hanoman 0.1.9 → 0.1.11

package/dist/server.js

@@ -617,10 +617,10 @@ function isValidJWT(jwt, alg) {
   if (!jwtRegex.test(jwt))
     return false;
   try {
-    const [header] = jwt.split(".");
-    if (!header)
+    const [header2] = jwt.split(".");
+    if (!header2)
       return false;
-    const base64 = header.replace(/-/g, "+").replace(/_/g, "/").padEnd(header.length + (4 - header.length % 4) % 4, "=");
+    const base64 = header2.replace(/-/g, "+").replace(/_/g, "/").padEnd(header2.length + (4 - header2.length % 4) % 4, "=");
     const decoded = JSON.parse(atob(base64));
     if (typeof decoded !== "object" || decoded === null)
       return false;
@@ -4164,6 +4164,105 @@ var init_enums = __esm({
   }
 });
 
+// ../shared/src/telegram.ts
+var zTelegramSettings, TELEGRAM_DEFAULTS, zTelegramReadiness, zTelegramGatewayStatus, zTelegramMemoryRecord, zTelegramChatContext, TELEGRAM_REPLY_KINDS, zTelegramReplyKind, zTelegramConfirmationRequest, zTelegramReplyInput, zTelegramAuditRecord, zTerminalSteerInput;
+var init_telegram = __esm({
+  "../shared/src/telegram.ts"() {
+    "use strict";
+    init_zod();
+    init_enums();
+    zTelegramSettings = external_exports.object({
+      enabled: external_exports.boolean().default(false),
+      progress: external_exports.boolean().default(true)
+    });
+    TELEGRAM_DEFAULTS = zTelegramSettings.parse({});
+    zTelegramReadiness = external_exports.enum([
+      "disabled",
+      "misconfigured",
+      "ready",
+      "running",
+      "error"
+    ]);
+    zTelegramGatewayStatus = external_exports.object({
+      configured: external_exports.boolean(),
+      enabled: external_exports.boolean(),
+      running: external_exports.boolean(),
+      readiness: zTelegramReadiness,
+      botUsername: external_exports.string().min(1).nullable().default(null),
+      allowlistCount: external_exports.number().int().min(0),
+      agentTokenConfigured: external_exports.boolean(),
+      missingCapabilities: external_exports.array(external_exports.string()).default([]),
+      lastUpdateAt: external_exports.string().datetime().nullable().default(null),
+      lastError: external_exports.string().nullable().default(null)
+    });
+    zTelegramMemoryRecord = external_exports.object({
+      id: external_exports.string().min(1),
+      chatId: external_exports.string().min(1),
+      content: external_exports.string().trim().min(1).max(1e3),
+      createdAt: external_exports.string().datetime(),
+      updatedAt: external_exports.string().datetime()
+    });
+    zTelegramChatContext = external_exports.object({
+      chatId: external_exports.string().min(1),
+      userId: external_exports.string().min(1),
+      sessionId: external_exports.string().nullable(),
+      activeProjectId: external_exports.string().nullable(),
+      activeSessionId: external_exports.string().nullable(),
+      personalityAgentId: external_exports.string().nullable(),
+      summary: external_exports.string().max(4e3).nullable(),
+      agent: zAgent,
+      model: external_exports.string().min(1),
+      effort: external_exports.string().min(1),
+      memories: external_exports.array(zTelegramMemoryRecord)
+    });
+    TELEGRAM_REPLY_KINDS = [
+      "progress",
+      "final",
+      "decision",
+      "failure",
+      "confirmation"
+    ];
+    zTelegramReplyKind = external_exports.enum(TELEGRAM_REPLY_KINDS);
+    zTelegramConfirmationRequest = external_exports.object({
+      description: external_exports.string().trim().min(1).max(500),
+      method: external_exports.enum(["POST", "PATCH", "PUT", "DELETE"]),
+      path: external_exports.string().startsWith("/api/").max(1e3)
+    });
+    zTelegramReplyInput = external_exports.object({
+      chatId: external_exports.string().min(1),
+      updateId: external_exports.number().int().nonnegative(),
+      kind: zTelegramReplyKind,
+      text: external_exports.string().trim().min(1).max(12e3),
+      summary: external_exports.string().trim().min(1).max(4e3).optional(),
+      remember: external_exports.array(external_exports.string().trim().min(1).max(1e3)).max(20).optional(),
