
+  if (!Array.isArray(v)) return [];
+  const out3 = [];
+  for (const x of v) if (typeof x === "string" && x && !out3.includes(x)) out3.push(x);
+  return out3;
+}
+function toolsOf(v) {
+  if (!Array.isArray(v)) return null;
+  const out3 = [];
+  for (const x of v) if (typeof x === "string" && x && !out3.includes(x)) out3.push(x);
+  return out3;
+}
+function resolveTools(a) {
+  const base = a.tools ?? [...DEFAULT_AGENT_TOOLS];
+  const canMention = (a.mentions ?? []).length > 0;
+  const out3 = base.filter((t) => t !== MENTION_TOOL);
+  if (canMention) out3.push(MENTION_TOOL);
+  return out3;
+}
+function detectCycle(nodes) {
+  const edges = new Map(nodes.map((n) => [n.name, n.mentions]));
+  const state = /* @__PURE__ */ new Map();
+  const stack = [];
+  const walk = (name2) => {
+    if (state.get(name2) === 1) return [...stack.slice(stack.indexOf(name2)), name2];
+    if (state.get(name2) === 2) return null;
+    state.set(name2, 1);
+    stack.push(name2);
+    for (const next of edges.get(name2) ?? []) {
+      if (!edges.has(next)) continue;
+      const found = walk(next);
+      if (found) return found;
+    }
+    stack.pop();
+    state.set(name2, 2);
+    return null;
+  };
+  for (const n of nodes) {
+    const found = walk(n.name);
+    if (found) return found;
+  }
+  return null;
+}
+function effectiveAgents(globals, project) {
+  const byName = /* @__PURE__ */ new Map();
+  for (const a of globals) byName.set(a.name, a);
+  for (const a of project) byName.set(a.name, a);
+  return [...byName.values()].filter((a) => a.enabled).sort((x, y) => x.name.localeCompare(y.name));
+}
+var AGENT_NAME_RE, DEFAULT_AGENT_TOOLS, MENTION_TOOL, MENTION_MAX_HOPS, GLOBAL_SCOPE, zCustomAgent, zCreateCustomAgent, zUpdateCustomAgent, customAgentId;
+var init_custom_agent = __esm({
+  "../shared/src/custom-agent.ts"() {
+    "use strict";
+    init_zod();
+    AGENT_NAME_RE = /^[a-z][a-z0-9-]{1,39}$/;
+    DEFAULT_AGENT_TOOLS = [
+      "Read",
+      "Write",
+      "Edit",
+      "Bash",
+      "Glob",
+      "Grep",
+      "WebFetch",
+      "WebSearch"
+    ];
+    MENTION_TOOL = "Task";
+    MENTION_MAX_HOPS = 3;
+    GLOBAL_SCOPE = "global";
+    zCustomAgent = external_exports.object({
+      id: external_exports.string(),
+      projectId: external_exports.string().nullable(),
+      name: external_exports.string().regex(AGENT_NAME_RE),
+      description: external_exports.string(),
+      instructions: external_exports.string(),
+      tools: external_exports.array(external_exports.string()).nullable(),
+      model: external_exports.string().nullable(),
+      mentions: external_exports.array(external_exports.string()).nullable(),
+      enabled: external_exports.boolean(),
+      createdAt: external_exports.string(),
+      updatedAt: external_exports.string()
+    });
+    zCreateCustomAgent = external_exports.object({
+      projectId: external_exports.string().nullable().optional(),
+      name: external_exports.string().regex(AGENT_NAME_RE),
+      description: external_exports.string().trim().min(1).max(500),
+      instructions: external_exports.string().trim().min(1).max(2e4),
+      tools: external_exports.array(external_exports.string()).nullable().optional(),
+      model: external_exports.string().nullable().optional(),
+      mentions: external_exports.array(external_exports.string()).nullable().optional(),
+      enabled: external_exports.boolean().optional()
+    });
+    zUpdateCustomAgent = zCreateCustomAgent.omit({ name: true, projectId: true }).partial();
+    customAgentId = (projectId, name2) => `${projectId ?? GLOBAL_SCOPE}:${name2}`;
+  }
+});
+
+// ../shared/src/github.ts
+function sourceForLabels(labels) {
+  const hay = labels.map((l) => l.toLowerCase());
+  for (const rule2 of LABEL_RULES)
+    if (hay.some((l) => rule2.needles.some((n) => l.includes(n)))) return rule2.source;
+  return "qa";
+}
+var zGithubIssueStatus, zNormalIssue, zGithubIssueView, LABEL_RULES;
+var init_github = __esm({
+  "../shared/src/github.ts"() {
+    "use strict";
+    init_zod();
+    zGithubIssueStatus = external_exports.enum(["new", "accepted", "rejected"]);
+    zNormalIssue = external_exports.object({
+      number: external_exports.number().int().positive(),
+      title: external_exports.string(),
+      body: external_exports.string(),
+      authorLogin: external_exports.string(),
+      labels: external_exports.array(external_exports.string()),
+      url: external_exports.string(),
+      issueState: external_exports.enum(["open", "closed"]),
+      issueCreatedAt: external_exports.string(),
+      // ISO-8601 apa adanya dari GitHub
+      issueUpdatedAt: external_exports.string()
+    });
+    zGithubIssueView = zNormalIssue.extend({
+      id: external_exports.string(),
+      projectId: external_exports.string(),
+      repoSlug: external_exports.string(),
+      status: zGithubIssueStatus,
+      specId: external_exports.string().nullable(),
+      pulledAt: external_exports.string()
+    });
+    LABEL_RULES = [
+      { needles: ["bug", "defect", "regression"], source: "qa" },
+      { needles: ["question", "docs", "documentation"], source: "audit" },
+      { needles: ["enhancement", "feature", "feat"], source: "brief" }
+    ];
+  }
+});
+
 // ../shared/src/lead.ts
 function leadActionAllowed(action) {
   return LEAD_ACTIONS.includes(action);
@@ -5114,6 +5259,9 @@ var init_api = __esm({
       leadDecisions: `${API}/lead/decisions`,
       leadDecisionOverride: (id) => `${API}/lead/decisions/${encodeURIComponent(id)}/override`,
       leadDecisionCancel: (id) => `${API}/lead/decisions/${encodeURIComponent(id)}/cancel`,
+      // SPEC-450 · ADR-0094 · katalog custom agent. `?projectId=` → himpunan EFEKTIF (global+project).
+      customAgents: `${API}/custom-agents`,
+      customAgent: (id) => `${API}/custom-agents/${encodeURIComponent(id)}`,
       // SPEC-268 · ADR-0066 · pemicu sync manual (cookie-authed)
       syncNow: `${API}/sync/now`,
       // SPEC-270 · ADR-0067 · antrean konflik rekonsil (cookie-authed)
@@ -5136,6 +5284,14 @@ var init_api = __esm({
       ticketUnlink: (id) => `${API}/tickets/${id}/unlink`,
       // SPEC-271 · lepas tautan backlog
       ticketReject: (id) => `${API}/tickets/${id}/reject`,
+      // SPEC-471 · ADR-0095 · tarik & triase issue GitHub (di belakang gate cookie, capability `support`).
+      // hanoman TIDAK PERNAH menulis ke GitHub — tak ada path komentar/close di sini, dan itu disengaja.
+      githubPull: (id) => `${API}/projects/${encodeURIComponent(id)}/github/pull`,
+      githubIssues: (id) => `${API}/projects/${encodeURIComponent(id)}/github/issues`,
+      githubIssuesAccept: `${API}/github-issues/accept`,
+      githubIssueAccept: (id) => `${API}/github-issues/${encodeURIComponent(id)}/accept`,
+      githubIssueReject: (id) => `${API}/github-issues/${encodeURIComponent(id)}/reject`,
+      githubIssueUnlink: (id) => `${API}/github-issues/${encodeURIComponent(id)}/unlink`,
       // SPEC-361 · ADR-0078 · unduh dokumen: query ditempelkan ke URL endpoint dokumen yang sudah ada
       // (tak ada endpoint ekspor terpisah). `base` bisa sudah membawa query, mis. ideFile(?path=…).
       download: (base, fmt) => `${base}${base.includes("?") ? "&" : "?"}download=${fmt}`
@@ -5343,6 +5499,28 @@ var init_config_registry = __esm({
       // vps
       { key: "HANOMAN_SSH_KEY_DIR", group: "vps", label: "Dir key SSH", kind: "path", apply: "new-session", category: "knob", help: "Default ~/.hanoman." },
       { key: "HANOMAN_SSH_BIN", group: "vps", label: "Biner ssh", kind: "path", apply: "new-session", category: "knob", default: "ssh" },
+      // github (SPEC-471 · ADR-0095 · tarik issue → backlog). Dua mode auth, satu jalur kode:
+      // `gh` memakai keyring mesin; bila GITHUB_TOKEN diisi ia diteruskan sebagai GH_TOKEN ke
+      // proses gh DAN dipakai jalur REST (hub VPS yang tak punya keyring).
+      {
+        key: "GITHUB_TOKEN",
+        group: "github",
+        label: "GitHub token",
+        kind: "secret",
+        apply: "live",
+        category: "credential",
+        help: "PAT scope `repo` (atau `public_repo`). Kosong = andalkan `gh auth login` di mesin ini."
+      },
+      {
+        key: "HANOMAN_GH_BIN",
+        group: "github",
+        label: "Biner gh",
+        kind: "path",
+        apply: "live",
+        category: "knob",
+        default: "gh",
+        help: "Absen = tarik issue lewat HTTPS langsung ke api.github.com."
+      },
       // runtime
       { key: "HANOMAN_EVENTS_TICK_MS", group: "runtime", label: "Interval events (ms)", kind: "int", apply: "live", category: "knob", default: "1000", min: 100 },
       { key: "HANOMAN_UPDATE_FETCH", group: "runtime", label: "Deteksi update saat boot", kind: "bool", apply: "live", category: "knob", default: "1" },
@@ -5434,6 +5612,8 @@ var init_src = __esm({
     init_enums();
     init_entities();
     init_agent();
+    init_custom_agent();
+    init_github();
     init_lead();
     init_dto();
     init_api();
@@ -6202,6 +6382,74 @@ var init_agent_cli = __esm({
   }
 });
 
+// ../runner/src/custom-agents.ts
+function agentPromptOf(def2, roster) {
+  const can = liveMentions(def2, roster);
+  if (can.length === 0) {
+    return `${def2.instructions}
+
+---
+Kamu TIDAK boleh mendelegasikan ke agen lain. Selesaikan sendiri lalu laporkan hasilnya.`;
+  }
+  const list2 = can.map((m) => `@${m}`).join(", ");
+  return [
+    def2.instructions,
+    "",
+    "---",
+    `Kamu boleh mendelegasikan HANYA ke: ${list2}. Panggil lewat ${MENTION_TOOL} dengan nama agennya.`,
+    `Anggaran rantai delegasi seluruh sesi ini ${MENTION_MAX_HOPS} hop. Bila kamu sudah berada di hop ke-${MENTION_MAX_HOPS}, JANGAN mendelegasikan lagi \u2014 selesaikan sendiri lalu laporkan.`,
+    "Sebutkan hop keberapa kamu berada saat mendelegasikan, dan jangan pernah memanggil agen yang sudah ada di rantai yang membawamu ke sini."
