hanoman 0.1.9 → 0.1.10

package/dist/server.js

@@ -4606,6 +4606,47 @@ var init_custom_agent = __esm({
   }
 });
 
+// ../shared/src/github.ts
+function sourceForLabels(labels) {
+  const hay = labels.map((l) => l.toLowerCase());
+  for (const rule2 of LABEL_RULES)
+    if (hay.some((l) => rule2.needles.some((n) => l.includes(n)))) return rule2.source;
+  return "qa";
+}
+var zGithubIssueStatus, zNormalIssue, zGithubIssueView, LABEL_RULES;
+var init_github = __esm({
+  "../shared/src/github.ts"() {
+    "use strict";
+    init_zod();
+    zGithubIssueStatus = external_exports.enum(["new", "accepted", "rejected"]);
+    zNormalIssue = external_exports.object({
+      number: external_exports.number().int().positive(),
+      title: external_exports.string(),
+      body: external_exports.string(),
+      authorLogin: external_exports.string(),
+      labels: external_exports.array(external_exports.string()),
+      url: external_exports.string(),
+      issueState: external_exports.enum(["open", "closed"]),
+      issueCreatedAt: external_exports.string(),
+      // ISO-8601 apa adanya dari GitHub
+      issueUpdatedAt: external_exports.string()
+    });
+    zGithubIssueView = zNormalIssue.extend({
+      id: external_exports.string(),
+      projectId: external_exports.string(),
+      repoSlug: external_exports.string(),
+      status: zGithubIssueStatus,
+      specId: external_exports.string().nullable(),
+      pulledAt: external_exports.string()
+    });
+    LABEL_RULES = [
+      { needles: ["bug", "defect", "regression"], source: "qa" },
+      { needles: ["question", "docs", "documentation"], source: "audit" },
+      { needles: ["enhancement", "feature", "feat"], source: "brief" }
+    ];
+  }
+});
+
 // ../shared/src/lead.ts
 function leadActionAllowed(action) {
   return LEAD_ACTIONS.includes(action);
@@ -5243,6 +5284,14 @@ var init_api = __esm({
       ticketUnlink: (id) => `${API}/tickets/${id}/unlink`,
       // SPEC-271 · lepas tautan backlog
       ticketReject: (id) => `${API}/tickets/${id}/reject`,
+      // SPEC-471 · ADR-0095 · tarik & triase issue GitHub (di belakang gate cookie, capability `support`).
+      // hanoman TIDAK PERNAH menulis ke GitHub — tak ada path komentar/close di sini, dan itu disengaja.
+      githubPull: (id) => `${API}/projects/${encodeURIComponent(id)}/github/pull`,
+      githubIssues: (id) => `${API}/projects/${encodeURIComponent(id)}/github/issues`,
+      githubIssuesAccept: `${API}/github-issues/accept`,
+      githubIssueAccept: (id) => `${API}/github-issues/${encodeURIComponent(id)}/accept`,
+      githubIssueReject: (id) => `${API}/github-issues/${encodeURIComponent(id)}/reject`,
+      githubIssueUnlink: (id) => `${API}/github-issues/${encodeURIComponent(id)}/unlink`,
       // SPEC-361 · ADR-0078 · unduh dokumen: query ditempelkan ke URL endpoint dokumen yang sudah ada
       // (tak ada endpoint ekspor terpisah). `base` bisa sudah membawa query, mis. ideFile(?path=…).
       download: (base, fmt) => `${base}${base.includes("?") ? "&" : "?"}download=${fmt}`
@@ -5450,6 +5499,28 @@ var init_config_registry = __esm({
       // vps
       { key: "HANOMAN_SSH_KEY_DIR", group: "vps", label: "Dir key SSH", kind: "path", apply: "new-session", category: "knob", help: "Default ~/.hanoman." },
       { key: "HANOMAN_SSH_BIN", group: "vps", label: "Biner ssh", kind: "path", apply: "new-session", category: "knob", default: "ssh" },
+      // github (SPEC-471 · ADR-0095 · tarik issue → backlog). Dua mode auth, satu jalur kode:
+      // `gh` memakai keyring mesin; bila GITHUB_TOKEN diisi ia diteruskan sebagai GH_TOKEN ke
+      // proses gh DAN dipakai jalur REST (hub VPS yang tak punya keyring).
+      {
+        key: "GITHUB_TOKEN",
+        group: "github",
+        label: "GitHub token",
+        kind: "secret",
+        apply: "live",
+        category: "credential",
+        help: "PAT scope `repo` (atau `public_repo`). Kosong = andalkan `gh auth login` di mesin ini."
+      },
+      {
+        key: "HANOMAN_GH_BIN",
+        group: "github",
+        label: "Biner gh",
+        kind: "path",
+        apply: "live",
+        category: "knob",
+        default: "gh",
+        help: "Absen = tarik issue lewat HTTPS langsung ke api.github.com."
+      },
       // runtime
       { key: "HANOMAN_EVENTS_TICK_MS", group: "runtime", label: "Interval events (ms)", kind: "int", apply: "live", category: "knob", default: "1000", min: 100 },
       { key: "HANOMAN_UPDATE_FETCH", group: "runtime", label: "Deteksi update saat boot", kind: "bool", apply: "live", category: "knob", default: "1" },
@@ -5542,6 +5613,7 @@ var init_src = __esm({
     init_entities();
     init_agent();
     init_custom_agent();
+    init_github();
     init_lead();
     init_dto();
     init_api();
@@ -6582,7 +6654,7 @@ function readChoiceDialog(paneText2) {
   const found = [];
   for (const line of lines2.slice(0, footer)) {
     const m = ROW.exec(line);
-    if (m) found.push({ n: Number(m[1]), label: (m[2] ?? "").trim() });
+    if (m) found.push({ n: Number(m[1]), label: cleanLabel(m[2] ?? "") });
   }
   if (found.length < 2) return null;
   const run2 = [];
@@ -6606,6 +6678,65 @@ function readChoiceDialog(paneText2) {
     options: rows.filter((r) => !r.free && !r.chat).map((r) => r.label)
   };
 }
+function readTabs(lines2) {
+  for (let i = lines2.length - 1; i >= 0; i--) {
+    const line = lines2[i] ?? "";
+    if (!/[☐☒]/.test(line)) continue;
+    const tabs = [];
+    for (const tok of line.split(/\s{2,}/)) {
+      const m = TAB_BOX.exec(tok.trim());
+      if (m) tabs.push({ header: (m[2] ?? "").trim(), answered: m[1] === "\u2612" });
+    }
+    if (tabs.length) return { tabs, at: i };
+  }
+  return { tabs: [], at: -1 };
+}
+function readTitle(lines2, stripAt, footer) {
+  if (stripAt < 0) return "";
+  for (let i = stripAt + 1; i < footer; i++) {
+    const line = (lines2[i] ?? "").trim();
+    if (!line || RULE.test(line)) continue;
+    return ROW.test(lines2[i] ?? "") ? "" : line;
+  }
+  return "";
+}
+function readReviewScreen(paneText2) {
+  const lines2 = paneText2.split("\n").map((l) => l.trimEnd());
+  const at = lastIndexOf(lines2, REVIEW_PROMPT);
+  if (at < 0) return null;
+  for (const line of lines2.slice(at)) {