+      confirmation: zTelegramConfirmationRequest.optional()
+    }).superRefine((value, ctx) => {
+      if (value.kind === "confirmation" && !value.confirmation) {
+        ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["confirmation"], message: "confirmation required" });
+      }
+      if (value.kind !== "confirmation" && value.confirmation) {
+        ctx.addIssue({ code: external_exports.ZodIssueCode.custom, path: ["confirmation"], message: "confirmation only valid for confirmation replies" });
+      }
+    });
+    zTelegramAuditRecord = external_exports.object({
+      id: external_exports.string().min(1),
+      chatId: external_exports.string().nullable(),
+      userId: external_exports.string().nullable(),
+      updateId: external_exports.number().int().nonnegative().nullable(),
+      action: external_exports.string().min(1),
+      outcome: external_exports.string().min(1),
+      correlationId: external_exports.string().nullable(),
+      method: external_exports.string().nullable(),
+      path: external_exports.string().nullable(),
+      statusCode: external_exports.number().int().nullable(),
+      createdAt: external_exports.string().datetime()
+    });
+    zTerminalSteerInput = external_exports.object({
+      text: external_exports.string().trim().min(1).max(16e3)
+    });
+  }
+});
+
 // ../shared/src/entities.ts
 function codexModel(id) {
   return CODEX_MODELS.find((m) => m.id === id);
@@ -4188,6 +4287,7 @@ var init_entities = __esm({
     "use strict";
     init_zod();
     init_enums();
+    init_telegram();
     zProject = external_exports.object({
       id: external_exports.string(),
       name: external_exports.string(),
@@ -4376,8 +4476,10 @@ var init_entities = __esm({
       // SPEC-376 · ADR-0080 · scope verifikasi sesi
       conflict: zConflict.default(CONFLICT_DEFAULTS),
       // SPEC-383 · ADR-0081 · default sesi konflik rebase/merge
-      lead: zLead.default(LEAD_DEFAULTS)
+      lead: zLead.default(LEAD_DEFAULTS),
       // SPEC-409 · ADR-0091 · hanoman-lead (default mati)
+      telegram: zTelegramSettings.default(TELEGRAM_DEFAULTS)
+      // SPEC-476 · ADR-0096 · gateway Telegram (default mati)
     });
     zNotification = external_exports.object({
       id: external_exports.string(),
@@ -4451,7 +4553,11 @@ var init_agent = __esm({
       // definisi agen mengubah apa yang dilihat SETIAP sesi baru di seluruh workspace, jadi izin
       // baca tak pernah cukup untuk itu (kelas bug SPEC-405).
       "agents:read",
-      "agents:write"
+      "agents:write",
+      // SPEC-476 · ADR-0096 · context/memory/reply/audit kanal Telegram. Aksi produk tetap memakai
+      // capability domain produk masing-masing; domain ini tidak memberi akses shell atau sesi.
+      "telegram:read",
+      "telegram:write"
     ];
     zCapability = external_exports.enum(CAPABILITY_IDS);
     zCapabilityInfo = external_exports.object({
@@ -4484,7 +4590,9 @@ var init_agent = __esm({
       { id: "lead:read", domain: "lead", access: "read", label: "Lead \u2014 baca", desc: "Baca jejak keputusan hanoman-lead & statusnya." },
       { id: "lead:write", domain: "lead", access: "write", label: "Lead \u2014 tulis", desc: "Minta putusan ke hanoman-lead (keputusan bisa menggerakkan sesi).", risk: "exec" },
       { id: "agents:read", domain: "agents", access: "read", label: "Custom agent \u2014 baca", desc: "Lihat katalog custom agent global & per project." },
-      { id: "agents:write", domain: "agents", access: "write", label: "Custom agent \u2014 tulis", desc: "Buat/ubah/hapus custom agent; definisinya dipakai setiap sesi baru.", risk: "exec" }
+      { id: "agents:write", domain: "agents", access: "write", label: "Custom agent \u2014 tulis", desc: "Buat/ubah/hapus custom agent; definisinya dipakai setiap sesi baru.", risk: "exec" },
+      { id: "telegram:read", domain: "telegram", access: "read", label: "Telegram \u2014 baca", desc: "Baca status gateway, binding, memory, dan audit Telegram." },