+  ].join("\n");
+}
+function renderAgentsJson(defs) {
+  if (defs.length === 0) return "";
+  const out3 = {};
+  for (const d of defs) {
+    out3[d.name] = {
+      description: d.description,
+      prompt: agentPromptOf(d, defs),
+      tools: resolveTools({ tools: d.tools, mentions: d.mentions }),
+      ...d.model ? { model: d.model } : {}
+    };
+  }
+  return JSON.stringify(out3);
+}
+function agentRosterBlock(defs) {
+  if (defs.length === 0) return "";
+  const lines2 = [
+    "",
+    "## Custom agent hanoman",
+    "",
+    "Peran berikut tersedia untuk sesi ini. Saat sebuah tugas cocok dengan salah satunya, ADOPSI",
+    "perannya (baca instruksinya, kerjakan dengan sudut pandang itu) lalu kembali ke peranmu sendiri.",
+    "Jangan melahirkan proses agen baru.",
+    ""
+  ];
+  for (const d of defs) {
+    const can = liveMentions(d, defs);
+    lines2.push(`### @${d.name} \u2014 ${d.description}`);
+    lines2.push("");
+    lines2.push(d.instructions);
+    lines2.push("");
+    lines2.push(
+      can.length ? `Boleh berkonsultasi ke: ${can.map((m) => `@${m}`).join(", ")} (maks ${MENTION_MAX_HOPS} hop berantai).` : "Tidak boleh berkonsultasi ke peran lain."
+    );
+    lines2.push("");
+  }
+  return lines2.join("\n");
+}
+var liveMentions;
+var init_custom_agents = __esm({
+  "../runner/src/custom-agents.ts"() {
+    "use strict";
+    init_src();
+    liveMentions = (def2, roster) => {
+      const names = new Set(roster.map((r) => r.name));
+      return def2.mentions.filter((m) => names.has(m) && m !== def2.name);
+    };
+  }
+});
+
 // ../runner/src/paths.ts
 import { homedir } from "node:os";
 import { dirname as dirname2, isAbsolute as isAbsolute2, join, resolve as resolve4 } from "node:path";
@@ -6262,6 +6510,7 @@ var init_src2 = __esm({
     init_goal_spec();
     init_codex_settings();
     init_agent_cli();
+    init_custom_agents();
     init_verify_scope();
     init_paths();
   }
@@ -6391,6 +6640,177 @@ var init_session_phases = __esm({
   }
 });
 
+// src/services/tui-dialog.ts
+function readChoiceDialog(paneText2) {
+  const lines2 = paneText2.split("\n").map((l) => l.trimEnd());
+  let footer = -1;
+  for (let i = lines2.length - 1; i >= 0; i--) {
+    if (FOOTER.test(lines2[i] ?? "")) {
+      footer = i;
+      break;
+    }
+  }
+  if (footer < 0) return null;
+  const found = [];
+  for (const line of lines2.slice(0, footer)) {
+    const m = ROW.exec(line);
+    if (m) found.push({ n: Number(m[1]), label: cleanLabel(m[2] ?? "") });
+  }
+  if (found.length < 2) return null;
+  const run2 = [];
+  let expected = found[found.length - 1].n;
+  for (let i = found.length - 1; i >= 0 && expected >= 1; i--) {
+    const row = found[i];
+    if (row.n !== expected) break;
+    run2.unshift(row);
+    expected -= 1;
+  }
+  if (run2.length < 2 || run2[0].n !== 1) return null;
+  const rows = run2.map((r) => ({
+    n: r.n,
+    label: r.label,
+    free: PLACEHOLDER.test(r.label),
+    chat: CHAT_ROW.test(r.label)
+  }));
+  return {
+    rows,
+    freeIndex: rows.find((r) => r.free)?.n ?? null,
+    options: rows.filter((r) => !r.free && !r.chat).map((r) => r.label)
+  };
+}
+function readTabs(lines2) {
+  for (let i = lines2.length - 1; i >= 0; i--) {
+    const line = lines2[i] ?? "";
+    if (!/[☐☒]/.test(line)) continue;
+    const tabs = [];
+    for (const tok of line.split(/\s{2,}/)) {
+      const m = TAB_BOX.exec(tok.trim());
+      if (m) tabs.push({ header: (m[2] ?? "").trim(), answered: m[1] === "\u2612" });
+    }
+    if (tabs.length) return { tabs, at: i };
+  }
+  return { tabs: [], at: -1 };
+}
+function readTitle(lines2, stripAt, footer) {
+  if (stripAt < 0) return "";
+  for (let i = stripAt + 1; i < footer; i++) {
+    const line = (lines2[i] ?? "").trim();
+    if (!line || RULE.test(line)) continue;
+    return ROW.test(lines2[i] ?? "") ? "" : line;
+  }
+  return "";
+}
+function readReviewScreen(paneText2) {
+  const lines2 = paneText2.split("\n").map((l) => l.trimEnd());
+  const at = lastIndexOf(lines2, REVIEW_PROMPT);
+  if (at < 0) return null;
+  for (const line of lines2.slice(at)) {
+    const m = SUBMIT_ROW.exec(line);
+    if (m) return { submitRow: Number(m[1]) };
+  }
+  return null;
+}
+function readDialogScreen(paneText2) {
+  const lines2 = paneText2.split("\n").map((l) => l.trimEnd());
+  const footer = lastIndexOf(lines2, FOOTER);
+  if (lastIndexOf(lines2, REVIEW_PROMPT) > footer) {
+    const review = readReviewScreen(paneText2);
+    if (review) return { kind: "review", submitRow: review.submitRow };
+  }
+  const d = readChoiceDialog(paneText2);
+  if (!d) return null;
+  const { tabs, at } = readTabs(lines2.slice(0, footer));
+  return {
+    kind: "question",
+    rows: d.rows,
+    freeIndex: d.freeIndex,
+    options: d.options,
+    notes: d.freeIndex === null && NOTES_FOOTER.test(lines2[footer] ?? ""),
+    tabs,
+    title: readTitle(lines2, at, footer)
+  };
+}
+function dialogKey(paneText2) {
+  const s = readDialogScreen(paneText2);
+  if (!s) return "none";
+  if (s.kind === "review") return "review";
+  const tabs = s.tabs.map((t) => `${t.answered ? "x" : "o"}${t.header}`).join(",");
+  return `q|${tabs}|${s.title || s.options.join("|")}`;
+}
+function freeTextFilled(paneText2, n) {
+  const row = readChoiceDialog(paneText2)?.rows.find((r) => r.n === n);
+  if (!row) return false;
+  return row.label.length > 0 && !PLACEHOLDER.test(row.label);
+}
+async function answerChoiceDialog(io, freeIndex, line, chunkMs) {
+  io.literal(String(freeIndex));
+  await io.sleep(DIALOG_SETTLE_MS);
+  for (const chunk of goalChunks(line)) {
+    io.literal(chunk);
+    await io.sleep(chunkMs);
+  }
+  await io.sleep(DIALOG_SETTLE_MS);
+  if (!freeTextFilled(io.capture(), freeIndex)) return false;
+  io.enter();
+  return true;
+}
+function notesFilled(paneText2) {
+  const lines2 = paneText2.split("\n").map((l) => l.trimEnd());
+  for (let i = lines2.length - 1; i >= 0; i--) {
+    const m = NOTES_LINE.exec(lines2[i] ?? "");
+    if (!m) continue;
+    const v = (m[1] ?? "").trim();
+    return v.length > 0 && !NOTES_PLACEHOLDER.test(v);
+  }
+  return false;
+}
+async function answerNotesDialog(io, line, chunkMs) {
+  io.literal("n");
+  await io.sleep(DIALOG_SETTLE_MS);
+  for (const chunk of goalChunks(line)) {
+    io.literal(chunk);
+    await io.sleep(chunkMs);
+  }
+  await io.sleep(DIALOG_SETTLE_MS);
+  if (!notesFilled(io.capture())) return false;
+  io.enter();
+  return true;
+}
+async function submitReview(io, submitRow) {
+  io.literal(String(submitRow));
+  for (let i = 0; i < SUBMIT_TRIES; i++) {
+    await io.sleep(DIALOG_SETTLE_MS);
+    if (!readReviewScreen(io.capture())) return true;
+  }
+  return false;
+}
+var FOOTER, ROW, PLACEHOLDER, CHAT_ROW, SIDE_PANEL, cleanLabel, REVIEW_PROMPT, SUBMIT_ROW, NOTES_FOOTER, TAB_BOX, lastIndexOf, RULE, DIALOG_SETTLE_MS, NOTES_PLACEHOLDER, NOTES_LINE, SUBMIT_TRIES;
+var init_tui_dialog = __esm({
+  "src/services/tui-dialog.ts"() {
+    "use strict";
+    init_src2();
+    FOOTER = /enter to (?:select|confirm)\b/i;
+    ROW = /^\s*[❯>›]?\s*(\d{1,2})\.\s+(\S.*)$/;
+    PLACEHOLDER = /^(?:type something\.?|other)$/i;
+    CHAT_ROW = /^chat about this$/i;
+    SIDE_PANEL = /\s{2,}[│┃┌┐└┘├┤╭╮╰╯─━].*$/;
+    cleanLabel = (s) => s.replace(SIDE_PANEL, "").trim();
+    REVIEW_PROMPT = /^\s*ready to submit your answers\?\s*$/i;
+    SUBMIT_ROW = /^\s*[❯>›]?\s*(\d{1,2})\.\s+submit answers\s*$/i;
+    NOTES_FOOTER = /\bn to add notes\b/i;
+    TAB_BOX = /^([☐☒])\s*(.+)$/;
+    lastIndexOf = (lines2, re) => {
+      for (let i = lines2.length - 1; i >= 0; i--) if (re.test(lines2[i] ?? "")) return i;
+      return -1;
+    };
+    RULE = /^[\s─━╌╍_=]*$/;
+    DIALOG_SETTLE_MS = 250;
+    NOTES_PLACEHOLDER = /^(?:press n to add notes|add notes on this design(?:…|\.\.\.)?)$/i;
+    NOTES_LINE = /(?:^|\s)Notes:\s*(.*)$/;
+    SUBMIT_TRIES = 8;
+  }
+});
+
 // src/config.ts
 var config_exports = {};
 __export(config_exports, {
@@ -6500,6 +6920,9 @@ function listPanes() {
 function registerSessionHooks(h) {
   hooks = h;
 }
+function registerCustomAgentSource(fn) {
+  customAgentSource = fn;
+}
 function sessionKind(o, projectId, cwd) {
   if (o.specId) return "spec";
   if (o.flow === "reverse" || o.flow === "prd" || o.flow === "scaffold" || o.flow === "breakdown") return o.flow;
@@ -6521,11 +6944,14 @@ function createSession(projectId, cwd, opts = {}) {
   const existing = getSession(id);
   if (existing && !existing.exited) return existing;
   if (existing) killSession(id);
+  const agentForDefs = opts.agent ?? "claude";
+  const customDefs = opts.command ? [] : customAgentsFor(projectId);