+    const m = SUBMIT_ROW.exec(line);
+    if (m) return { submitRow: Number(m[1]) };
+  }
+  return null;
+}
+function readDialogScreen(paneText2) {
+  const lines2 = paneText2.split("\n").map((l) => l.trimEnd());
+  const footer = lastIndexOf(lines2, FOOTER);
+  if (lastIndexOf(lines2, REVIEW_PROMPT) > footer) {
+    const review = readReviewScreen(paneText2);
+    if (review) return { kind: "review", submitRow: review.submitRow };
+  }
+  const d = readChoiceDialog(paneText2);
+  if (!d) return null;
+  const { tabs, at } = readTabs(lines2.slice(0, footer));
+  return {
+    kind: "question",
+    rows: d.rows,
+    freeIndex: d.freeIndex,
+    options: d.options,
+    notes: d.freeIndex === null && NOTES_FOOTER.test(lines2[footer] ?? ""),
+    tabs,
+    title: readTitle(lines2, at, footer)
+  };
+}
+function dialogKey(paneText2) {
+  const s = readDialogScreen(paneText2);
+  if (!s) return "none";
+  if (s.kind === "review") return "review";
+  const tabs = s.tabs.map((t) => `${t.answered ? "x" : "o"}${t.header}`).join(",");
+  return `q|${tabs}|${s.title || s.options.join("|")}`;
+}
 function freeTextFilled(paneText2, n) {
   const row = readChoiceDialog(paneText2)?.rows.find((r) => r.n === n);
   if (!row) return false;
@@ -6623,7 +6754,37 @@ async function answerChoiceDialog(io, freeIndex, line, chunkMs) {
   io.enter();
   return true;
 }
-var FOOTER, ROW, PLACEHOLDER, CHAT_ROW, DIALOG_SETTLE_MS;
+function notesFilled(paneText2) {
+  const lines2 = paneText2.split("\n").map((l) => l.trimEnd());
+  for (let i = lines2.length - 1; i >= 0; i--) {
+    const m = NOTES_LINE.exec(lines2[i] ?? "");
+    if (!m) continue;
+    const v = (m[1] ?? "").trim();
+    return v.length > 0 && !NOTES_PLACEHOLDER.test(v);
+  }
+  return false;
+}
+async function answerNotesDialog(io, line, chunkMs) {
+  io.literal("n");
+  await io.sleep(DIALOG_SETTLE_MS);
+  for (const chunk of goalChunks(line)) {
+    io.literal(chunk);
+    await io.sleep(chunkMs);
+  }
+  await io.sleep(DIALOG_SETTLE_MS);
+  if (!notesFilled(io.capture())) return false;
+  io.enter();
+  return true;
+}
+async function submitReview(io, submitRow) {
+  io.literal(String(submitRow));
+  for (let i = 0; i < SUBMIT_TRIES; i++) {
+    await io.sleep(DIALOG_SETTLE_MS);
+    if (!readReviewScreen(io.capture())) return true;
+  }
+  return false;
+}
+var FOOTER, ROW, PLACEHOLDER, CHAT_ROW, SIDE_PANEL, cleanLabel, REVIEW_PROMPT, SUBMIT_ROW, NOTES_FOOTER, TAB_BOX, lastIndexOf, RULE, DIALOG_SETTLE_MS, NOTES_PLACEHOLDER, NOTES_LINE, SUBMIT_TRIES;
 var init_tui_dialog = __esm({
   "src/services/tui-dialog.ts"() {
     "use strict";
@@ -6632,7 +6793,21 @@ var init_tui_dialog = __esm({
     ROW = /^\s*[❯>›]?\s*(\d{1,2})\.\s+(\S.*)$/;
     PLACEHOLDER = /^(?:type something\.?|other)$/i;
     CHAT_ROW = /^chat about this$/i;
+    SIDE_PANEL = /\s{2,}[│┃┌┐└┘├┤╭╮╰╯─━].*$/;
+    cleanLabel = (s) => s.replace(SIDE_PANEL, "").trim();
+    REVIEW_PROMPT = /^\s*ready to submit your answers\?\s*$/i;
+    SUBMIT_ROW = /^\s*[❯>›]?\s*(\d{1,2})\.\s+submit answers\s*$/i;
+    NOTES_FOOTER = /\bn to add notes\b/i;
+    TAB_BOX = /^([☐☒])\s*(.+)$/;
+    lastIndexOf = (lines2, re) => {
+      for (let i = lines2.length - 1; i >= 0; i--) if (re.test(lines2[i] ?? "")) return i;
+      return -1;
+    };
+    RULE = /^[\s─━╌╍_=]*$/;
     DIALOG_SETTLE_MS = 250;
+    NOTES_PLACEHOLDER = /^(?:press n to add notes|add notes on this design(?:…|\.\.\.)?)$/i;
+    NOTES_LINE = /(?:^|\s)Notes:\s*(.*)$/;
+    SUBMIT_TRIES = 8;
   }
 });
 
@@ -6921,18 +7096,13 @@ async function sendToPane(id, text, chunkMs = 50) {
   const line = text.replace(/\s*\r?\n\s*/g, " ").trim();
   if (!line) return false;
   try {
-    const io = {
-      capture: () => capturePane(id, DIALOG_CAPTURE_LINES),
-      literal: (s) => {
-        tmux("send-keys", "-t", name(id), "-l", s);
-      },
-      enter: () => {
-        tmux("send-keys", "-t", name(id), "Enter");
-      },
-      sleep
-    };
-    const free = readChoiceDialog(io.capture())?.freeIndex ?? null;
-    if (free !== null) return await answerChoiceDialog(io, free, line, chunkMs);
+    const io = dialogIO(id);
+    const screen = readDialogScreen(io.capture());
+    if (screen?.kind === "review") return await submitReview(io, screen.submitRow);
+    if (screen?.kind === "question") {
+      if (screen.freeIndex !== null) return await answerChoiceDialog(io, screen.freeIndex, line, chunkMs);
+      if (screen.notes) return await answerNotesDialog(io, line, chunkMs);
+    }
     for (const chunk of goalChunks(line)) {
       io.literal(chunk);
       await sleep(chunkMs);
@@ -6943,6 +7113,18 @@ async function sendToPane(id, text, chunkMs = 50) {
     return false;
   }
 }
+async function submitPaneDialog(id) {
+  const p = getSession(id);
+  if (!p || p.exited) return false;
+  try {
+    const io = dialogIO(id);
+    const screen = readDialogScreen(io.capture());
+    if (screen?.kind !== "review") return false;
+    return await submitReview(io, screen.submitRow);
+  } catch {
+    return false;
+  }
+}
 async function armGoalInTui(id, condition, o = {}) {
   const pollMs = o.pollMs ?? 500, readyTries = o.readyTries ?? 20;
   const settleMs = o.settleMs ?? 1200, verifyTries = o.verifyTries ?? 12;
@@ -7117,7 +7299,7 @@ function spawnPty(...args) {
     );
   }
 }
-var socket, PREFIX, MAX_SCROLLBACK, POLL_MS, markerFilled, attached, claudeBin, shellBin, codexBin, agentBin, rootBypassEnv, frame, name, promptFilePath, goalGatePath, goalStatePath, agentsFilePath, NO_SERVER, TmuxError, sq, sessionIdForSpec, idFor, FMT, listSessions, liveDecisions, getSession, hooks, emitBirth, emitDeath, customAgentSource, customAgentsFor, sleep, paneText, DIALOG_CAPTURE_LINES, GOAL_ARMED_MARKERS, goalArmed, phaseKey, paneComplete, sessionFinished, poll, detach;
+var socket, PREFIX, MAX_SCROLLBACK, POLL_MS, markerFilled, attached, claudeBin, shellBin, codexBin, agentBin, rootBypassEnv, frame, name, promptFilePath, goalGatePath, goalStatePath, agentsFilePath, NO_SERVER, TmuxError, sq, sessionIdForSpec, idFor, FMT, listSessions, liveDecisions, getSession, hooks, emitBirth, emitDeath, customAgentSource, customAgentsFor, sleep, paneText, dialogIO, DIALOG_CAPTURE_LINES, GOAL_ARMED_MARKERS, goalArmed, phaseKey, paneComplete, sessionFinished, poll, detach;