+      { id: "telegram:write", domain: "telegram", access: "write", label: "Telegram \u2014 tulis", desc: "Perbarui context/memory dan terbitkan reply sesi operator Telegram." }
     ];
     zAgentTokenView = external_exports.object({
       id: external_exports.string(),
@@ -4606,6 +4714,47 @@ var init_custom_agent = __esm({
   }
 });
 
+// ../shared/src/github.ts
+function sourceForLabels(labels) {
+  const hay = labels.map((l) => l.toLowerCase());
+  for (const rule2 of LABEL_RULES)
+    if (hay.some((l) => rule2.needles.some((n) => l.includes(n)))) return rule2.source;
+  return "qa";
+}
+var zGithubIssueStatus, zNormalIssue, zGithubIssueView, LABEL_RULES;
+var init_github = __esm({
+  "../shared/src/github.ts"() {
+    "use strict";
+    init_zod();
+    zGithubIssueStatus = external_exports.enum(["new", "accepted", "rejected"]);
+    zNormalIssue = external_exports.object({
+      number: external_exports.number().int().positive(),
+      title: external_exports.string(),
+      body: external_exports.string(),
+      authorLogin: external_exports.string(),
+      labels: external_exports.array(external_exports.string()),
+      url: external_exports.string(),
+      issueState: external_exports.enum(["open", "closed"]),
+      issueCreatedAt: external_exports.string(),
+      // ISO-8601 apa adanya dari GitHub
+      issueUpdatedAt: external_exports.string()
+    });
+    zGithubIssueView = zNormalIssue.extend({
+      id: external_exports.string(),
+      projectId: external_exports.string(),
+      repoSlug: external_exports.string(),
+      status: zGithubIssueStatus,
+      specId: external_exports.string().nullable(),
+      pulledAt: external_exports.string()
+    });
+    LABEL_RULES = [
+      { needles: ["bug", "defect", "regression"], source: "qa" },
+      { needles: ["question", "docs", "documentation"], source: "audit" },
+      { needles: ["enhancement", "feature", "feat"], source: "brief" }
+    ];
+  }
+});
+
 // ../shared/src/lead.ts
 function leadActionAllowed(action) {
   return LEAD_ACTIONS.includes(action);
@@ -5167,6 +5316,8 @@ var init_api = __esm({
       fsBrowse: (path) => `${API}/fs/browse${path ? `?path=${encodeURIComponent(path)}` : ""}`,
       terminalSessions: `${API}/terminal/sessions`,
       terminalSession: (id) => `${API}/terminal/sessions/${id}`,
+      terminalSteer: (id) => `${API}/terminal/sessions/${id}/steer`,
+      terminalInterrupt: (id) => `${API}/terminal/sessions/${id}/interrupt`,
       terminalPhases: (id) => `${API}/terminal/sessions/${id}/phases`,
       // SPEC-230 · review + integrate ber-skop sesi (sesi project-level PRD, tanpa Spec).
       sessionReview: (id) => `${API}/terminal/sessions/${id}/review`,
@@ -5221,6 +5372,13 @@ var init_api = __esm({
       // SPEC-450 · ADR-0094 · katalog custom agent. `?projectId=` → himpunan EFEKTIF (global+project).
       customAgents: `${API}/custom-agents`,
       customAgent: (id) => `${API}/custom-agents/${encodeURIComponent(id)}`,
+      // SPEC-476 · ADR-0096 · observability/context/reply kanal Telegram.
+      telegramStatus: `${API}/telegram/status`,
+      telegramContext: (chatId) => `${API}/telegram/chats/${encodeURIComponent(chatId)}/context`,
+      telegramMemories: (chatId) => `${API}/telegram/chats/${encodeURIComponent(chatId)}/memories`,
+      telegramMemory: (chatId, id) => `${API}/telegram/chats/${encodeURIComponent(chatId)}/memories/${encodeURIComponent(id)}`,
+      telegramReplies: `${API}/telegram/replies`,
+      telegramAudit: `${API}/telegram/audit`,
       // SPEC-268 · ADR-0066 · pemicu sync manual (cookie-authed)
       syncNow: `${API}/sync/now`,
       // SPEC-270 · ADR-0067 · antrean konflik rekonsil (cookie-authed)
@@ -5243,6 +5401,14 @@ var init_api = __esm({
       ticketUnlink: (id) => `${API}/tickets/${id}/unlink`,
       // SPEC-271 · lepas tautan backlog
       ticketReject: (id) => `${API}/tickets/${id}/reject`,
+      // SPEC-471 · ADR-0095 · tarik & triase issue GitHub (di belakang gate cookie, capability `support`).
+      // hanoman TIDAK PERNAH menulis ke GitHub — tak ada path komentar/close di sini, dan itu disengaja.