+  const rosterBlock = agentForDefs === "codex" ? agentRosterBlock(customDefs) : "";
   let promptArg = "";
   if (!opts.command && opts.prompt) {
     const promptFile = promptFilePath(id);
     mkdirSync3(dirname4(promptFile), { recursive: true });
-    writeFileSync(promptFile, opts.prompt);
+    writeFileSync(promptFile, opts.prompt + rosterBlock);
     promptArg = `"$(cat ${sq(promptFile)})"`;
   }
   const agent = opts.agent ?? "claude";
@@ -6547,6 +6973,15 @@ function createSession(projectId, cwd, opts = {}) {
       }), { mode: 493 });
     }
     const effort = agent === "codex" && opts.model && opts.effort ? coerceCodexEffort(opts.model, opts.effort) : opts.effort;
+    let agentsFile;
+    if (agent === "claude") {
+      const json = renderAgentsJson(customDefs);
+      if (json) {
+        agentsFile = agentsFilePath(id);
+        mkdirSync3(dirname4(agentsFile), { recursive: true });
+        writeFileSync(agentsFile, json);
+      }
+    }
     const flags = agentFlags({
       agent,
       model: opts.model,
@@ -6555,7 +6990,8 @@ function createSession(projectId, cwd, opts = {}) {
       goal: opts.goal,
       goalGate
     }).map(sq).join(" ");
-    argv = [sq(agentBin(agent)), promptArg, flags].filter(Boolean).join(" ");
+    const agentsArg = agentsFile ? `--agents "$(cat ${sq(agentsFile)})"` : "";
+    argv = [sq(agentBin(agent)), promptArg, flags, agentsArg].filter(Boolean).join(" ");
   }
   const envPairs = [];
   if (!opts.command && agent === "claude") {
@@ -6660,16 +7096,35 @@ async function sendToPane(id, text, chunkMs = 50) {
   const line = text.replace(/\s*\r?\n\s*/g, " ").trim();
   if (!line) return false;
   try {
+    const io = dialogIO(id);
+    const screen = readDialogScreen(io.capture());
+    if (screen?.kind === "review") return await submitReview(io, screen.submitRow);
+    if (screen?.kind === "question") {
+      if (screen.freeIndex !== null) return await answerChoiceDialog(io, screen.freeIndex, line, chunkMs);
+      if (screen.notes) return await answerNotesDialog(io, line, chunkMs);
+    }
     for (const chunk of goalChunks(line)) {
-      tmux("send-keys", "-t", name(id), "-l", chunk);
+      io.literal(chunk);
       await sleep(chunkMs);
     }
-    tmux("send-keys", "-t", name(id), "Enter");
+    io.enter();
     return true;
   } catch {
     return false;
   }
 }
+async function submitPaneDialog(id) {
+  const p = getSession(id);
+  if (!p || p.exited) return false;
+  try {
+    const io = dialogIO(id);
+    const screen = readDialogScreen(io.capture());
+    if (screen?.kind !== "review") return false;
+    return await submitReview(io, screen.submitRow);
+  } catch {
+    return false;
+  }
+}
 async function armGoalInTui(id, condition, o = {}) {
   const pollMs = o.pollMs ?? 500, readyTries = o.readyTries ?? 20;
   const settleMs = o.settleMs ?? 1200, verifyTries = o.verifyTries ?? 12;
@@ -6758,7 +7213,7 @@ function end(id, code) {
 function pollPhases(p, a) {
   if (!p.flow || !p.phaseFile) return;
   const phases = readPhases(p.phaseFile, p.flow);
-  const complete = sessionComplete(phases, p.cwd, p.specId);
+  const complete = paneComplete(p);
   const json = phaseKey(phases, complete);
   if (json === a.lastPhases) return;
   a.lastPhases = json;
@@ -6805,7 +7260,7 @@ function attach(id, c) {
   if (a.scrollback) c.send(frame({ t: "data", d: a.scrollback }));
   if (p.flow && p.phaseFile) {
     const phases = readPhases(p.phaseFile, p.flow);
-    const complete = sessionComplete(phases, p.cwd, p.specId);
+    const complete = paneComplete(p);
     a.lastPhases = phaseKey(phases, complete);
     c.send(frame({ t: "phase", phases, complete }));
   }
@@ -6844,13 +7299,14 @@ function spawnPty(...args) {
     );
   }
 }
-var socket, PREFIX, MAX_SCROLLBACK, POLL_MS, markerFilled, attached, claudeBin, shellBin, codexBin, agentBin, rootBypassEnv, frame, name, promptFilePath, goalGatePath, goalStatePath, NO_SERVER, TmuxError, sq, sessionIdForSpec, idFor, FMT, listSessions, liveDecisions, getSession, hooks, emitBirth, emitDeath, sleep, paneText, GOAL_ARMED_MARKERS, goalArmed, phaseKey, poll, detach;
+var socket, PREFIX, MAX_SCROLLBACK, POLL_MS, markerFilled, attached, claudeBin, shellBin, codexBin, agentBin, rootBypassEnv, frame, name, promptFilePath, goalGatePath, goalStatePath, agentsFilePath, NO_SERVER, TmuxError, sq, sessionIdForSpec, idFor, FMT, listSessions, liveDecisions, getSession, hooks, emitBirth, emitDeath, customAgentSource, customAgentsFor, sleep, paneText, dialogIO, DIALOG_CAPTURE_LINES, GOAL_ARMED_MARKERS, goalArmed, phaseKey, paneComplete, sessionFinished, poll, detach;
 var init_pty = __esm({
   "src/services/pty.ts"() {
     "use strict";
     init_src2();
     init_src();
     init_session_phases();
+    init_tui_dialog();
     init_config2();
     socket = () => effectiveStr("HANOMAN_TMUX_SOCKET") ?? "hanoman";
     PREFIX = "hanoman-";
@@ -6874,6 +7330,7 @@ var init_pty = __esm({
     promptFilePath = (id) => `${tmpdir()}/hanoman-prompts/${id}`;
     goalGatePath = (id) => `${tmpdir()}/hanoman-goal-gates/${id}.sh`;
     goalStatePath = (id) => `${tmpdir()}/hanoman-goal-gates/${id}.count`;
+    agentsFilePath = (id) => `${tmpdir()}/hanoman-agents/${id}.json`;
     NO_SERVER = /no server running|error connecting to/i;
     TmuxError = class extends Error {
       constructor(message, noServer) {
@@ -6926,7 +7383,17 @@ var init_pty = __esm({
       } catch {
       }
     };
-    sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+    customAgentSource = () => [];
+    customAgentsFor = (projectId) => {
+      try {
+        return customAgentSource(projectId);
+      } catch {
+        return [];
+      }
+    };
+    sleep = (ms) => new Promise((r) => {
+      setTimeout(r, ms);
+    });
     paneText = (id) => {
       try {
         return tmux("capture-pane", "-p", "-t", name(id));
@@ -6934,6 +7401,17 @@ var init_pty = __esm({
         return "";
       }
     };
+    dialogIO = (id) => ({
+      capture: () => capturePane(id, DIALOG_CAPTURE_LINES),
+      literal: (s) => {
+        tmux("send-keys", "-t", name(id), "-l", s);
+      },
+      enter: () => {
+        tmux("send-keys", "-t", name(id), "Enter");
+      },
+      sleep
+    });
+    DIALOG_CAPTURE_LINES = 60;
     GOAL_ARMED_MARKERS = {
       claude: ["/goal"],
       codex: ["Goal active", "Pursuing goal", "Goal achieved"]
@@ -6943,6 +7421,11 @@ var init_pty = __esm({
       return GOAL_ARMED_MARKERS[agent].some((m) => text.includes(m));
     };
     phaseKey = (phases, complete) => JSON.stringify({ phases, complete });
+    paneComplete = (p) => !!p.flow && !!p.phaseFile && sessionComplete(readPhases(p.phaseFile, p.flow), p.cwd, p.specId);
+    sessionFinished = (id) => {
+      const p = getSession(id);
+      return !!p && paneComplete(p);
+    };
     detach = (id, c) => {
       attached.get(id)?.clients.delete(c);
     };
@@ -7030,6 +7513,8 @@ var init_rename_project = __esm({
 var sync_exports = {};
 __export(sync_exports, {
   SYNCED: () => SYNCED,
+  __DATE_FIELDS: () => __DATE_FIELDS,
+  __FIELDS: () => __FIELDS,
   __FIELDS_FOR_TEST: () => __FIELDS_FOR_TEST,
   applyPush: () => applyPush,
   backfillFeed: () => backfillFeed,
@@ -7168,20 +7653,22 @@ async function upsertLocal(entity, id, version, data) {
 function setAcceptedHook(hook) {
   onAccepted = hook;
 }
-var SYNCED, DELEGATE, FIELDS, DATE_FIELDS, onAccepted, __FIELDS_FOR_TEST;
+var SYNCED, DELEGATE, FIELDS, DATE_FIELDS, __FIELDS, __DATE_FIELDS, onAccepted, __FIELDS_FOR_TEST;
 var init_sync = __esm({
   "src/services/sync.ts"() {
     "use strict";
     init_db();
     init_rename_project();
-    SYNCED = ["project", "spec", "vps", "sessionResult", "ticket", "ticketAttachment"];
+    SYNCED = ["project", "spec", "vps", "sessionResult", "ticket", "ticketAttachment", "customAgent", "githubIssue"];
     DELEGATE = {
       project: prisma.project,
       spec: prisma.spec,
       vps: prisma.vps,
       sessionResult: prisma.sessionResult,
       ticket: prisma.ticket,
-      ticketAttachment: prisma.ticketAttachment
+      ticketAttachment: prisma.ticketAttachment,
+      customAgent: prisma.customAgent,
+      githubIssue: prisma.githubIssue
     };
     FIELDS = {
       project: ["name", "desc", "kind", "stack", "gitRemote", "updatedAt"],
@@ -7196,7 +7683,33 @@ var init_sync = __esm({
       // (kolom required @unique tanpa default); kunci plaintext tak pernah menyeberang.
       ticket: ["projectId", "number", "category", "title", "detail", "reporterEmail", "status", "accessKeyHash", "specId", "createdAt", "updatedAt"],
       // SPEC-272 · ADR-0068 · metadata lampiran (byte tak disync; ditarik lazy dari hub saat dibuka).