 var init_pty = __esm({
   "src/services/pty.ts"() {
     "use strict";
@@ -7219,6 +7401,16 @@ var init_pty = __esm({
         return "";
       }
     };
+    dialogIO = (id) => ({
+      capture: () => capturePane(id, DIALOG_CAPTURE_LINES),
+      literal: (s) => {
+        tmux("send-keys", "-t", name(id), "-l", s);
+      },
+      enter: () => {
+        tmux("send-keys", "-t", name(id), "Enter");
+      },
+      sleep
+    });
     DIALOG_CAPTURE_LINES = 60;
     GOAL_ARMED_MARKERS = {
       claude: ["/goal"],
@@ -7321,6 +7513,8 @@ var init_rename_project = __esm({
 var sync_exports = {};
 __export(sync_exports, {
   SYNCED: () => SYNCED,
+  __DATE_FIELDS: () => __DATE_FIELDS,
+  __FIELDS: () => __FIELDS,
   __FIELDS_FOR_TEST: () => __FIELDS_FOR_TEST,
   applyPush: () => applyPush,
   backfillFeed: () => backfillFeed,
@@ -7459,13 +7653,13 @@ async function upsertLocal(entity, id, version, data) {
 function setAcceptedHook(hook) {
   onAccepted = hook;
 }
-var SYNCED, DELEGATE, FIELDS, DATE_FIELDS, onAccepted, __FIELDS_FOR_TEST;
+var SYNCED, DELEGATE, FIELDS, DATE_FIELDS, __FIELDS, __DATE_FIELDS, onAccepted, __FIELDS_FOR_TEST;
 var init_sync = __esm({
   "src/services/sync.ts"() {
     "use strict";
     init_db();
     init_rename_project();
-    SYNCED = ["project", "spec", "vps", "sessionResult", "ticket", "ticketAttachment", "customAgent"];
+    SYNCED = ["project", "spec", "vps", "sessionResult", "ticket", "ticketAttachment", "customAgent", "githubIssue"];
     DELEGATE = {
       project: prisma.project,
       spec: prisma.spec,
@@ -7473,7 +7667,8 @@ var init_sync = __esm({
       sessionResult: prisma.sessionResult,
       ticket: prisma.ticket,
       ticketAttachment: prisma.ticketAttachment,
-      customAgent: prisma.customAgent
+      customAgent: prisma.customAgent,
+      githubIssue: prisma.githubIssue
     };
     FIELDS = {
       project: ["name", "desc", "kind", "stack", "gitRemote", "updatedAt"],
@@ -7493,7 +7688,28 @@ var init_sync = __esm({
       // ada: `upsert` yang tak menyebut kolom ber-default TETAP berhasil, jadi kolom yang terlewat
       // mendarat sebagai default palsu di tiap client tanpa satu pun error (kelas ADR-0090/0093).
       // `version` tak pernah masuk FIELDS — ia stempel mekanisme sync itu sendiri.
-      customAgent: ["projectId", "name", "description", "instructions", "tools", "model", "mentions", "enabled", "createdAt", "updatedAt"]
+      customAgent: ["projectId", "name", "description", "instructions", "tools", "model", "mentions", "enabled", "createdAt", "updatedAt"],
+      // SPEC-471 · ADR-0095 · SELURUH kolom bermakna ikut. `status`/`specId` termasuk: keputusan
+      // triase adalah bagian keadaan yang harus dilihat sama oleh semua mesin — tanpa itu satu
+      // mesin bisa menerima ulang issue yang di mesin lain sudah jadi backlog.
+      githubIssue: [
+        "projectId",
+        "repoSlug",
+        "number",
+        "title",
+        "body",
+        "authorLogin",
+        "labels",
+        "url",
+        "issueState",
+        "status",
+        "specId",
+        "issueCreatedAt",
+        "issueUpdatedAt",
+        "pulledAt",
+        "createdAt",
+        "updatedAt"
+      ]
     };
     DATE_FIELDS = {
       project: ["updatedAt"],
@@ -7502,8 +7718,11 @@ var init_sync = __esm({
       sessionResult: ["createdAt", "updatedAt"],
       ticket: ["createdAt", "updatedAt"],
       ticketAttachment: ["createdAt", "updatedAt"],
-      customAgent: ["createdAt", "updatedAt"]
+      customAgent: ["createdAt", "updatedAt"],
+      githubIssue: ["issueCreatedAt", "issueUpdatedAt", "pulledAt", "createdAt", "updatedAt"]
     };
+    __FIELDS = FIELDS;
+    __DATE_FIELDS = DATE_FIELDS;
     __FIELDS_FOR_TEST = FIELDS;
   }
 });
@@ -9670,7 +9889,7 @@ var require_extension = __commonJS({
       if (dest[name2] === void 0) dest[name2] = [elem];
       else dest[name2].push(elem);
     }
-    function parse2(header) {
+    function parse3(header) {
       const offers = /* @__PURE__ */ Object.create(null);
       let params = /* @__PURE__ */ Object.create(null);
       let mustUnescape = false;
@@ -9810,7 +10029,7 @@ var require_extension = __commonJS({
         }).join(", ");
       }).join(", ");
     }
-    module.exports = { format, parse: parse2 };
+    module.exports = { format, parse: parse3 };
   }
 });
 
@@ -9844,7 +10063,7 @@ var require_websocket = __commonJS({
     var {
       EventTarget: { addEventListener, removeEventListener }
     } = require_event_target();
-    var { format, parse: parse2 } = require_extension();
+    var { format, parse: parse3 } = require_extension();
     var { toBuffer } = require_buffer_util();
     var kAborted = Symbol("kAborted");
     var protocolVersions = [8, 13];
@@ -10521,7 +10740,7 @@ var require_websocket = __commonJS({
           }
           let extensions;
           try {
-            extensions = parse2(secWebSocketExtensions);
+            extensions = parse3(secWebSocketExtensions);
           } catch (err) {
             const message = "Invalid Sec-WebSocket-Extensions header";
             abortHandshake(websocket2, socket2, message);
@@ -10813,7 +11032,7 @@ var require_subprotocol = __commonJS({
   "../node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/subprotocol.js"(exports, module) {
     "use strict";
     var { tokenChars } = require_validation();
-    function parse2(header) {
+    function parse3(header) {
       const protocols = /* @__PURE__ */ new Set();
       let start = -1;
       let end2 = -1;
@@ -10849,7 +11068,7 @@ var require_subprotocol = __commonJS({
       protocols.add(protocol);
       return protocols;
     }
-    module.exports = { parse: parse2 };
+    module.exports = { parse: parse3 };
   }
 });
 
@@ -14280,7 +14499,7 @@ var require_secure_json_parse = __commonJS({
       }
       return obj;
     }
-    function parse2(text, reviver, options2) {
+    function parse3(text, reviver, options2) {
       const stackTraceLimit = Error.stackTraceLimit;
       Error.stackTraceLimit = 0;
       try {
@@ -14300,9 +14519,9 @@ var require_secure_json_parse = __commonJS({
         Error.stackTraceLimit = stackTraceLimit;
       }
     }
-    module.exports = parse2;
