hanoman 0.1.9 → 0.1.11

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.9",
-  "sha": "fbea930",
-  "builtAt": "2026-07-31T23:44:47.571Z"
+  "version": "0.1.11",
+  "sha": "2ad97cf",
+  "builtAt": "2026-08-01T07:44:18.428Z"
 }

package/dist/cli.js

@@ -4281,6 +4281,105 @@ var init_enums = __esm({
   }
 });
 
+// ../shared/src/telegram.ts
+var zTelegramSettings, TELEGRAM_DEFAULTS, zTelegramReadiness, zTelegramGatewayStatus, zTelegramMemoryRecord, zTelegramChatContext, TELEGRAM_REPLY_KINDS, zTelegramReplyKind, zTelegramConfirmationRequest, zTelegramReplyInput, zTelegramAuditRecord, zTerminalSteerInput;
+var init_telegram = __esm({
+  "../shared/src/telegram.ts"() {
+    "use strict";
+    init_zod();
+    init_enums();
+    zTelegramSettings = external_exports.object({
+      enabled: external_exports.boolean().default(false),
+      progress: external_exports.boolean().default(true)
+    });
+    TELEGRAM_DEFAULTS = zTelegramSettings.parse({});
+    zTelegramReadiness = external_exports.enum([
+      "disabled",
+      "misconfigured",
+      "ready",
+      "running",
+      "error"
+    ]);
+    zTelegramGatewayStatus = external_exports.object({
+      configured: external_exports.boolean(),
+      enabled: external_exports.boolean(),
+      running: external_exports.boolean(),
+      readiness: zTelegramReadiness,
+      botUsername: external_exports.string().min(1).nullable().default(null),
+      allowlistCount: external_exports.number().int().min(0),
+      agentTokenConfigured: external_exports.boolean(),
+      missingCapabilities: external_exports.array(external_exports.string()).default([]),
+      lastUpdateAt: external_exports.string().datetime().nullable().default(null),
+      lastError: external_exports.string().nullable().default(null)
+    });
+    zTelegramMemoryRecord = external_exports.object({
+      id: external_exports.string().min(1),
+      chatId: external_exports.string().min(1),
+      content: external_exports.string().trim().min(1).max(1e3),
+      createdAt: external_exports.string().datetime(),
+      updatedAt: external_exports.string().datetime()
+    });
+    zTelegramChatContext = external_exports.object({
+      chatId: external_exports.string().min(1),
+      userId: external_exports.string().min(1),
+      sessionId: external_exports.string().nullable(),
+      activeProjectId: external_exports.string().nullable(),
+      activeSessionId: external_exports.string().nullable(),
+      personalityAgentId: external_exports.string().nullable(),
+      summary: external_exports.string().max(4e3).nullable(),
+      agent: zAgent,
+      model: external_exports.string().min(1),
+      effort: external_exports.string().min(1),
+      memories: external_exports.array(zTelegramMemoryRecord)
+    });
+    TELEGRAM_REPLY_KINDS = [
+      "progress",
+      "final",
+      "decision",
+      "failure",
+      "confirmation"
+    ];
+    zTelegramReplyKind = external_exports.enum(TELEGRAM_REPLY_KINDS);
+    zTelegramConfirmationRequest = external_exports.object({
+      description: external_exports.string().trim().min(1).max(500),
+      method: external_exports.enum(["POST", "PATCH", "PUT", "DELETE"]),
+      path: external_exports.string().startsWith("/api/").max(1e3)
+    });
+    zTelegramReplyInput = external_exports.object({
+      chatId: external_exports.string().min(1),
+      updateId: external_exports.number().int().nonnegative(),
+      kind: zTelegramReplyKind,