-      ticketAttachment: ["ticketId", "projectId", "filename", "mimeType", "size", "storageKey", "createdAt", "updatedAt"]
+      ticketAttachment: ["ticketId", "projectId", "filename", "mimeType", "size", "storageKey", "createdAt", "updatedAt"],
+      // SPEC-450 · ADR-0094 · SELURUH kolom bermakna ikut menyeberang. `enabled` & `mentions` wajib
+      // ada: `upsert` yang tak menyebut kolom ber-default TETAP berhasil, jadi kolom yang terlewat
+      // mendarat sebagai default palsu di tiap client tanpa satu pun error (kelas ADR-0090/0093).
+      // `version` tak pernah masuk FIELDS — ia stempel mekanisme sync itu sendiri.
+      customAgent: ["projectId", "name", "description", "instructions", "tools", "model", "mentions", "enabled", "createdAt", "updatedAt"],
+      // SPEC-471 · ADR-0095 · SELURUH kolom bermakna ikut. `status`/`specId` termasuk: keputusan
+      // triase adalah bagian keadaan yang harus dilihat sama oleh semua mesin — tanpa itu satu
+      // mesin bisa menerima ulang issue yang di mesin lain sudah jadi backlog.
+      githubIssue: [
+        "projectId",
+        "repoSlug",
+        "number",
+        "title",
+        "body",
+        "authorLogin",
+        "labels",
+        "url",
+        "issueState",
+        "status",
+        "specId",
+        "issueCreatedAt",
+        "issueUpdatedAt",
+        "pulledAt",
+        "createdAt",
+        "updatedAt"
+      ]
     };
     DATE_FIELDS = {
       project: ["updatedAt"],
@@ -7204,8 +7717,12 @@ var init_sync = __esm({
       vps: ["lastSeenAt", "lastAuditAt", "updatedAt"],
       sessionResult: ["createdAt", "updatedAt"],
       ticket: ["createdAt", "updatedAt"],
-      ticketAttachment: ["createdAt", "updatedAt"]
+      ticketAttachment: ["createdAt", "updatedAt"],
+      customAgent: ["createdAt", "updatedAt"],
+      githubIssue: ["issueCreatedAt", "issueUpdatedAt", "pulledAt", "createdAt", "updatedAt"]
     };
+    __FIELDS = FIELDS;
+    __DATE_FIELDS = DATE_FIELDS;
     __FIELDS_FOR_TEST = FIELDS;
   }
 });
@@ -9372,7 +9889,7 @@ var require_extension = __commonJS({
       if (dest[name2] === void 0) dest[name2] = [elem];
       else dest[name2].push(elem);
     }
-    function parse2(header) {
+    function parse3(header) {
       const offers = /* @__PURE__ */ Object.create(null);
       let params = /* @__PURE__ */ Object.create(null);
       let mustUnescape = false;
@@ -9512,7 +10029,7 @@ var require_extension = __commonJS({
         }).join(", ");
       }).join(", ");
     }
-    module.exports = { format, parse: parse2 };
+    module.exports = { format, parse: parse3 };
   }
 });
 
@@ -9546,7 +10063,7 @@ var require_websocket = __commonJS({
     var {
       EventTarget: { addEventListener, removeEventListener }
     } = require_event_target();
-    var { format, parse: parse2 } = require_extension();
+    var { format, parse: parse3 } = require_extension();
     var { toBuffer } = require_buffer_util();
     var kAborted = Symbol("kAborted");
     var protocolVersions = [8, 13];
@@ -10223,7 +10740,7 @@ var require_websocket = __commonJS({
           }
           let extensions;
           try {
-            extensions = parse2(secWebSocketExtensions);
+            extensions = parse3(secWebSocketExtensions);
           } catch (err) {
             const message = "Invalid Sec-WebSocket-Extensions header";
             abortHandshake(websocket2, socket2, message);
@@ -10515,7 +11032,7 @@ var require_subprotocol = __commonJS({
   "../node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/subprotocol.js"(exports, module) {
     "use strict";
     var { tokenChars } = require_validation();
-    function parse2(header) {
+    function parse3(header) {
       const protocols = /* @__PURE__ */ new Set();
       let start = -1;
       let end2 = -1;
@@ -10551,7 +11068,7 @@ var require_subprotocol = __commonJS({
       protocols.add(protocol);
       return protocols;
     }
-    module.exports = { parse: parse2 };
+    module.exports = { parse: parse3 };
   }
 });
 
@@ -13982,7 +14499,7 @@ var require_secure_json_parse = __commonJS({
       }
       return obj;
     }
-    function parse2(text, reviver, options2) {
+    function parse3(text, reviver, options2) {
       const stackTraceLimit = Error.stackTraceLimit;
       Error.stackTraceLimit = 0;
       try {
@@ -14002,9 +14519,9 @@ var require_secure_json_parse = __commonJS({
         Error.stackTraceLimit = stackTraceLimit;
       }
     }
-    module.exports = parse2;
-    module.exports.default = parse2;
-    module.exports.parse = parse2;
+    module.exports = parse3;
+    module.exports.default = parse3;
+    module.exports.parse = parse3;
     module.exports.safeParse = safeParse;
     module.exports.scan = filter;
   }
@@ -21367,11 +21884,11 @@ function clamp(text) {
   const buf = Buffer.from(text, "utf8");
   if (buf.byteLength <= MAX_TRANSCRIPT_BYTES) return { body: text, truncated: false };
   const cut = buf.byteLength - MAX_TRANSCRIPT_BYTES;
-  let tail2 = buf.subarray(cut).toString("utf8");
-  const nl = tail2.indexOf("\n");
-  if (nl >= 0) tail2 = tail2.slice(nl + 1);
+  let tail3 = buf.subarray(cut).toString("utf8");
+  const nl = tail3.indexOf("\n");
+  if (nl >= 0) tail3 = tail3.slice(nl + 1);
   return { body: `\u2026 ${cut} byte awal dipangkas (batas ${MAX_TRANSCRIPT_BYTES} byte) \u2026
-${tail2}`, truncated: true };
+${tail3}`, truncated: true };
 }
 async function saveTranscript(text) {
   if (!text.trim()) return { key: "", bytes: 0, truncated: false };
@@ -22331,6 +22848,18 @@ function leadArgv(o) {
   ];
 }
 var leadEnv = (agent, base = process.env, uid = process.getuid?.()) => agent === "claude" ? { ...rootBypassEnv(uid), ...base } : { ...base };
+var EXPLAIN_MAX = 500;
+var tail = (s) => {
+  const t = s.trim();
+  return t.length > EXPLAIN_MAX ? `\u2026${t.slice(-EXPLAIN_MAX)}` : t;
+};
+function leadFailureReason(agent, timeoutMs, err, stdout, stderr) {
+  if (err.killed) return `lead ${agent} kehabisan waktu ${timeoutMs} ms`;
+  const fromErr = err.message.startsWith("Command failed:") ? "" : err.message;
+  const detail = [tail(stderr), tail(stdout)].filter(Boolean).join(" \xB7 ") || tail(fromErr) || "tanpa keluaran";
+  const how = err.signal ? `sinyal ${err.signal}` : `exit ${err.code ?? "?"}`;
+  return `lead ${agent} gagal (${how}): ${detail}`;
+}
 function think(prompt, o) {
   const bin = binFor(o.agent);
   const args = leadArgv({ agent: o.agent, model: o.model, effort: o.effort, prompt });
@@ -22344,8 +22873,7 @@ function think(prompt, o) {
       killSignal: "SIGTERM"
     }, (err, stdout, stderr) => {
       if (err) {
-        const killed = err.killed;
-        reject(new Error(killed ? `lead ${o.agent} kehabisan waktu ${o.timeoutMs} ms` : `lead ${o.agent} gagal: ${(stderr || err.message).trim().slice(0, 500)}`));
+        reject(new Error(leadFailureReason(o.agent, o.timeoutMs, err, stdout, stderr)));
         return;
       }
       resolve14(stdout);
@@ -22573,12 +23101,11 @@ async function integrateMain(row, deps) {
   if (!repoDir) return { ok: false, detail: `project ${row.projectId} belum di-bind ke checkout lokal` };
   const spec = await prisma.spec.findUnique({ where: { id: row.specId } });
   if (!spec) return { ok: false, detail: `backlog ${row.specId} tak ada` };
+  const sid = sessionIdForSpec(spec.id);
+  const done = deps.planDone(worktreeDir(repoDir, spec.id), spec.id);
   const evidence = [];
   if (cfg.requireGreenBeforeIntegrate) {
-    const wt = worktreeDir(repoDir, spec.id);
-    const done = deps.planDone(wt, spec.id);
     evidence.push(done ? "plan tak menyisakan `- [ ]`" : "plan MASIH menyisakan `- [ ]`");
-    const sid = sessionIdForSpec(spec.id);
     const pane = deps.sessionExists(sid);
     evidence.push(pane ? `pane ${sid} masih ada` : `pane ${sid} sudah tak ada`);
     if (!done) {
@@ -22597,6 +23124,9 @@ async function integrateMain(row, deps) {
   }
   const res = await deps.integrate(repoDir, spec.id, "merge", "local:main");
   evidence.push(`integrate \u2192 ${res.status}`);
+  if (res.status === "clean" && done && deps.sessionExists(sid)) {
+    evidence.push(deps.killSession(sid) ? `pane ${sid} dilepas (worktree utuh)` : `pane ${sid} gagal dilepas`);
+  }
   await recordEvidence(row, evidence, res.status === "clean" ? "integrasi bersih" : `integrasi tak bersih: ${res.status}`);
   if (res.status !== "clean") {
     await deps.notify(
@@ -22621,10 +23151,13 @@ Bukti integrasi: ${evidence.join("; ")} \u2192 ${verdict}.` }
 
 // src/services/lead/detect.ts
 init_pty();
+init_tui_dialog();
+import { writeFileSync as writeFileSync4 } from "node:fs";
 
 // src/services/lead/pane.ts
+init_tui_dialog();
 var CLEAN = /[│┃┆┊┌┐└┘├┤┬┴┼─━╭╮╰╯>❯]/g;
-var tail = (text, lines2) => text.split("\n").map((l) => l.replace(CLEAN, " ").trimEnd()).filter((l) => l.trim()).slice(-lines2);
+var tail2 = (text, lines2) => text.split("\n").map((l) => l.replace(CLEAN, " ").trimEnd()).filter((l) => l.trim()).slice(-lines2);
 var CODEX_FINISHED = [
   /Goal achieved/i,
   /Goal unmet/i,
@@ -22637,25 +23170,33 @@ var ASK_SIGNALS = [
   /\b(pilih|apakah|haruskah|mana yang|opsi|which|should i|do you want|proceed\?)\b/i
 ];
 function readPaneQuestion(text, agent) {
-  const lines2 = tail(text, 40);
+  const lines2 = tail2(text, 40);
   const body = lines2.join("\n").trim();
-  if (!body) return { asking: false, question: "", reason: "layar kosong" };
-  const question = tail(text, 25).join("\n").trim();
+  const choices = readChoiceDialog(text)?.options ?? [];
+  if (!body) return { asking: false, question: "", reason: "layar kosong", choices };
+  const question = tail2(text, 25).join("\n").trim();
   if (agent === "codex") {
     const finished = CODEX_FINISHED.find((re) => re.test(body));
-    if (finished) return { asking: false, question, reason: "sesi codex selesai wajar (ADR-0074)" };
+    if (finished) return { asking: false, question, reason: "sesi codex selesai wajar (ADR-0074)", choices };
     if (!ASK_SIGNALS.some((re) => re.test(body)))