-    module.exports.default = parse2;
-    module.exports.parse = parse2;
+    module.exports = parse3;
+    module.exports.default = parse3;
+    module.exports.parse = parse3;
     module.exports.safeParse = safeParse;
     module.exports.scan = filter;
   }
@@ -21665,11 +21884,11 @@ function clamp(text) {
   const buf = Buffer.from(text, "utf8");
   if (buf.byteLength <= MAX_TRANSCRIPT_BYTES) return { body: text, truncated: false };
   const cut = buf.byteLength - MAX_TRANSCRIPT_BYTES;
-  let tail2 = buf.subarray(cut).toString("utf8");
-  const nl = tail2.indexOf("\n");
-  if (nl >= 0) tail2 = tail2.slice(nl + 1);
+  let tail3 = buf.subarray(cut).toString("utf8");
+  const nl = tail3.indexOf("\n");
+  if (nl >= 0) tail3 = tail3.slice(nl + 1);
   return { body: `\u2026 ${cut} byte awal dipangkas (batas ${MAX_TRANSCRIPT_BYTES} byte) \u2026
-${tail2}`, truncated: true };
+${tail3}`, truncated: true };
 }
 async function saveTranscript(text) {
   if (!text.trim()) return { key: "", bytes: 0, truncated: false };
@@ -22629,6 +22848,18 @@ function leadArgv(o) {
   ];
 }
 var leadEnv = (agent, base = process.env, uid = process.getuid?.()) => agent === "claude" ? { ...rootBypassEnv(uid), ...base } : { ...base };
+var EXPLAIN_MAX = 500;
+var tail = (s) => {
+  const t = s.trim();
+  return t.length > EXPLAIN_MAX ? `\u2026${t.slice(-EXPLAIN_MAX)}` : t;
+};
+function leadFailureReason(agent, timeoutMs, err, stdout, stderr) {
+  if (err.killed) return `lead ${agent} kehabisan waktu ${timeoutMs} ms`;
+  const fromErr = err.message.startsWith("Command failed:") ? "" : err.message;
+  const detail = [tail(stderr), tail(stdout)].filter(Boolean).join(" \xB7 ") || tail(fromErr) || "tanpa keluaran";
+  const how = err.signal ? `sinyal ${err.signal}` : `exit ${err.code ?? "?"}`;
+  return `lead ${agent} gagal (${how}): ${detail}`;
+}
 function think(prompt, o) {
   const bin = binFor(o.agent);
   const args = leadArgv({ agent: o.agent, model: o.model, effort: o.effort, prompt });
@@ -22642,8 +22873,7 @@ function think(prompt, o) {
       killSignal: "SIGTERM"
     }, (err, stdout, stderr) => {
       if (err) {
-        const killed = err.killed;
-        reject(new Error(killed ? `lead ${o.agent} kehabisan waktu ${o.timeoutMs} ms` : `lead ${o.agent} gagal: ${(stderr || err.message).trim().slice(0, 500)}`));
+        reject(new Error(leadFailureReason(o.agent, o.timeoutMs, err, stdout, stderr)));
         return;
       }
       resolve14(stdout);
@@ -22921,12 +23151,13 @@ Bukti integrasi: ${evidence.join("; ")} \u2192 ${verdict}.` }
 
 // src/services/lead/detect.ts
 init_pty();
+init_tui_dialog();
 import { writeFileSync as writeFileSync4 } from "node:fs";
 
 // src/services/lead/pane.ts
 init_tui_dialog();
 var CLEAN = /[│┃┆┊┌┐└┘├┤┬┴┼─━╭╮╰╯>❯]/g;
-var tail = (text, lines2) => text.split("\n").map((l) => l.replace(CLEAN, " ").trimEnd()).filter((l) => l.trim()).slice(-lines2);
+var tail2 = (text, lines2) => text.split("\n").map((l) => l.replace(CLEAN, " ").trimEnd()).filter((l) => l.trim()).slice(-lines2);
 var CODEX_FINISHED = [
   /Goal achieved/i,
   /Goal unmet/i,
@@ -22939,11 +23170,11 @@ var ASK_SIGNALS = [
   /\b(pilih|apakah|haruskah|mana yang|opsi|which|should i|do you want|proceed\?)\b/i
 ];
 function readPaneQuestion(text, agent) {
-  const lines2 = tail(text, 40);
+  const lines2 = tail2(text, 40);
   const body = lines2.join("\n").trim();
   const choices = readChoiceDialog(text)?.options ?? [];
   if (!body) return { asking: false, question: "", reason: "layar kosong", choices };
-  const question = tail(text, 25).join("\n").trim();
+  const question = tail2(text, 25).join("\n").trim();
   if (agent === "codex") {
     const finished = CODEX_FINISHED.find((re) => re.test(body));
     if (finished) return { asking: false, question, reason: "sesi codex selesai wajar (ADR-0074)", choices };
@@ -22956,9 +23187,16 @@ function readPaneQuestion(text, agent) {
 // src/services/lead/detect.ts
 var answers = /* @__PURE__ */ new Map();
 var capped = /* @__PURE__ */ new Set();
+var failures = /* @__PURE__ */ new Map();
+var failCapped = /* @__PURE__ */ new Set();
+var MAX_CHAIN_STEPS = 6;
+var CHAIN_POLL_MS = 300;
+var CHAIN_POLL_TRIES = 20;
 function resetSession(sessionId2) {
   answers.delete(sessionId2);
   capped.delete(sessionId2);
+  failures.delete(sessionId2);
+  failCapped.delete(sessionId2);
 }
 var prodDetectDeps = {
   live: () => {
@@ -22994,6 +23232,8 @@ var prodDetectDeps = {
     } catch {
     }
   },
+  submit: (id) => submitPaneDialog(id),
+  sleep: (ms) => new Promise((r) => setTimeout(r, ms)),
   decide,
   decideDeps: prodDecideDeps,
   optIn: leadProjects,
@@ -23025,7 +23265,7 @@ async function scanAndAnswer(deps = prodDetectDeps) {
     if ((answers.get(s.id) ?? 0) >= cfg.maxAutoAnswers) {
       if (!capped.has(s.id)) {
         capped.add(s.id);
-        const row2 = await recordDecision({
+        const row = await recordDecision({
           projectId: s.projectId,
           specId: s.specId,
           sessionId: s.id,
@@ -23040,7 +23280,7 @@ async function scanAndAnswer(deps = prodDetectDeps) {
           weighty: true
         });
         await deps.notify(
-          row2.id,
+          row.id,
           `Lead berhenti menjawab sesi ${s.id} (batas ${cfg.maxAutoAnswers}\xD7 tercapai)`,
           s.projectId,
           s.specId ?? null,
@@ -23050,16 +23290,79 @@ async function scanAndAnswer(deps = prodDetectDeps) {
       skip("batas jawaban otomatis tercapai");
       continue;
     }
+    if ((failures.get(s.id) ?? 0) >= cfg.maxAutoAnswers) {
+      if (!failCapped.has(s.id)) {
+        failCapped.add(s.id);
+        const row = await recordDecision({
+          projectId: s.projectId,
+          specId: s.specId,
+          sessionId: s.id,
+          gate: "detected",
+          kind: "quality",
+          question: `Keputusan untuk sesi ${s.id} gagal disusun ${cfg.maxAutoAnswers}\xD7 berturut-turut.`,
+          answer: "Berhenti mencoba; serahkan ke operator.",
+          reason: "Kegagalan beruntun menandakan sebab yang tak hilang dengan mengulang (kunci/kuota agen, biner tak terpasang) \u2014 mencoba lagi tiap denyut hanya membakar kuota. Alasan percobaan terakhir ada di baris jejak `gagal` tepat di atas ini.",
+          refs: [],