+      text: external_exports.string().trim().min(1).max(12e3),
+      summary: external_exports.string().trim().min(1).max(4e3).optional(),
+      remember: external_exports.array(external_exports.string().trim().min(1).max(1e3)).max(20).optional(),
+      confirmation: zTelegramConfirmationRequest.optional()
+    }).superRefine((value, ctx) => {
+      if (value.kind === "confirmation" && !value.confirmation) {
+        ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["confirmation"], message: "confirmation required" });
+      }
+      if (value.kind !== "confirmation" && value.confirmation) {
+        ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["confirmation"], message: "confirmation only valid for confirmation replies" });
+      }
+    });
+    zTelegramAuditRecord = external_exports.object({
+      id: external_exports.string().min(1),
+      chatId: external_exports.string().nullable(),
+      userId: external_exports.string().nullable(),
+      updateId: external_exports.number().int().nonnegative().nullable(),
+      action: external_exports.string().min(1),
+      outcome: external_exports.string().min(1),
+      correlationId: external_exports.string().nullable(),
+      method: external_exports.string().nullable(),
+      path: external_exports.string().nullable(),
+      statusCode: external_exports.number().int().nullable(),
+      createdAt: external_exports.string().datetime()
+    });
+    zTerminalSteerInput = external_exports.object({
+      text: external_exports.string().trim().min(1).max(16e3)
+    });
+  }
+});
+
 // ../shared/src/entities.ts
 var zProject, zBriefPayload, zQaPayload, zGoalPayload, zSpecBlocker, zSpec, NOTIFY_SOUNDS, zCodex, CODEX_DEFAULTS, zSourceCommon, zScheduler, SCHEDULER_DEFAULTS, zGoal, GOAL_DEFAULTS, zConflict, CONFLICT_DEFAULTS, zLeadEngine, zLead, LEAD_DEFAULTS, zSetting, zNotification, zDocFile, zDeviceTokenView;
 var init_entities = __esm({
@@ -4288,6 +4387,7 @@ var init_entities = __esm({
     "use strict";
     init_zod();
     init_enums();
+    init_telegram();
     zProject = external_exports.object({
       id: external_exports.string(),
       name: external_exports.string(),
@@ -4462,8 +4562,10 @@ var init_entities = __esm({
       // SPEC-376 · ADR-0080 · scope verifikasi sesi
       conflict: zConflict.default(CONFLICT_DEFAULTS),
       // SPEC-383 · ADR-0081 · default sesi konflik rebase/merge
-      lead: zLead.default(LEAD_DEFAULTS)
+      lead: zLead.default(LEAD_DEFAULTS),
       // SPEC-409 · ADR-0091 · hanoman-lead (default mati)
+      telegram: zTelegramSettings.default(TELEGRAM_DEFAULTS)
+      // SPEC-476 · ADR-0096 · gateway Telegram (default mati)
     });
     zNotification = external_exports.object({
       id: external_exports.string(),
@@ -4532,7 +4634,11 @@ var init_agent = __esm({
       // definisi agen mengubah apa yang dilihat SETIAP sesi baru di seluruh workspace, jadi izin
       // baca tak pernah cukup untuk itu (kelas bug SPEC-405).
       "agents:read",
-      "agents:write"
+      "agents:write",
+      // SPEC-476 · ADR-0096 · context/memory/reply/audit kanal Telegram. Aksi produk tetap memakai
+      // capability domain produk masing-masing; domain ini tidak memberi akses shell atau sesi.
+      "telegram:read",
+      "telegram:write"
     ];
     zCapability = external_exports.enum(CAPABILITY_IDS);
     zCapabilityInfo = external_exports.object({
@@ -4600,6 +4706,36 @@ var init_custom_agent = __esm({
   }
 });
 