-      return { asking: false, question, reason: "tak ada sinyal pertanyaan di layar codex" };
+      return { asking: false, question, reason: "tak ada sinyal pertanyaan di layar codex", choices };
   }
-  return { asking: true, question, reason: "" };
+  return { asking: true, question, reason: "", choices };
 }
 
 // src/services/lead/detect.ts
 var answers = /* @__PURE__ */ new Map();
 var capped = /* @__PURE__ */ new Set();
+var failures = /* @__PURE__ */ new Map();
+var failCapped = /* @__PURE__ */ new Set();
+var MAX_CHAIN_STEPS = 6;
+var CHAIN_POLL_MS = 300;
+var CHAIN_POLL_TRIES = 20;
 function resetSession(sessionId2) {
   answers.delete(sessionId2);
   capped.delete(sessionId2);
+  failures.delete(sessionId2);
+  failCapped.delete(sessionId2);
 }
 var prodDetectDeps = {
   live: () => {
@@ -22685,6 +23226,14 @@ var prodDetectDeps = {
     }
   },
   send: (id, text) => sendToPane(id, text),
+  clearMarker: (file) => {
+    try {
+      writeFileSync4(file, "");
+    } catch {
+    }
+  },
+  submit: (id) => submitPaneDialog(id),
+  sleep: (ms) => new Promise((r) => setTimeout(r, ms)),
   decide,
   decideDeps: prodDecideDeps,
   optIn: leadProjects,
@@ -22716,7 +23265,7 @@ async function scanAndAnswer(deps = prodDetectDeps) {
     if ((answers.get(s.id) ?? 0) >= cfg.maxAutoAnswers) {
       if (!capped.has(s.id)) {
         capped.add(s.id);
-        const row2 = await recordDecision({
+        const row = await recordDecision({
           projectId: s.projectId,
           specId: s.specId,
           sessionId: s.id,
@@ -22731,7 +23280,7 @@ async function scanAndAnswer(deps = prodDetectDeps) {
           weighty: true
         });
         await deps.notify(
-          row2.id,
+          row.id,
           `Lead berhenti menjawab sesi ${s.id} (batas ${cfg.maxAutoAnswers}\xD7 tercapai)`,
           s.projectId,
           s.specId ?? null,
@@ -22741,12 +23290,79 @@ async function scanAndAnswer(deps = prodDetectDeps) {
       skip("batas jawaban otomatis tercapai");
       continue;
     }
+    if ((failures.get(s.id) ?? 0) >= cfg.maxAutoAnswers) {
+      if (!failCapped.has(s.id)) {
+        failCapped.add(s.id);
+        const row = await recordDecision({
+          projectId: s.projectId,
+          specId: s.specId,
+          sessionId: s.id,
+          gate: "detected",
+          kind: "quality",
+          question: `Keputusan untuk sesi ${s.id} gagal disusun ${cfg.maxAutoAnswers}\xD7 berturut-turut.`,
+          answer: "Berhenti mencoba; serahkan ke operator.",
+          reason: "Kegagalan beruntun menandakan sebab yang tak hilang dengan mengulang (kunci/kuota agen, biner tak terpasang) \u2014 mencoba lagi tiap denyut hanya membakar kuota. Alasan percobaan terakhir ada di baris jejak `gagal` tepat di atas ini.",
+          refs: [],
+          confidence: "tinggi",
+          action: "none",
+          weighty: true
+        });
+        await deps.notify(
+          row.id,
+          `Lead berhenti mencoba sesi ${s.id} (${cfg.maxAutoAnswers}\xD7 gagal berturut-turut)`,
+          s.projectId,
+          s.specId ?? null,
+          s.id
+        );
+      }
+      skip("batas kegagalan beruntun tercapai");
+      continue;
+    }
     const agent = deps.agentOf(s.id) ?? "claude";
     const read = readPaneQuestion(deps.pane(s.id), agent);
     if (!read.asking) {
       skip(read.reason);
       continue;
     }
+    const chain = await runChain(s, agent, deps);
+    if (chain.acted && chain.done) {
+      deps.clearMarker(s.decisionFile);
+      answers.set(s.id, (answers.get(s.id) ?? 0) + 1);
+      failures.delete(s.id);
+      out3.answered.push(s.id);
+      continue;
+    }
+    if (chain.failed) failures.set(s.id, (failures.get(s.id) ?? 0) + 1);
+    skip(chain.reason);
+  }
+  return out3;
+}
+async function runChain(s, agent, deps) {
+  let acted = false;
+  for (let step = 0; step < MAX_CHAIN_STEPS; step++) {
+    const text = deps.pane(s.id);
+    const screen = readDialogScreen(text);
+    if (screen?.kind === "review") {
+      if (!await deps.submit(s.id))
+        return { acted, done: false, failed: true, reason: "gagal menekan Submit answers" };
+      acted = true;
+      continue;
+    }
+    if (step > 0 && !screen) return { acted, done: true, failed: false, reason: "" };
+    const read = readPaneQuestion(text, agent);
+    if (!read.asking) {
+      return step === 0 ? { acted, done: false, failed: false, reason: read.reason } : { acted, done: true, failed: false, reason: "" };
+    }
+    const notes = [`Sesi ini menunggu di terminal; teks di bawah adalah layar terakhirnya. Jawablah sebagai masukan yang bisa langsung diketik ke terminal itu (isi \`reply\`).`];
+    if (read.choices.length) {
+      notes.push("Layarnya adalah dialog pilihan. `reply` akan dimasukkan sebagai JAWABAN BEBAS ke dialog itu, jadi tulislah jawaban yang berdiri sendiri \u2014 sebut opsi yang kamu pilih beserta alasan singkatnya, bukan nomornya saja.");
+    }
+    if (screen?.kind === "question" && screen.tabs.length > 1) {
+      const at = screen.tabs.findIndex((t) => !t.answered);
+      notes.push(
+        `Dialog ini BERANTAI: ${screen.tabs.length} pertanyaan dalam satu tanya (${screen.tabs.map((t) => `${t.answered ? "sudah" : "belum"}: ${t.header}`).join(", ")}). Yang sedang tampil pertanyaan ke-${at + 1}; jawab HANYA pertanyaan itu \u2014 sisanya akan ditanyakan sesudah ini.`
+      );
+    }
     const row = await deps.decide({
       projectId: s.projectId,
       specId: s.specId,
@@ -22754,27 +23370,35 @@ async function scanAndAnswer(deps = prodDetectDeps) {
       gate: "detected",
       kind: "answer",
       question: read.question,
-      notes: [`Sesi ini menunggu di terminal; teks di bawah adalah layar terakhirnya. Jawablah sebagai masukan yang bisa langsung diketik ke terminal itu (isi \`reply\`).`]
+      options: read.choices.length ? read.choices : void 0,
+      notes
     }, deps.decideDeps);
-    if (!row || row.status !== "berlaku") {
-      skip("lead tak menghasilkan keputusan yang berlaku");
-      continue;
-    }
+    if (!row) return { acted, done: false, failed: false, reason: "lead tak menghasilkan keputusan yang berlaku" };
+    if (row.status !== "berlaku")
+      return { acted, done: false, failed: true, reason: "lead tak menghasilkan keputusan yang berlaku" };
     const reply = takeReply(row.id) || row.answer;
-    const sent = await deps.send(s.id, reply);
-    if (!sent) {
-      skip("gagal mengetik ke pane");
-      continue;
-    }
-    answers.set(s.id, (answers.get(s.id) ?? 0) + 1);
-    out3.answered.push(s.id);
+    if (!await deps.send(s.id, reply))
+      return { acted, done: false, failed: true, reason: "gagal mengetik ke pane" };
+    acted = true;
+    if (!screen) return { acted, done: true, failed: false, reason: "" };
+    if (!await waitScreenChange(s.id, dialogKey(text), deps))
+      return { acted, done: false, failed: true, reason: "layar dialog tak berubah sesudah dijawab" };
   }
-  return out3;
+  return { acted, done: false, failed: true, reason: "batas langkah rantai dialog tercapai" };
+}
+async function waitScreenChange(id, before, deps) {
+  for (let i = 0; i < CHAIN_POLL_TRIES; i++) {
+    await deps.sleep(CHAIN_POLL_MS);
+    if (dialogKey(deps.pane(id)) !== before) return true;
+  }
+  return false;
 }
 function sweep(liveIds) {
   const live = new Set(liveIds);
   for (const id of [...answers.keys()]) if (!live.has(id)) answers.delete(id);
   for (const id of [...capped]) if (!live.has(id)) capped.delete(id);
+  for (const id of [...failures.keys()]) if (!live.has(id)) failures.delete(id);
+  for (const id of [...failCapped]) if (!live.has(id)) failCapped.delete(id);
 }
 
 // src/services/lead/pulse.ts
@@ -22818,6 +23442,13 @@ var prodPulseDeps = {
     }
   },
   planDone: planComplete,
+  finished: (id) => {
+    try {
+      return sessionFinished(id);
+    } catch {
+      return false;
+    }
+  },
   decide,
   decideDeps: prodDecideDeps,
   apply: applyAction,
@@ -22838,6 +23469,10 @@ async function pulse(deps = prodPulseDeps) {
     res.quality = await followUpFinished(cfg, optIn, deps);
   } catch {
   }
+  try {
+    res.quality += await followUpComplete(optIn, deps);
+  } catch {
+  }
   try {
     res.collisions = await detectCollisions(optIn, deps);
   } catch {
@@ -22890,6 +23525,49 @@ async function followUpFinished(cfg, optIn, deps) {
   }
   return n;
 }
+async function followUpComplete(optIn, deps) {
+  let n = 0;
+  const opt = new Set(optIn);
+  for (const s of deps.sessions()) {
+    if (!s.specId || !opt.has(s.projectId)) continue;
+    if ((s.exitCode ?? 0) !== 0) continue;
+    if (!deps.finished(s.id)) continue;
+    const mark = `Backlog ${s.specId} sudah selesai di sesi ${s.id}`;
+    const seen = await prisma.leadDecision.findFirst({
+      where: { sessionId: s.id, gate: "pulse", question: { startsWith: mark } }
+    });
+    if (seen) continue;
+    const row = await deps.decide({
+      projectId: s.projectId,
+      specId: s.specId,
+      sessionId: s.id,
+      gate: "pulse",
+      kind: "quality",
+      question: `${mark}: seluruh fasenya tercatat dan plan-nya tak menyisakan kotak \`- [ ]\`. Selama sesinya belum dilepas, ia memegang satu slot concurrency scheduler sehingga backlog lain tak bisa mulai. Integrasikan hasilnya ke main, hentikan sesinya saja, atau biarkan?`,
+      options: [
+        "integrate-main \u2014 merge branch sesi ini ke main; panenya ikut dilepas, worktree tetap utuh",
+        "stop-session \u2014 lepas panenya tanpa mengintegrasikan (worktree tetap utuh, ADR-0084 masih bisa melanjutkan)",
+        "none \u2014 biarkan sesinya berdiri, sertakan alasan kenapa slot itu layak ditahan"
+      ],
+      notes: [
+        `Worktree sesi: ${s.cwd}`,
+        // Rebase sengaja tak ditawarkan: `LEAD_ACTIONS` adalah konstanta tertutup (AC-31), dan
+        // merge adalah yang PALING MUDAH DIBATALKAN dari keduanya — kriteria yang diperintahkan
+        // prompt lead sendiri. Rebase tetap tindakan operator lewat POST /specs/:id/integrate.