+          confidence: "tinggi",
+          action: "none",
+          weighty: true
+        });
+        await deps.notify(
+          row.id,
+          `Lead berhenti mencoba sesi ${s.id} (${cfg.maxAutoAnswers}\xD7 gagal berturut-turut)`,
+          s.projectId,
+          s.specId ?? null,
+          s.id
+        );
+      }
+      skip("batas kegagalan beruntun tercapai");
+      continue;
+    }
     const agent = deps.agentOf(s.id) ?? "claude";
     const read = readPaneQuestion(deps.pane(s.id), agent);
     if (!read.asking) {
       skip(read.reason);
       continue;
     }
+    const chain = await runChain(s, agent, deps);
+    if (chain.acted && chain.done) {
+      deps.clearMarker(s.decisionFile);
+      answers.set(s.id, (answers.get(s.id) ?? 0) + 1);
+      failures.delete(s.id);
+      out3.answered.push(s.id);
+      continue;
+    }
+    if (chain.failed) failures.set(s.id, (failures.get(s.id) ?? 0) + 1);
+    skip(chain.reason);
+  }
+  return out3;
+}
+async function runChain(s, agent, deps) {
+  let acted = false;
+  for (let step = 0; step < MAX_CHAIN_STEPS; step++) {
+    const text = deps.pane(s.id);
+    const screen = readDialogScreen(text);
+    if (screen?.kind === "review") {
+      if (!await deps.submit(s.id))
+        return { acted, done: false, failed: true, reason: "gagal menekan Submit answers" };
+      acted = true;
+      continue;
+    }
+    if (step > 0 && !screen) return { acted, done: true, failed: false, reason: "" };
+    const read = readPaneQuestion(text, agent);
+    if (!read.asking) {
+      return step === 0 ? { acted, done: false, failed: false, reason: read.reason } : { acted, done: true, failed: false, reason: "" };
+    }
     const notes = [`Sesi ini menunggu di terminal; teks di bawah adalah layar terakhirnya. Jawablah sebagai masukan yang bisa langsung diketik ke terminal itu (isi \`reply\`).`];
     if (read.choices.length) {
       notes.push("Layarnya adalah dialog pilihan. `reply` akan dimasukkan sebagai JAWABAN BEBAS ke dialog itu, jadi tulislah jawaban yang berdiri sendiri \u2014 sebut opsi yang kamu pilih beserta alasan singkatnya, bukan nomornya saja.");
     }
+    if (screen?.kind === "question" && screen.tabs.length > 1) {
+      const at = screen.tabs.findIndex((t) => !t.answered);
+      notes.push(
+        `Dialog ini BERANTAI: ${screen.tabs.length} pertanyaan dalam satu tanya (${screen.tabs.map((t) => `${t.answered ? "sudah" : "belum"}: ${t.header}`).join(", ")}). Yang sedang tampil pertanyaan ke-${at + 1}; jawab HANYA pertanyaan itu \u2014 sisanya akan ditanyakan sesudah ini.`
+      );
+    }
     const row = await deps.decide({
       projectId: s.projectId,
       specId: s.specId,
@@ -23070,26 +23373,32 @@ async function scanAndAnswer(deps = prodDetectDeps) {
       options: read.choices.length ? read.choices : void 0,
       notes
     }, deps.decideDeps);
-    if (!row || row.status !== "berlaku") {
-      skip("lead tak menghasilkan keputusan yang berlaku");
-      continue;
-    }
+    if (!row) return { acted, done: false, failed: false, reason: "lead tak menghasilkan keputusan yang berlaku" };
+    if (row.status !== "berlaku")
+      return { acted, done: false, failed: true, reason: "lead tak menghasilkan keputusan yang berlaku" };
     const reply = takeReply(row.id) || row.answer;
-    const sent = await deps.send(s.id, reply);
-    if (!sent) {
-      skip("gagal mengetik ke pane");
-      continue;
-    }
-    deps.clearMarker(s.decisionFile);
-    answers.set(s.id, (answers.get(s.id) ?? 0) + 1);
-    out3.answered.push(s.id);
+    if (!await deps.send(s.id, reply))
+      return { acted, done: false, failed: true, reason: "gagal mengetik ke pane" };
+    acted = true;
+    if (!screen) return { acted, done: true, failed: false, reason: "" };
+    if (!await waitScreenChange(s.id, dialogKey(text), deps))
+      return { acted, done: false, failed: true, reason: "layar dialog tak berubah sesudah dijawab" };
   }
-  return out3;
+  return { acted, done: false, failed: true, reason: "batas langkah rantai dialog tercapai" };
+}
+async function waitScreenChange(id, before, deps) {
+  for (let i = 0; i < CHAIN_POLL_TRIES; i++) {
+    await deps.sleep(CHAIN_POLL_MS);
+    if (dialogKey(deps.pane(id)) !== before) return true;
+  }
+  return false;
 }
 function sweep(liveIds) {
   const live = new Set(liveIds);
   for (const id of [...answers.keys()]) if (!live.has(id)) answers.delete(id);
   for (const id of [...capped]) if (!live.has(id)) capped.delete(id);
+  for (const id of [...failures.keys()]) if (!live.has(id)) failures.delete(id);
+  for (const id of [...failCapped]) if (!live.has(id)) failCapped.delete(id);
 }
 
 // src/services/lead/pulse.ts
@@ -23715,6 +24024,414 @@ async function custom_agents_default(app2) {
   });
 }
 
+// src/routes/github-issues.ts
+init_zod();
+init_db();
+
+// src/services/github-issues.ts
+init_db();
+
+// src/services/github-repo.ts
+init_db();
+function parse2(url2) {
+  const u = url2.trim();
+  let m = /^git@([^:]+):([^/]+)\/(.+?)(?:\.git)?$/.exec(u);
+  if (!m) m = /^https?:\/\/(?:[^@/]+@)?([^/]+)\/([^/]+)\/(.+?)(?:\.git)?\/?$/.exec(u);
+  if (!m || !m[1] || !m[2] || !m[3]) return null;
+  return { host: m[1], owner: m[2], repo: m[3] };
+}
+function githubSlugFromUrl(url2) {
+  const p = parse2(url2);
+  if (!p || !p.host.includes("github.")) return null;
+  return { owner: p.owner, repo: p.repo, slug: `${p.owner}/${p.repo}` };
+}
+async function resolveGithubRepo(projectId) {
+  const project = await prisma.project.findUnique({ where: { id: projectId } });
+  if (!project) return { ok: false, kind: "no-project", error: `project "${projectId}" tidak ada` };
+  const candidates = [];
+  if (project.gitRemote) candidates.push(project.gitRemote);
+  const repoDir = await resolveRepoDir(projectId).catch(() => null);
+  if (repoDir) {
+    const origin = (await listRemotes(repoDir)).find((r) => r.name === "origin");
+    if (origin?.fetch) candidates.push(origin.fetch);
+  }
+  if (candidates.length === 0)
+    return {
+      ok: false,
+      kind: "no-remote",
+      error: "project belum punya remote GitHub (isi gitRemote atau tambahkan origin di repo lokalnya)"
+    };
+  for (const url2 of candidates) {
+    const gh = githubSlugFromUrl(url2);