+// ../shared/src/github.ts
+var zGithubIssueStatus, zNormalIssue, zGithubIssueView;
+var init_github = __esm({
+  "../shared/src/github.ts"() {
+    "use strict";
+    init_zod();
+    zGithubIssueStatus = external_exports.enum(["new", "accepted", "rejected"]);
+    zNormalIssue = external_exports.object({
+      number: external_exports.number().int().positive(),
+      title: external_exports.string(),
+      body: external_exports.string(),
+      authorLogin: external_exports.string(),
+      labels: external_exports.array(external_exports.string()),
+      url: external_exports.string(),
+      issueState: external_exports.enum(["open", "closed"]),
+      issueCreatedAt: external_exports.string(),
+      // ISO-8601 apa adanya dari GitHub
+      issueUpdatedAt: external_exports.string()
+    });
+    zGithubIssueView = zNormalIssue.extend({
+      id: external_exports.string(),
+      projectId: external_exports.string(),
+      repoSlug: external_exports.string(),
+      status: zGithubIssueStatus,
+      specId: external_exports.string().nullable(),
+      pulledAt: external_exports.string()
+    });
+  }
+});
+
 // ../shared/src/lead.ts
 var zLeadGate, zLeadKind, zLeadConfidence, zLeadStatus, LEAD_ACTIONS, zLeadAction, zLeadVerdict, zLeadAsk, zLeadOverride;
 var init_lead = __esm({
@@ -5135,6 +5271,8 @@ var init_api = __esm({
       fsBrowse: (path) => `${API}/fs/browse${path ? `?path=${encodeURIComponent(path)}` : ""}`,
       terminalSessions: `${API}/terminal/sessions`,
       terminalSession: (id) => `${API}/terminal/sessions/${id}`,
+      terminalSteer: (id) => `${API}/terminal/sessions/${id}/steer`,
+      terminalInterrupt: (id) => `${API}/terminal/sessions/${id}/interrupt`,
       terminalPhases: (id) => `${API}/terminal/sessions/${id}/phases`,
       // SPEC-230 · review + integrate ber-skop sesi (sesi project-level PRD, tanpa Spec).
       sessionReview: (id) => `${API}/terminal/sessions/${id}/review`,
@@ -5189,6 +5327,13 @@ var init_api = __esm({
       // SPEC-450 · ADR-0094 · katalog custom agent. `?projectId=` → himpunan EFEKTIF (global+project).
       customAgents: `${API}/custom-agents`,
       customAgent: (id) => `${API}/custom-agents/${encodeURIComponent(id)}`,
+      // SPEC-476 · ADR-0096 · observability/context/reply kanal Telegram.
+      telegramStatus: `${API}/telegram/status`,
+      telegramContext: (chatId) => `${API}/telegram/chats/${encodeURIComponent(chatId)}/context`,
+      telegramMemories: (chatId) => `${API}/telegram/chats/${encodeURIComponent(chatId)}/memories`,
+      telegramMemory: (chatId, id) => `${API}/telegram/chats/${encodeURIComponent(chatId)}/memories/${encodeURIComponent(id)}`,
+      telegramReplies: `${API}/telegram/replies`,
+      telegramAudit: `${API}/telegram/audit`,
       // SPEC-268 · ADR-0066 · pemicu sync manual (cookie-authed)
       syncNow: `${API}/sync/now`,
       // SPEC-270 · ADR-0067 · antrean konflik rekonsil (cookie-authed)
@@ -5211,6 +5356,14 @@ var init_api = __esm({
       ticketUnlink: (id) => `${API}/tickets/${id}/unlink`,
       // SPEC-271 · lepas tautan backlog
       ticketReject: (id) => `${API}/tickets/${id}/reject`,
+      // SPEC-471 · ADR-0095 · tarik & triase issue GitHub (di belakang gate cookie, capability `support`).
+      // hanoman TIDAK PERNAH menulis ke GitHub — tak ada path komentar/close di sini, dan itu disengaja.
+      githubPull: (id) => `${API}/projects/${encodeURIComponent(id)}/github/pull`,
+      githubIssues: (id) => `${API}/projects/${encodeURIComponent(id)}/github/issues`,
+      githubIssuesAccept: `${API}/github-issues/accept`,
+      githubIssueAccept: (id) => `${API}/github-issues/${encodeURIComponent(id)}/accept`,
+      githubIssueReject: (id) => `${API}/github-issues/${encodeURIComponent(id)}/reject`,
+      githubIssueUnlink: (id) => `${API}/github-issues/${encodeURIComponent(id)}/unlink`,
       // SPEC-361 · ADR-0078 · unduh dokumen: query ditempelkan ke URL endpoint dokumen yang sudah ada
       // (tak ada endpoint ekspor terpisah). `base` bisa sudah membawa query, mis. ideFile(?path=…).
       download: (base, fmt) => `${base}${base.includes("?") ? "&" : "?"}download=${fmt}`
@@ -5293,7 +5446,8 @@ var init_session_kind = __esm({
       "vps",
       "shell",
       "worktree",
-      "terminal"
+      "terminal",
+      "telegram"
     ];
     zSessionKind = external_exports.enum(SESSION_KINDS);
   }
@@ -5373,6 +5527,28 @@ var init_config_registry = __esm({
       // vps
       { key: "HANOMAN_SSH_KEY_DIR", group: "vps", label: "Dir key SSH", kind: "path", apply: "new-session", category: "knob", help: "Default ~/.hanoman." },
       { key: "HANOMAN_SSH_BIN", group: "vps", label: "Biner ssh", kind: "path", apply: "new-session", category: "knob", default: "ssh" },
+      // github (SPEC-471 · ADR-0095 · tarik issue → backlog). Dua mode auth, satu jalur kode:
+      // `gh` memakai keyring mesin; bila GITHUB_TOKEN diisi ia diteruskan sebagai GH_TOKEN ke
+      // proses gh DAN dipakai jalur REST (hub VPS yang tak punya keyring).
+      {
+        key: "GITHUB_TOKEN",
+        group: "github",
+        label: "GitHub token",
+        kind: "secret",
+        apply: "live",
+        category: "credential",
+        help: "PAT scope `repo` (atau `public_repo`). Kosong = andalkan `gh auth login` di mesin ini."
+      },
+      {
+        key: "HANOMAN_GH_BIN",
+        group: "github",
+        label: "Biner gh",
+        kind: "path",
+        apply: "live",
+        category: "knob",
+        default: "gh",
+        help: "Absen = tarik issue lewat HTTPS langsung ke api.github.com."
+      },
       // runtime
       { key: "HANOMAN_EVENTS_TICK_MS", group: "runtime", label: "Interval events (ms)", kind: "int", apply: "live", category: "knob", default: "1000", min: 100 },
       { key: "HANOMAN_UPDATE_FETCH", group: "runtime", label: "Deteksi update saat boot", kind: "bool", apply: "live", category: "knob", default: "1" },
@@ -5465,6 +5641,7 @@ var init_src = __esm({
     init_entities();
     init_agent();
     init_custom_agent();
+    init_github();
     init_lead();
     init_dto();
     init_api();
@@ -5474,6 +5651,7 @@ var init_src = __esm({
     init_config();
     init_config_registry();
     init_semver();
+    init_telegram();
   }
 });
 