+        "Rebase tidak tersedia untukmu; bila hasilnya menuntut rebase, pilih `none` dan katakan begitu."
+      ]
+    }, deps.decideDeps);
+    if (!row) continue;
+    n++;
+    if (row.status === "berlaku" && row.action !== "none") {
+      try {
+        await deps.apply(row);
+      } catch {
+      }
+    }
+  }
+  return n;
+}
 async function detectCollisions(optIn, deps) {
   const opt = new Set(optIn);
   const live = deps.sessions().filter((s) => !s.exited && s.specId && opt.has(s.projectId));
@@ -23162,6 +23840,598 @@ async function lead_default(app2) {
   });
 }
 
+// src/routes/custom-agents.ts
+init_src();
+init_db();
+
+// src/services/custom-agents.ts
+init_db();
+init_src();
+init_pty();
+var cache4 = [];
+var asCustomAgent = (r) => ({
+  id: r.id,
+  projectId: r.projectId,
+  name: r.name,
+  description: r.description,
+  instructions: r.instructions,
+  tools: toolsOf(r.tools),
+  model: r.model,
+  mentions: mentionsOf(r.mentions),
+  enabled: r.enabled,
+  createdAt: "",
+  updatedAt: ""
+  // tak dipakai lapis ini
+});
+async function loadCustomAgents() {
+  try {
+    cache4 = await prisma.customAgent.findMany();
+  } catch {
+    cache4 = [];
+  }
+}
+function agentDefsFor(projectId) {
+  const globals = cache4.filter((r) => r.projectId === null).map(asCustomAgent);
+  const project = cache4.filter((r) => r.projectId === projectId).map(asCustomAgent);
+  return effectiveAgents(globals, project).map((a) => ({
+    name: a.name,
+    description: a.description,
+    instructions: a.instructions,
+    tools: a.tools,
+    model: a.model,
+    mentions: a.mentions ?? []
+  }));
+}
+function validateGraph(rows) {
+  const projectScopes = [...new Set(rows.map((r) => r.projectId).filter((p) => p !== null))];
+  const globals = rows.filter((r) => r.projectId === null).map(asCustomAgent);
+  for (const scope of [null, ...projectScopes]) {
+    const project = scope === null ? [] : rows.filter((r) => r.projectId === scope).map(asCustomAgent);
+    const nodes = effectiveAgents(globals, project).map((a) => ({ name: a.name, mentions: a.mentions ?? [] }));
+    const cycle = detectCycle(nodes);
+    if (cycle) return { scope: scope ?? GLOBAL_SCOPE, cycle };
+  }
+  return null;
+}
+function unknownMentions(row, all) {
+  const visible = new Set(
+    all.filter((r) => r.projectId === null || row.projectId !== null && r.projectId === row.projectId).map((r) => r.name)
+  );
+  return mentionsOf(row.mentions).filter((m) => !visible.has(m));
+}
+async function installCustomAgents() {
+  await loadCustomAgents();
+  registerCustomAgentSource((projectId) => agentDefsFor(projectId));
+}
+
+// src/routes/custom-agents.ts
+var rowsOf = async () => await prisma.customAgent.findMany();
+var view6 = (r, projectId) => ({
+  id: r.id,
+  projectId: r.projectId,
+  name: r.name,
+  description: r.description,
+  instructions: r.instructions,
+  tools: toolsOf(r.tools),
+  model: r.model,
+  mentions: mentionsOf(r.mentions),
+  enabled: r.enabled,
+  ...projectId ? { inherited: r.projectId === null } : {}
+});
+async function custom_agents_default(app2) {
+  app2.get("/custom-agents", async (req) => {
+    const projectId = req.query.projectId;
+    const rows = await prisma.customAgent.findMany({
+      where: projectId ? { OR: [{ projectId: null }, { projectId }] } : { projectId: null },
+      orderBy: { name: "asc" }
+    });
+    const byName = /* @__PURE__ */ new Map();
+    for (const r of rows) if (r.projectId === null) byName.set(r.name, r);
+    for (const r of rows) if (r.projectId !== null) byName.set(r.name, r);
+    return [...byName.values()].sort((a, b) => a.name.localeCompare(b.name)).map((r) => view6(r, projectId));
+  });
+  app2.post("/custom-agents", async (req, reply) => {
+    const parsed = zCreateCustomAgent.safeParse(req.body);
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    const p = parsed.data;
+    const projectId = p.projectId ?? null;
+    if (projectId && !await prisma.project.findUnique({ where: { id: projectId } }))
+      return reply.code(400).send({ error: "project tak ditemukan", projectId });
+    const id = customAgentId(projectId, p.name);
+    if (await prisma.customAgent.findUnique({ where: { id } }))
+      return reply.code(409).send({ error: "nama sudah dipakai di scope ini", id });
+    const candidate = {
+      id,
+      projectId,
+      name: p.name,
+      description: p.description,
+      instructions: p.instructions,
+      tools: p.tools ?? null,
+      model: p.model ?? null,
+      mentions: p.mentions ?? [],
+      enabled: p.enabled ?? true
+    };
+    const all = [...await rowsOf(), candidate];
+    const unknown = unknownMentions(candidate, all);
+    if (unknown.length) return reply.code(400).send({ error: "mention tak dikenal", unknown });
+    const cycle = validateGraph(all);
+    if (cycle) return reply.code(409).send({ error: "mention membentuk siklus", ...cycle });
+    const row = await prisma.customAgent.create({ data: {
+      id,
+      projectId,
+      name: p.name,
+      description: p.description,
+      instructions: p.instructions,
+      tools: candidate.tools,
+      model: candidate.model,
+      mentions: candidate.mentions,
+      enabled: candidate.enabled
+    } });
+    await loadCustomAgents();
+    await notifySynced("customAgent", id);
+    return reply.code(201).send(view6(row));
+  });
+  app2.patch("/custom-agents/:id", async (req, reply) => {
+    const { id } = req.params;
+    const body = req.body ?? {};
+    if ("name" in body || "projectId" in body)
+      return reply.code(400).send({ error: "name & projectId tak bisa diubah \u2014 hapus lalu buat baru" });
+    const parsed = zUpdateCustomAgent.safeParse(body);
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    const existing = await prisma.customAgent.findUnique({ where: { id } });
+    if (!existing) return reply.code(404).send({ error: "not found" });
+    const before = existing;
+    const candidate = {
+      ...before,
+      ...parsed.data,
+      mentions: parsed.data.mentions ?? mentionsOf(before.mentions),
+      tools: parsed.data.tools !== void 0 ? parsed.data.tools : toolsOf(before.tools)
+    };
+    const all = (await rowsOf()).map((r) => r.id === id ? candidate : r);
+    const unknown = unknownMentions(candidate, all);
+    if (unknown.length) return reply.code(400).send({ error: "mention tak dikenal", unknown });
+    const cycle = validateGraph(all);
+    if (cycle) return reply.code(409).send({ error: "mention membentuk siklus", ...cycle });
+    const row = await prisma.customAgent.update({ where: { id }, data: {
+      description: candidate.description,
+      instructions: candidate.instructions,
+      tools: candidate.tools,
+      model: candidate.model,
+      mentions: candidate.mentions,
+      enabled: candidate.enabled
+    } });
+    await loadCustomAgents();
+    await notifySynced("customAgent", id);
+    return view6(row);
+  });
+  app2.delete("/custom-agents/:id", async (req, reply) => {
+    const { id } = req.params;
+    const existing = await prisma.customAgent.findUnique({ where: { id } });
+    if (!existing) return reply.code(404).send({ error: "not found" });
+    await prisma.customAgent.delete({ where: { id } });
+    const name2 = existing.name;
+    for (const r of await rowsOf()) {
+      const m = mentionsOf(r.mentions);
+      if (!m.includes(name2)) continue;
+      await prisma.customAgent.update({
+        where: { id: r.id },
+        data: { mentions: m.filter((x) => x !== name2) }
+      });
+      await notifySynced("customAgent", r.id);
+    }
+    await loadCustomAgents();
+    return reply.code(204).send();
+  });
+}
+
+// src/routes/github-issues.ts
+init_zod();
+init_db();
+
+// src/services/github-issues.ts
+init_db();
+
+// src/services/github-repo.ts
+init_db();
+function parse2(url2) {
+  const u = url2.trim();
+  let m = /^git@([^:]+):([^/]+)\/(.+?)(?:\.git)?$/.exec(u);
+  if (!m) m = /^https?:\/\/(?:[^@/]+@)?([^/]+)\/([^/]+)\/(.+?)(?:\.git)?\/?$/.exec(u);
+  if (!m || !m[1] || !m[2] || !m[3]) return null;
+  return { host: m[1], owner: m[2], repo: m[3] };
+}
+function githubSlugFromUrl(url2) {
+  const p = parse2(url2);
+  if (!p || !p.host.includes("github.")) return null;
+  return { owner: p.owner, repo: p.repo, slug: `${p.owner}/${p.repo}` };
+}
+async function resolveGithubRepo(projectId) {
+  const project = await prisma.project.findUnique({ where: { id: projectId } });
+  if (!project) return { ok: false, kind: "no-project", error: `project "${projectId}" tidak ada` };
+  const candidates = [];
+  if (project.gitRemote) candidates.push(project.gitRemote);
+  const repoDir = await resolveRepoDir(projectId).catch(() => null);
+  if (repoDir) {
+    const origin = (await listRemotes(repoDir)).find((r) => r.name === "origin");
+    if (origin?.fetch) candidates.push(origin.fetch);
+  }
+  if (candidates.length === 0)
+    return {
+      ok: false,
+      kind: "no-remote",
+      error: "project belum punya remote GitHub (isi gitRemote atau tambahkan origin di repo lokalnya)"
+    };
+  for (const url2 of candidates) {
+    const gh = githubSlugFromUrl(url2);
+    if (gh) return { ok: true, repo: gh };
+  }
+  const host2 = parse2(candidates[0])?.host ?? candidates[0];
+  return {
+    ok: false,
+    kind: "not-github",
+    error: `remote project ber-host "${host2}", bukan GitHub \u2014 tarik issue hanya mendukung GitHub`
+  };
+}
+
+// src/services/github-fetch.ts
+init_config2();
+import { execFile as execFile10 } from "node:child_process";