+    if (gh) return { ok: true, repo: gh };
+  }
+  const host2 = parse2(candidates[0])?.host ?? candidates[0];
+  return {
+    ok: false,
+    kind: "not-github",
+    error: `remote project ber-host "${host2}", bukan GitHub \u2014 tarik issue hanya mendukung GitHub`
+  };
+}
+
+// src/services/github-fetch.ts
+init_config2();
+import { execFile as execFile10 } from "node:child_process";
+var labelNames = (l) => (l ?? []).map((x) => typeof x === "string" ? x : x.name ?? "").filter(Boolean);
+var norm = (s) => s.toLowerCase() === "closed" ? "closed" : "open";
+function issueFromGh(raw) {
+  return {
+    number: raw.number,
+    title: raw.title,
+    body: raw.body ?? "",
+    authorLogin: raw.author?.login ?? "",
+    labels: labelNames(raw.labels),
+    url: raw.url,
+    issueState: norm(raw.state),
+    issueCreatedAt: raw.createdAt,
+    issueUpdatedAt: raw.updatedAt
+  };
+}
+function issuesFromRest(raw) {
+  let skippedPullRequests = 0;
+  const issues = [];
+  for (const r of raw) {
+    if (r.pull_request !== void 0) {
+      skippedPullRequests++;
+      continue;
+    }
+    issues.push({
+      number: r.number,
+      title: r.title,
+      body: r.body ?? "",
+      authorLogin: r.user?.login ?? "",
+      labels: labelNames(r.labels),
+      url: r.html_url,
+      issueState: norm(r.state),
+      issueCreatedAt: r.created_at,
+      issueUpdatedAt: r.updated_at
+    });
+  }
+  return { issues, skippedPullRequests };
+}
+var GH_FIELDS = "number,title,body,author,labels,url,state,createdAt,updatedAt";
+var API2 = "https://api.github.com";
+var defaultRunGh = (args, env) => new Promise((resolve14, reject) => {
+  execFile10(
+    args[0],
+    args.slice(1),
+    { env, maxBuffer: 1 << 26, encoding: "utf8", timeout: 6e4 },
+    (err, stdout, stderr) => {
+      const e = err;
+      if (e && (e.code === "ENOENT" || e.code === "EACCES")) return reject(e);
+      resolve14({ code: err ? Number(err.code ?? 1) : 0, stdout, stderr });
+    }
+  );
+});
+var defaultHttpGet = async (url2, headers) => {
+  const res = await fetch(url2, {
+    headers: { Accept: "application/vnd.github+json", "User-Agent": "hanoman", ...headers }
+  });
+  const json = await res.json().catch(() => null);
+  return { status: res.status, json };
+};
+function classifyGhStderr(stderr) {
+  const s = stderr.toLowerCase();
+  if (s.includes("gh auth login") || s.includes("bad credentials") || s.includes("http 401")) return "unauth";
+  if (s.includes("disabled issues")) return "issues-disabled";
+  if (s.includes("could not resolve to a repository") || s.includes("http 404")) return "not-found";
+  return "other";
+}
+async function viaGh(repo, opts, deps) {
+  const bin = deps.ghBin ?? effectiveStr("HANOMAN_GH_BIN") ?? "gh";
+  const args = [
+    bin,
+    "issue",
+    "list",
+    "--repo",
+    repo.slug,
+    "--state",
+    opts.state,
+    "--limit",
+    String(opts.limit),
+    "--json",
+    GH_FIELDS
+  ];
+  const env = { ...process.env };
+  if (deps.token) env.GH_TOKEN = deps.token;
+  let out3;
+  try {
+    out3 = await (deps.runGh ?? defaultRunGh)(args, env);
+  } catch {
+    return { fallback: true, reason: "gh tak terpasang" };
+  }
+  if (out3.code !== 0) {
+    const kind = classifyGhStderr(out3.stderr);
+    if (kind === "unauth") return { fallback: true, reason: "gh tak terautentikasi" };
+    return { ok: false, kind, error: out3.stderr.trim() || `gh keluar dengan kode ${out3.code}` };
+  }
+  let raw;
+  try {
+    raw = JSON.parse(out3.stdout || "[]");
+  } catch {
+    return { ok: false, kind: "other", error: "keluaran gh bukan JSON" };
+  }
+  return { ok: true, issues: raw.map(issueFromGh), via: "gh", skippedPullRequests: 0 };
+}
+async function viaRest(repo, opts, deps) {
+  const get = deps.httpGet ?? defaultHttpGet;
+  const headers = {};
+  if (deps.token) headers.Authorization = `Bearer ${deps.token}`;
+  const meta = await get(`${API2}/repos/${repo.slug}`, headers);
+  if (meta.status === 404)
+    return { ok: false, kind: "not-found", error: `repo "${repo.slug}" tak ditemukan atau tak terjangkau` };
+  if (meta.status === 401 || meta.status === 403)
+    return { ok: false, kind: "unauthorized", error: "GitHub menolak kredensial \u2014 isi GITHUB_TOKEN di Settings" };
+  if (meta.status !== 200) return { ok: false, kind: "other", error: `GitHub menjawab HTTP ${meta.status}` };
+  if (meta.json?.has_issues === false)
+    return { ok: false, kind: "issues-disabled", error: `repo "${repo.slug}" mematikan fitur issue` };
+  const issues = [];
+  let skippedPullRequests = 0;
+  for (let page = 1; issues.length < opts.limit && page <= 10; page++) {
+    const per = Math.min(100, opts.limit - issues.length);
+    const res = await get(
+      `${API2}/repos/${repo.slug}/issues?state=${opts.state}&per_page=${per}&page=${page}`,
+      headers
+    );
+    if (res.status === 404) return { ok: false, kind: "not-found", error: `repo "${repo.slug}" tak ditemukan` };
+    if (res.status === 401 || res.status === 403)
+      return { ok: false, kind: "unauthorized", error: "GitHub menolak kredensial" };
+    if (res.status !== 200) return { ok: false, kind: "other", error: `GitHub menjawab HTTP ${res.status}` };
+    const batch = Array.isArray(res.json) ? res.json : [];
+    if (batch.length === 0) break;
+    const n = issuesFromRest(batch);
+    issues.push(...n.issues);
+    skippedPullRequests += n.skippedPullRequests;
+    if (batch.length < per) break;
+  }
+  return { ok: true, issues: issues.slice(0, opts.limit), via: "rest", skippedPullRequests };
+}
+async function fetchIssues(repo, opts, deps = {}) {
+  const token = deps.token ?? effectiveStr("GITHUB_TOKEN") ?? void 0;
+  const first = await viaGh(repo, opts, { ...deps, token });
+  if (!("fallback" in first)) return first;
+  return viaRest(repo, opts, { ...deps, token });
+}
+
+// src/services/github-issues.ts
+var issueRowId = (projectId, slug, number) => `${projectId}:${slug}#${number}`;
+async function pullIssues(projectId, opts = {}, deps = {}) {
+  const resolved = await resolveGithubRepo(projectId);
+  if (!resolved.ok) return { ok: false, kind: resolved.kind, error: resolved.error };
+  const state = opts.state ?? "open";
+  const limit = Math.min(Math.max(opts.limit ?? 200, 1), 1e3);