@@ -5542,6 +5720,13 @@ var init_paths = __esm({
   }
 });
 
+// ../runner/src/telegram-operator.ts
+var init_telegram_operator = __esm({
+  "../runner/src/telegram-operator.ts"() {
+    "use strict";
+  }
+});
+
 // ../runner/src/index.ts
 var init_src2 = __esm({
   "../runner/src/index.ts"() {
@@ -5558,6 +5743,7 @@ var init_src2 = __esm({
     init_custom_agents();
     init_verify_scope();
     init_paths();
+    init_telegram_operator();
   }
 });
 
@@ -5960,6 +6146,12 @@ function doctorReport(p) {
     { mark: p.tmux ? "\u2713" : "\u2717", text: p.tmux ?? "tmux \u2014 TAK ADA (wajib: sesi agen hidup di tmux)", fatal: !p.tmux },
     { mark: p.claude ? "\u2713" : "\xB7", text: p.claude ? `claude ${p.claude}` : "claude \u2014 tak ada", fatal: false },
     { mark: p.codex ? "\u2713" : "\xB7", text: p.codex ? `codex ${p.codex}` : "codex \u2014 tak ada", fatal: false },
+    // SPEC-471 · ADR-0095 · `gh` opsional: tanpa dia tarik issue jatuh ke HTTPS + GITHUB_TOKEN.
+    {
+      mark: p.gh ? "\u2713" : "\xB7",
+      text: p.gh ? `gh ${p.gh}` : "gh \u2014 tak ada (tarik issue akan lewat HTTP + GITHUB_TOKEN)",
+      fatal: false
+    },
     { mark: p.homeWritable ? "\u2713" : "\u2717", text: `data dir ${p.homeWritable ? "bisa ditulis" : "TAK bisa ditulis"}`, fatal: !p.homeWritable },
     { mark: p.web ? "\u2713" : "!", text: p.web ? "aset dashboard ada" : "aset dashboard tak ada \u2014 API jalan, dashboard tidak", fatal: false },
     { mark: "\xB7", text: `db ${p.db}`, fatal: false }
@@ -6000,6 +6192,7 @@ async function doctor(_argv, ctx) {
     tmux: version("tmux", ["-V"]),
     claude: version(ctx.env.HANOMAN_CLAUDE_BIN ?? "claude", ["--version"]),
     codex: version(ctx.env.HANOMAN_CODEX_BIN ?? "codex", ["--version"]),
+    gh: version(ctx.env.HANOMAN_GH_BIN ?? "gh", ["--version"]),
     homeWritable,
     web: layout.web !== null,
     db
@@ -6203,8 +6396,21 @@ var init_migrate_pg = __esm({
       "SchedulerQueueItem",
       "RuntimeConfig",
       "LeadDecision",
+      // SPEC-476 · ADR-0096 · tabel gateway LOCAL-only; sumber Postgres lama lazimnya tidak punya
+      // tabel ini dan jalur 42P01 di bawah memperlakukannya sebagai nol baris.
+      "TelegramGatewayState",
+      "TelegramChat",
+      "TelegramUpdate",
+      "TelegramMemory",
+      "TelegramOutbox",
+      "TelegramConfirmation",
+      "TelegramAudit",
       "Ticket",
-      "TicketAttachment"
+      "TicketAttachment",
+      // SPEC-471 · ADR-0095 · GithubIssue sesudah Project (FK projectId) DAN sesudah Spec: `specId`
+      // memang tanpa FK, tapi memindahkannya lebih awal membuat urutan tabel tak lagi mencerminkan
+      // arah tautannya bagi pembaca berikutnya.
+      "GithubIssue"
     ];
     CHUNK = 200;
     INT8_OID = 20;