+var labelNames = (l) => (l ?? []).map((x) => typeof x === "string" ? x : x.name ?? "").filter(Boolean);
+var norm = (s) => s.toLowerCase() === "closed" ? "closed" : "open";
+function issueFromGh(raw) {
+  return {
+    number: raw.number,
+    title: raw.title,
+    body: raw.body ?? "",
+    authorLogin: raw.author?.login ?? "",
+    labels: labelNames(raw.labels),
+    url: raw.url,
+    issueState: norm(raw.state),
+    issueCreatedAt: raw.createdAt,
+    issueUpdatedAt: raw.updatedAt
+  };
+}
+function issuesFromRest(raw) {
+  let skippedPullRequests = 0;
+  const issues = [];
+  for (const r of raw) {
+    if (r.pull_request !== void 0) {
+      skippedPullRequests++;
+      continue;
+    }
+    issues.push({
+      number: r.number,
+      title: r.title,
+      body: r.body ?? "",
+      authorLogin: r.user?.login ?? "",
+      labels: labelNames(r.labels),
+      url: r.html_url,
+      issueState: norm(r.state),
+      issueCreatedAt: r.created_at,
+      issueUpdatedAt: r.updated_at
+    });
+  }
+  return { issues, skippedPullRequests };
+}
+var GH_FIELDS = "number,title,body,author,labels,url,state,createdAt,updatedAt";
+var API2 = "https://api.github.com";
+var defaultRunGh = (args, env) => new Promise((resolve14, reject) => {
+  execFile10(
+    args[0],
+    args.slice(1),
+    { env, maxBuffer: 1 << 26, encoding: "utf8", timeout: 6e4 },
+    (err, stdout, stderr) => {
+      const e = err;
+      if (e && (e.code === "ENOENT" || e.code === "EACCES")) return reject(e);
+      resolve14({ code: err ? Number(err.code ?? 1) : 0, stdout, stderr });
+    }
+  );
+});
+var defaultHttpGet = async (url2, headers) => {
+  const res = await fetch(url2, {
+    headers: { Accept: "application/vnd.github+json", "User-Agent": "hanoman", ...headers }
+  });
+  const json = await res.json().catch(() => null);
+  return { status: res.status, json };
+};
+function classifyGhStderr(stderr) {
+  const s = stderr.toLowerCase();
+  if (s.includes("gh auth login") || s.includes("bad credentials") || s.includes("http 401")) return "unauth";
+  if (s.includes("disabled issues")) return "issues-disabled";
+  if (s.includes("could not resolve to a repository") || s.includes("http 404")) return "not-found";
+  return "other";
+}
+async function viaGh(repo, opts, deps) {
+  const bin = deps.ghBin ?? effectiveStr("HANOMAN_GH_BIN") ?? "gh";
+  const args = [
+    bin,
+    "issue",
+    "list",
+    "--repo",
+    repo.slug,
+    "--state",
+    opts.state,
+    "--limit",
+    String(opts.limit),
+    "--json",
+    GH_FIELDS
+  ];
+  const env = { ...process.env };
+  if (deps.token) env.GH_TOKEN = deps.token;
+  let out3;
+  try {
+    out3 = await (deps.runGh ?? defaultRunGh)(args, env);
+  } catch {
+    return { fallback: true, reason: "gh tak terpasang" };
+  }
+  if (out3.code !== 0) {
+    const kind = classifyGhStderr(out3.stderr);
+    if (kind === "unauth") return { fallback: true, reason: "gh tak terautentikasi" };
+    return { ok: false, kind, error: out3.stderr.trim() || `gh keluar dengan kode ${out3.code}` };
+  }
+  let raw;
+  try {
+    raw = JSON.parse(out3.stdout || "[]");
+  } catch {
+    return { ok: false, kind: "other", error: "keluaran gh bukan JSON" };
+  }
+  return { ok: true, issues: raw.map(issueFromGh), via: "gh", skippedPullRequests: 0 };
+}
+async function viaRest(repo, opts, deps) {
+  const get = deps.httpGet ?? defaultHttpGet;
+  const headers = {};
+  if (deps.token) headers.Authorization = `Bearer ${deps.token}`;
+  const meta = await get(`${API2}/repos/${repo.slug}`, headers);
+  if (meta.status === 404)
+    return { ok: false, kind: "not-found", error: `repo "${repo.slug}" tak ditemukan atau tak terjangkau` };
+  if (meta.status === 401 || meta.status === 403)
+    return { ok: false, kind: "unauthorized", error: "GitHub menolak kredensial \u2014 isi GITHUB_TOKEN di Settings" };
+  if (meta.status !== 200) return { ok: false, kind: "other", error: `GitHub menjawab HTTP ${meta.status}` };
+  if (meta.json?.has_issues === false)
+    return { ok: false, kind: "issues-disabled", error: `repo "${repo.slug}" mematikan fitur issue` };
+  const issues = [];
+  let skippedPullRequests = 0;
+  for (let page = 1; issues.length < opts.limit && page <= 10; page++) {
+    const per = Math.min(100, opts.limit - issues.length);
+    const res = await get(
+      `${API2}/repos/${repo.slug}/issues?state=${opts.state}&per_page=${per}&page=${page}`,
+      headers
+    );
+    if (res.status === 404) return { ok: false, kind: "not-found", error: `repo "${repo.slug}" tak ditemukan` };
+    if (res.status === 401 || res.status === 403)
+      return { ok: false, kind: "unauthorized", error: "GitHub menolak kredensial" };
+    if (res.status !== 200) return { ok: false, kind: "other", error: `GitHub menjawab HTTP ${res.status}` };
+    const batch = Array.isArray(res.json) ? res.json : [];
+    if (batch.length === 0) break;
+    const n = issuesFromRest(batch);
+    issues.push(...n.issues);
+    skippedPullRequests += n.skippedPullRequests;
+    if (batch.length < per) break;
+  }
+  return { ok: true, issues: issues.slice(0, opts.limit), via: "rest", skippedPullRequests };
+}
+async function fetchIssues(repo, opts, deps = {}) {
+  const token = deps.token ?? effectiveStr("GITHUB_TOKEN") ?? void 0;
+  const first = await viaGh(repo, opts, { ...deps, token });
+  if (!("fallback" in first)) return first;
+  return viaRest(repo, opts, { ...deps, token });
+}
+
+// src/services/github-issues.ts
+var issueRowId = (projectId, slug, number) => `${projectId}:${slug}#${number}`;
+async function pullIssues(projectId, opts = {}, deps = {}) {
+  const resolved = await resolveGithubRepo(projectId);
+  if (!resolved.ok) return { ok: false, kind: resolved.kind, error: resolved.error };
+  const state = opts.state ?? "open";
+  const limit = Math.min(Math.max(opts.limit ?? 200, 1), 1e3);
+  const got = await fetchIssues(resolved.repo, { state, limit }, deps);
+  if (!got.ok) return { ok: false, kind: got.kind, error: got.error };
+  const slug = resolved.repo.slug;
+  const now = /* @__PURE__ */ new Date();
+  let created = 0, updated = 0;
+  for (const i of got.issues) {
+    const id = issueRowId(projectId, slug, i.number);
+    const exists = await prisma.githubIssue.findUnique({ where: { id }, select: { id: true } });
+    const fresh = {
+      title: i.title,
+      body: i.body,
+      authorLogin: i.authorLogin,
+      labels: i.labels,
+      url: i.url,
+      issueState: i.issueState,
+      issueCreatedAt: new Date(i.issueCreatedAt),
+      issueUpdatedAt: new Date(i.issueUpdatedAt),
+      pulledAt: now
+    };
+    await prisma.githubIssue.upsert({
+      where: { id },
+      create: { id, projectId, repoSlug: slug, number: i.number, status: "new", specId: null, ...fresh },
+      update: fresh
+    });
+    if (exists) updated++;
+    else created++;
+    await notifySynced("githubIssue", id);
+  }
+  return {
+    ok: true,
+    repo: slug,
+    pulled: got.issues.length,
+    created,
+    updated,
+    via: got.via,
+    skippedPullRequests: got.skippedPullRequests
+  };
+}
+
+// src/services/github-accept.ts
+init_src();
+init_db();
+var backlinkOf = (i) => `Dari GitHub issue ${i.repoSlug}#${i.number} (${i.url}).`;
+async function acceptGithubIssue(issue2, opts) {
+  if (issue2.specId) {
+    const spec2 = await prisma.spec.findUnique({ where: { id: issue2.specId } });
+    if (spec2) return { spec: spec2, created: false };
+  }
+  const labels = Array.isArray(issue2.labels) ? issue2.labels : [];
+  const source = opts.source ?? sourceForLabels(labels);
+  const priority = opts.priority ?? "sedang";
+  const backlink = backlinkOf(issue2);
+  const detail = `${issue2.body}
+
+Pelapor: @${issue2.authorLogin}
+Label: ${labels.length ? labels.join(", ") : "(tanpa label)"}
+${backlink}`;
+  const payload = source === "qa" ? {
+    severity: "major",
+    steps: "Reproduksi dari deskripsi issue.",
+    expected: "Perilaku yang diharapkan pelapor issue.",
+    actual: detail,
+    env: ""
+  } : { context: detail, outcome: "", constraints: "", priority };
+  const repoDir = await resolveRepoDir(issue2.projectId).catch(() => null);
+  let spec = null;
+  for (let attempt = 0; attempt < 3 && !spec; attempt++) {
+    const sid = await nextSpecId(repoDir);
+    try {
+      spec = await prisma.spec.create({
+        data: {
+          id: sid,
+          projectId: issue2.projectId,
+          title: issue2.title,
+          source,
+          stage: "brainstorming",
+          priority,
+          author: `GitHub \xB7 ${opts.author}`,
+          objective: `${issue2.title}. ${backlink}`,
+          payload
+        }
+      });
+    } catch (e) {
+      if (e.code === "P2002" && attempt < 2) continue;
+      throw e;
+    }
+  }
+  await prisma.githubIssue.update({
+    where: { id: issue2.id },
+    data: { status: "accepted", specId: spec.id }
+  });
+  await notifySynced("spec", spec.id);
+  await notifySynced("githubIssue", issue2.id);
+  return { spec, created: true };
+}
+
+// src/routes/github-issues.ts
+var zPull = external_exports.object({
+  state: external_exports.enum(["open", "all"]).optional(),
+  limit: external_exports.number().int().min(1).max(1e3).optional()
+}).default({});
+var zAccept = external_exports.object({
+  priority: external_exports.enum(["tinggi", "sedang", "rendah"]).optional(),
+  source: external_exports.enum(["qa", "brief", "audit"]).optional()
+}).default({});
+var zAcceptMany = external_exports.object({
+  ids: external_exports.array(external_exports.string().min(1)).min(1).max(100),