+  const got = await fetchIssues(resolved.repo, { state, limit }, deps);
+  if (!got.ok) return { ok: false, kind: got.kind, error: got.error };
+  const slug = resolved.repo.slug;
+  const now = /* @__PURE__ */ new Date();
+  let created = 0, updated = 0;
+  for (const i of got.issues) {
+    const id = issueRowId(projectId, slug, i.number);
+    const exists = await prisma.githubIssue.findUnique({ where: { id }, select: { id: true } });
+    const fresh = {
+      title: i.title,
+      body: i.body,
+      authorLogin: i.authorLogin,
+      labels: i.labels,
+      url: i.url,
+      issueState: i.issueState,
+      issueCreatedAt: new Date(i.issueCreatedAt),
+      issueUpdatedAt: new Date(i.issueUpdatedAt),
+      pulledAt: now
+    };
+    await prisma.githubIssue.upsert({
+      where: { id },
+      create: { id, projectId, repoSlug: slug, number: i.number, status: "new", specId: null, ...fresh },
+      update: fresh
+    });
+    if (exists) updated++;
+    else created++;
+    await notifySynced("githubIssue", id);
+  }
+  return {
+    ok: true,
+    repo: slug,
+    pulled: got.issues.length,
+    created,
+    updated,
+    via: got.via,
+    skippedPullRequests: got.skippedPullRequests
+  };
+}
+
+// src/services/github-accept.ts
+init_src();
+init_db();
+var backlinkOf = (i) => `Dari GitHub issue ${i.repoSlug}#${i.number} (${i.url}).`;
+async function acceptGithubIssue(issue2, opts) {
+  if (issue2.specId) {
+    const spec2 = await prisma.spec.findUnique({ where: { id: issue2.specId } });
+    if (spec2) return { spec: spec2, created: false };
+  }
+  const labels = Array.isArray(issue2.labels) ? issue2.labels : [];
+  const source = opts.source ?? sourceForLabels(labels);
+  const priority = opts.priority ?? "sedang";
+  const backlink = backlinkOf(issue2);
+  const detail = `${issue2.body}
+
+Pelapor: @${issue2.authorLogin}
+Label: ${labels.length ? labels.join(", ") : "(tanpa label)"}
+${backlink}`;
+  const payload = source === "qa" ? {
+    severity: "major",
+    steps: "Reproduksi dari deskripsi issue.",
+    expected: "Perilaku yang diharapkan pelapor issue.",
+    actual: detail,
+    env: ""
+  } : { context: detail, outcome: "", constraints: "", priority };
+  const repoDir = await resolveRepoDir(issue2.projectId).catch(() => null);
+  let spec = null;
+  for (let attempt = 0; attempt < 3 && !spec; attempt++) {
+    const sid = await nextSpecId(repoDir);
+    try {
+      spec = await prisma.spec.create({
+        data: {
+          id: sid,
+          projectId: issue2.projectId,
+          title: issue2.title,
+          source,
+          stage: "brainstorming",
+          priority,
+          author: `GitHub \xB7 ${opts.author}`,
+          objective: `${issue2.title}. ${backlink}`,
+          payload
+        }
+      });
+    } catch (e) {
+      if (e.code === "P2002" && attempt < 2) continue;
+      throw e;
+    }
+  }
+  await prisma.githubIssue.update({
+    where: { id: issue2.id },
+    data: { status: "accepted", specId: spec.id }
+  });
+  await notifySynced("spec", spec.id);
+  await notifySynced("githubIssue", issue2.id);
+  return { spec, created: true };
+}
+
+// src/routes/github-issues.ts
+var zPull = external_exports.object({
+  state: external_exports.enum(["open", "all"]).optional(),
+  limit: external_exports.number().int().min(1).max(1e3).optional()
+}).default({});
+var zAccept = external_exports.object({
+  priority: external_exports.enum(["tinggi", "sedang", "rendah"]).optional(),
+  source: external_exports.enum(["qa", "brief", "audit"]).optional()
+}).default({});
+var zAcceptMany = external_exports.object({
+  ids: external_exports.array(external_exports.string().min(1)).min(1).max(100),
+  priority: external_exports.enum(["tinggi", "sedang", "rendah"]).optional(),
+  source: external_exports.enum(["qa", "brief", "audit"]).optional()
+});
+var STATUS = {
+  "no-project": 404,
+  "not-found": 404,
+  "no-remote": 400,
+  "not-github": 400,
+  "issues-disabled": 400,
+  unauthorized: 401,
+  other: 502
+};
+var view7 = (i) => ({
+  id: i.id,
+  projectId: i.projectId,
+  repoSlug: i.repoSlug,
+  number: i.number,
+  title: i.title,
+  body: i.body,
+  authorLogin: i.authorLogin,
+  labels: Array.isArray(i.labels) ? i.labels : [],
+  url: i.url,
+  issueState: i.issueState,
+  status: i.status,
+  specId: i.specId,
+  issueCreatedAt: i.issueCreatedAt.toISOString(),
+  issueUpdatedAt: i.issueUpdatedAt.toISOString(),
+  pulledAt: i.pulledAt.toISOString()
+});
+async function githubIssues(app2) {
+  app2.post("/projects/:id/github/pull", async (req, reply) => {
+    const { id } = req.params;
+    const parsed = zPull.safeParse(req.body ?? {});
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    const r = await pullIssues(id, parsed.data);
+    if (!r.ok) return reply.code(STATUS[r.kind] ?? 400).send({ error: r.error });
+    return reply.code(200).send(r);
+  });
+  app2.get("/projects/:id/github/issues", async (req, reply) => {
+    const { id } = req.params;
+    const { status } = req.query;
+    const project = await prisma.project.findUnique({ where: { id }, select: { id: true } });
+    if (!project) return reply.code(404).send({ error: "not found" });
+    const items = await prisma.githubIssue.findMany({
+      where: { projectId: id, ...status ? { status } : {} },
+      orderBy: [{ number: "desc" }]
+    });
+    return reply.send({ items: items.map(view7) });
+  });
+  app2.post("/github-issues/accept", async (req, reply) => {
+    const parsed = zAcceptMany.safeParse(req.body ?? {});
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    const { ids, priority, source } = parsed.data;
+    const author = req.user?.email ?? "system";
+    const created = [];
+    const failed = [];
+    for (const id of ids) {
+      const issue2 = await prisma.githubIssue.findUnique({ where: { id } });
+      if (!issue2) {
+        failed.push({ id, error: "not found" });
+        continue;
+      }
+      try {
+        created.push((await acceptGithubIssue(issue2, { author, priority, source })).spec);
+      } catch (e) {
+        failed.push({ id, error: e.message });
+      }
+    }
+    return reply.code(201).send({ created, failed });
+  });