+  priority: external_exports.enum(["tinggi", "sedang", "rendah"]).optional(),
+  source: external_exports.enum(["qa", "brief", "audit"]).optional()
+});
+var STATUS = {
+  "no-project": 404,
+  "not-found": 404,
+  "no-remote": 400,
+  "not-github": 400,
+  "issues-disabled": 400,
+  unauthorized: 401,
+  other: 502
+};
+var view7 = (i) => ({
+  id: i.id,
+  projectId: i.projectId,
+  repoSlug: i.repoSlug,
+  number: i.number,
+  title: i.title,
+  body: i.body,
+  authorLogin: i.authorLogin,
+  labels: Array.isArray(i.labels) ? i.labels : [],
+  url: i.url,
+  issueState: i.issueState,
+  status: i.status,
+  specId: i.specId,
+  issueCreatedAt: i.issueCreatedAt.toISOString(),
+  issueUpdatedAt: i.issueUpdatedAt.toISOString(),
+  pulledAt: i.pulledAt.toISOString()
+});
+async function githubIssues(app2) {
+  app2.post("/projects/:id/github/pull", async (req, reply) => {
+    const { id } = req.params;
+    const parsed = zPull.safeParse(req.body ?? {});
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    const r = await pullIssues(id, parsed.data);
+    if (!r.ok) return reply.code(STATUS[r.kind] ?? 400).send({ error: r.error });
+    return reply.code(200).send(r);
+  });
+  app2.get("/projects/:id/github/issues", async (req, reply) => {
+    const { id } = req.params;
+    const { status } = req.query;
+    const project = await prisma.project.findUnique({ where: { id }, select: { id: true } });
+    if (!project) return reply.code(404).send({ error: "not found" });
+    const items = await prisma.githubIssue.findMany({
+      where: { projectId: id, ...status ? { status } : {} },
+      orderBy: [{ number: "desc" }]
+    });
+    return reply.send({ items: items.map(view7) });
+  });
+  app2.post("/github-issues/accept", async (req, reply) => {
+    const parsed = zAcceptMany.safeParse(req.body ?? {});
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    const { ids, priority, source } = parsed.data;
+    const author = req.user?.email ?? "system";
+    const created = [];
+    const failed = [];
+    for (const id of ids) {
+      const issue2 = await prisma.githubIssue.findUnique({ where: { id } });
+      if (!issue2) {
+        failed.push({ id, error: "not found" });
+        continue;
+      }
+      try {
+        created.push((await acceptGithubIssue(issue2, { author, priority, source })).spec);
+      } catch (e) {
+        failed.push({ id, error: e.message });
+      }
+    }
+    return reply.code(201).send({ created, failed });
+  });
+  app2.post("/github-issues/:id/accept", async (req, reply) => {
+    const { id } = req.params;
+    const parsed = zAccept.safeParse(req.body ?? {});
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    const issue2 = await prisma.githubIssue.findUnique({ where: { id } });
+    if (!issue2) return reply.code(404).send({ error: "not found" });
+    const { spec, created } = await acceptGithubIssue(issue2, {
+      author: req.user?.email ?? "system",
+      priority: parsed.data.priority,
+      source: parsed.data.source
+    });
+    return reply.code(created ? 201 : 200).send(created ? { spec } : { spec, alreadyPromoted: true });
+  });
+  app2.post("/github-issues/:id/reject", async (req, reply) => {
+    const { id } = req.params;
+    const issue2 = await prisma.githubIssue.findUnique({ where: { id } });
+    if (!issue2) return reply.code(404).send({ error: "not found" });
+    const row = await prisma.githubIssue.update({ where: { id }, data: { status: "rejected" } });
+    await notifySynced("githubIssue", id);
+    return reply.send({ id: row.id, status: row.status });
+  });
+  app2.post("/github-issues/:id/unlink", async (req, reply) => {
+    const { id } = req.params;
+    const issue2 = await prisma.githubIssue.findUnique({ where: { id } });
+    if (!issue2) return reply.code(404).send({ error: "not found" });
+    const row = await prisma.githubIssue.update({ where: { id }, data: { status: "new", specId: null } });
+    await notifySynced("githubIssue", id);
+    return reply.send({ id: row.id, status: row.status, specId: row.specId });
+  });
+}
+
 // src/app.ts
 var import_multipart = __toESM(require_multipart2(), 1);
 
@@ -23243,7 +24513,7 @@ function cookieOpts() {
 }
 
 // src/routes/auth.ts
-var view6 = (u) => ({ id: u.id, email: u.email, createdAt: u.createdAt.toISOString() });
+var view8 = (u) => ({ id: u.id, email: u.email, createdAt: u.createdAt.toISOString() });
 async function issue(reply, userId) {
   const token = await createSession2(userId);
   reply.setCookie(COOKIE_NAME, token, cookieOpts());
@@ -23261,7 +24531,7 @@ async function auth_default(app2) {
       data: { email: p.data.email, passwordHash: await hashPassword(p.data.password) }
     });
     await issue(reply, user.id);
-    return { user: view6(user) };
+    return { user: view8(user) };
   });
   app2.post("/auth/login", async (req, reply) => {
     if (loginThrottle(req.ip).blocked) return reply.code(429).send({ error: "too many attempts" });
@@ -23274,7 +24544,7 @@ async function auth_default(app2) {
     }
     clearLoginFails(req.ip);
     await issue(reply, user.id);
-    return { user: view6(user) };
+    return { user: view8(user) };
   });
   app2.post("/auth/logout", async (req, reply) => {
     const token = req.cookies?.[COOKIE_NAME];
@@ -23282,7 +24552,7 @@ async function auth_default(app2) {
     reply.clearCookie(COOKIE_NAME, { path: "/" });
     return reply.code(204).send();
   });
-  app2.get("/auth/users", async () => (await prisma.user.findMany({ orderBy: { createdAt: "asc" } })).map(view6));
+  app2.get("/auth/users", async () => (await prisma.user.findMany({ orderBy: { createdAt: "asc" } })).map(view8));
   app2.post("/auth/users", async (req, reply) => {
     const p = zSignup.safeParse(req.body);
     if (!p.success) return reply.code(400).send({ error: p.error.flatten() });
@@ -23291,7 +24561,7 @@ async function auth_default(app2) {
     const user = await prisma.user.create({
       data: { email: p.data.email, passwordHash: await hashPassword(p.data.password) }
     });
-    return view6(user);
+    return view8(user);
   });
   app2.delete("/auth/users/:id", async (req, reply) => {
     if (await prisma.user.count() <= 1) return reply.code(400).send({ error: "tak bisa hapus user terakhir" });
@@ -23311,7 +24581,7 @@ async function auth_default(app2) {
     });
     await deleteUserSessions(user.id);
     await issue(reply, user.id);
-    return { user: view6(user) };
+    return { user: view8(user) };
   });
 }
 
@@ -23390,15 +24660,15 @@ async function agent_tokens_default(app2) {
   app2.post("/agent-tokens", async (req, reply) => {
     const p = zAgentTokenCreate.safeParse(req.body);
     if (!p.success) return reply.code(400).send({ error: p.error.flatten() });
-    const { view: view7, token } = await issueAgentToken({ ...p.data, createdBy: req.user?.id });
-    return reply.code(201).send({ ...view7, token });
+    const { view: view9, token } = await issueAgentToken({ ...p.data, createdBy: req.user?.id });
+    return reply.code(201).send({ ...view9, token });
   });
   app2.patch("/agent-tokens/:id", async (req, reply) => {
     const p = zAgentTokenPatch.safeParse(req.body);
     if (!p.success) return reply.code(400).send({ error: p.error.flatten() });
     const { id } = req.params;
-    const view7 = await patchAgentToken(id, p.data);
-    return view7 ? reply.send(view7) : reply.code(404).send({ error: "not found" });
+    const view9 = await patchAgentToken(id, p.data);
+    return view9 ? reply.send(view9) : reply.code(404).send({ error: "not found" });
   });
   app2.delete("/agent-tokens/:id", async (req, reply) => {
     const { id } = req.params;
@@ -23446,10 +24716,12 @@ function capabilityForRoute(method, path) {
     return read ? "GLOBAL_READ" : "COOKIE_ONLY";
   if (top === "scheduler") return rw("settings");
   if (top === "lead") return rw("lead");
+  if (top === "custom-agents") return rw("agents");
   if (top === "settings" || top === "config") return rw("settings");
   if (top === "specs") return rw("backlog");
   if (top === "notifications") return rw("notifications");
   if (top === "tickets") return rw("support");
+  if (top === "github-issues") return rw("support");
   if (top === "vps") return rw("vps");
   if (top === "prds") return rw("docs");
   if (top === "terminal") {
@@ -23459,6 +24731,7 @@ function capabilityForRoute(method, path) {
   if (top === "projects") {
     const sub = seg[2];
     if (sub === "docs" || sub === "prds") return rw("docs");
+    if (sub === "github") return rw("support");
     if (sub && IDE_SUBS.has(sub)) return rw("ide");
     return rw("projects");
   }
@@ -23552,6 +24825,8 @@ function buildApp({ requireAuth = true } = {}) {
     await api.register(scheduler_default);
     await api.register(codex);
     await api.register(lead_default);
+    await api.register(custom_agents_default);
+    await api.register(githubIssues);
   }, { prefix: "/api" });
   if (process.env.NODE_ENV === "production") {
     const dist = pickWebDir(dirname12(fileURLToPath4(import.meta.url)), process.env, existsSync11);
@@ -23837,8 +25112,9 @@ async function shutdown(sig) {
 }
 process.on("SIGTERM", () => void shutdown("SIGTERM"));
 process.on("SIGINT", () => void shutdown("SIGINT"));
-app.listen({ port, host }).then(() => {
+app.listen({ port, host }).then(async () => {
   console.log(`hanoman api ${host}:${port}`);
+  await installCustomAgents();
   installSessionHistory();
   try {
     const liveIds = listSessions().map((s) => s.id);