+  app2.post("/github-issues/:id/accept", async (req, reply) => {
+    const { id } = req.params;
+    const parsed = zAccept.safeParse(req.body ?? {});
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    const issue2 = await prisma.githubIssue.findUnique({ where: { id } });
+    if (!issue2) return reply.code(404).send({ error: "not found" });
+    const { spec, created } = await acceptGithubIssue(issue2, {
+      author: req.user?.email ?? "system",
+      priority: parsed.data.priority,
+      source: parsed.data.source
+    });
+    return reply.code(created ? 201 : 200).send(created ? { spec } : { spec, alreadyPromoted: true });
+  });
+  app2.post("/github-issues/:id/reject", async (req, reply) => {
+    const { id } = req.params;
+    const issue2 = await prisma.githubIssue.findUnique({ where: { id } });
+    if (!issue2) return reply.code(404).send({ error: "not found" });
+    const row = await prisma.githubIssue.update({ where: { id }, data: { status: "rejected" } });
+    await notifySynced("githubIssue", id);
+    return reply.send({ id: row.id, status: row.status });
+  });
+  app2.post("/github-issues/:id/unlink", async (req, reply) => {
+    const { id } = req.params;
+    const issue2 = await prisma.githubIssue.findUnique({ where: { id } });
+    if (!issue2) return reply.code(404).send({ error: "not found" });
+    const row = await prisma.githubIssue.update({ where: { id }, data: { status: "new", specId: null } });
+    await notifySynced("githubIssue", id);
+    return reply.send({ id: row.id, status: row.status, specId: row.specId });
+  });
+}
+
 // src/app.ts
 var import_multipart = __toESM(require_multipart2(), 1);
 
@@ -23796,7 +24513,7 @@ function cookieOpts() {
 }
 
 // src/routes/auth.ts
-var view7 = (u) => ({ id: u.id, email: u.email, createdAt: u.createdAt.toISOString() });
+var view8 = (u) => ({ id: u.id, email: u.email, createdAt: u.createdAt.toISOString() });
 async function issue(reply, userId) {
   const token = await createSession2(userId);
   reply.setCookie(COOKIE_NAME, token, cookieOpts());
@@ -23814,7 +24531,7 @@ async function auth_default(app2) {
       data: { email: p.data.email, passwordHash: await hashPassword(p.data.password) }
     });
     await issue(reply, user.id);
-    return { user: view7(user) };
+    return { user: view8(user) };
   });
   app2.post("/auth/login", async (req, reply) => {
     if (loginThrottle(req.ip).blocked) return reply.code(429).send({ error: "too many attempts" });
@@ -23827,7 +24544,7 @@ async function auth_default(app2) {
     }
     clearLoginFails(req.ip);
     await issue(reply, user.id);
-    return { user: view7(user) };
+    return { user: view8(user) };
   });
   app2.post("/auth/logout", async (req, reply) => {
     const token = req.cookies?.[COOKIE_NAME];
@@ -23835,7 +24552,7 @@ async function auth_default(app2) {
     reply.clearCookie(COOKIE_NAME, { path: "/" });
     return reply.code(204).send();
   });
-  app2.get("/auth/users", async () => (await prisma.user.findMany({ orderBy: { createdAt: "asc" } })).map(view7));
+  app2.get("/auth/users", async () => (await prisma.user.findMany({ orderBy: { createdAt: "asc" } })).map(view8));
   app2.post("/auth/users", async (req, reply) => {
     const p = zSignup.safeParse(req.body);
     if (!p.success) return reply.code(400).send({ error: p.error.flatten() });
@@ -23844,7 +24561,7 @@ async function auth_default(app2) {
     const user = await prisma.user.create({
       data: { email: p.data.email, passwordHash: await hashPassword(p.data.password) }
     });
-    return view7(user);
+    return view8(user);
   });
   app2.delete("/auth/users/:id", async (req, reply) => {
     if (await prisma.user.count() <= 1) return reply.code(400).send({ error: "tak bisa hapus user terakhir" });
@@ -23864,7 +24581,7 @@ async function auth_default(app2) {
     });
     await deleteUserSessions(user.id);
     await issue(reply, user.id);
-    return { user: view7(user) };
+    return { user: view8(user) };
   });
 }
 
@@ -23943,15 +24660,15 @@ async function agent_tokens_default(app2) {
   app2.post("/agent-tokens", async (req, reply) => {
     const p = zAgentTokenCreate.safeParse(req.body);
     if (!p.success) return reply.code(400).send({ error: p.error.flatten() });
-    const { view: view8, token } = await issueAgentToken({ ...p.data, createdBy: req.user?.id });
-    return reply.code(201).send({ ...view8, token });
+    const { view: view9, token } = await issueAgentToken({ ...p.data, createdBy: req.user?.id });
+    return reply.code(201).send({ ...view9, token });
   });
   app2.patch("/agent-tokens/:id", async (req, reply) => {
     const p = zAgentTokenPatch.safeParse(req.body);
     if (!p.success) return reply.code(400).send({ error: p.error.flatten() });
     const { id } = req.params;
-    const view8 = await patchAgentToken(id, p.data);
-    return view8 ? reply.send(view8) : reply.code(404).send({ error: "not found" });
+    const view9 = await patchAgentToken(id, p.data);
+    return view9 ? reply.send(view9) : reply.code(404).send({ error: "not found" });
   });
   app2.delete("/agent-tokens/:id", async (req, reply) => {
     const { id } = req.params;
@@ -24004,6 +24721,7 @@ function capabilityForRoute(method, path) {
   if (top === "specs") return rw("backlog");
   if (top === "notifications") return rw("notifications");
   if (top === "tickets") return rw("support");
+  if (top === "github-issues") return rw("support");
   if (top === "vps") return rw("vps");
   if (top === "prds") return rw("docs");
   if (top === "terminal") {
@@ -24013,6 +24731,7 @@ function capabilityForRoute(method, path) {
   if (top === "projects") {
     const sub = seg[2];
     if (sub === "docs" || sub === "prds") return rw("docs");
+    if (sub === "github") return rw("support");
     if (sub && IDE_SUBS.has(sub)) return rw("ide");
     return rw("projects");
   }
@@ -24107,6 +24826,7 @@ function buildApp({ requireAuth = true } = {}) {
     await api.register(codex);
     await api.register(lead_default);
     await api.register(custom_agents_default);
+    await api.register(githubIssues);
   }, { prefix: "/api" });
   if (process.env.NODE_ENV === "production") {
     const dist = pickWebDir(dirname12(fileURLToPath4(import.meta.url)), process.env, existsSync11);