+      githubPull: (id) => `${API}/projects/${encodeURIComponent(id)}/github/pull`,
+      githubIssues: (id) => `${API}/projects/${encodeURIComponent(id)}/github/issues`,
+      githubIssuesAccept: `${API}/github-issues/accept`,
+      githubIssueAccept: (id) => `${API}/github-issues/${encodeURIComponent(id)}/accept`,
+      githubIssueReject: (id) => `${API}/github-issues/${encodeURIComponent(id)}/reject`,
+      githubIssueUnlink: (id) => `${API}/github-issues/${encodeURIComponent(id)}/unlink`,
       // SPEC-361 · ADR-0078 · unduh dokumen: query ditempelkan ke URL endpoint dokumen yang sudah ada
       // (tak ada endpoint ekspor terpisah). `base` bisa sudah membawa query, mis. ideFile(?path=…).
       download: (base, fmt) => `${base}${base.includes("?") ? "&" : "?"}download=${fmt}`
@@ -5335,7 +5501,8 @@ var init_session_kind = __esm({
       "vps",
       "shell",
       "worktree",
-      "terminal"
+      "terminal",
+      "telegram"
     ];
     zSessionKind = external_exports.enum(SESSION_KINDS);
   }
@@ -5450,6 +5617,28 @@ var init_config_registry = __esm({
       // vps
       { key: "HANOMAN_SSH_KEY_DIR", group: "vps", label: "Dir key SSH", kind: "path", apply: "new-session", category: "knob", help: "Default ~/.hanoman." },
       { key: "HANOMAN_SSH_BIN", group: "vps", label: "Biner ssh", kind: "path", apply: "new-session", category: "knob", default: "ssh" },
+      // github (SPEC-471 · ADR-0095 · tarik issue → backlog). Dua mode auth, satu jalur kode:
+      // `gh` memakai keyring mesin; bila GITHUB_TOKEN diisi ia diteruskan sebagai GH_TOKEN ke
+      // proses gh DAN dipakai jalur REST (hub VPS yang tak punya keyring).
+      {
+        key: "GITHUB_TOKEN",
+        group: "github",
+        label: "GitHub token",
+        kind: "secret",
+        apply: "live",
+        category: "credential",
+        help: "PAT scope `repo` (atau `public_repo`). Kosong = andalkan `gh auth login` di mesin ini."
+      },
+      {
+        key: "HANOMAN_GH_BIN",
+        group: "github",
+        label: "Biner gh",
+        kind: "path",
+        apply: "live",
+        category: "knob",
+        default: "gh",
+        help: "Absen = tarik issue lewat HTTPS langsung ke api.github.com."
+      },
       // runtime
       { key: "HANOMAN_EVENTS_TICK_MS", group: "runtime", label: "Interval events (ms)", kind: "int", apply: "live", category: "knob", default: "1000", min: 100 },
       { key: "HANOMAN_UPDATE_FETCH", group: "runtime", label: "Deteksi update saat boot", kind: "bool", apply: "live", category: "knob", default: "1" },
@@ -5542,6 +5731,7 @@ var init_src = __esm({
     init_entities();
     init_agent();
     init_custom_agent();
+    init_github();
     init_lead();
     init_dto();
     init_api();
@@ -5551,6 +5741,7 @@ var init_src = __esm({
     init_config();
     init_config_registry();
     init_semver();
+    init_telegram();
   }
 });
 
@@ -6425,6 +6616,70 @@ var init_paths = __esm({
   }
 });
 
+// ../runner/src/telegram-operator.ts
+function buildTelegramOperatorPrompt(input) {
+  const personality = input.personality ? [
+    `## Personality aktif: @${input.personality.name}`,
+    input.personality.description,
+    input.personality.instructions
+  ].join("\n\n") : "## Personality aktif\n\nGunakan fondasi custom agent Hanoman bawaan dan gaya operator yang ringkas.";
+  const summary = input.summary?.trim() || "Belum ada ringkasan percakapan tersimpan.";
+  const memories = input.memories?.length ? input.memories.map((memory) => `- ${memory.id}: ${memory.content}`).join("\n") : "- Belum ada curated memory.";
+  const { update: update2 } = input;
+  return [
+    "# Hanoman \xB7 session operator Telegram persisten",
+    "",
+    "Kamu adalah main session operator Hanoman yang persisten untuk satu private chat Telegram.",
+    "Telegram hanya transport. Jangan membuat runtime agent, loop headless, tool bus, shell executor,",
+    "antrean, atau otak/memory kedua. Semua aksi produk harus memakai API/service Hanoman yang sudah ada.",
+    "Ikuti internal/docs sebagai Source of Truth dan capability/pagar server apa adanya.",
+    "",
+    personality,
+    "",
+    "## Context tahan restart",
+    "",
+    `Ringkasan: ${summary}`,
+    "Curated memory:",
+    memories,
+    "",
+    "## Kontrak kanal",
+    "",
+    "- Bahasa natural adalah antarmuka utama; command hanya shortcut yang tetap kamu tangani di sesi ini.",
+    `- Command minimum: ${COMMANDS.join(", ")}.`,
+    `- Panggil API dengan base $HANOMAN_API_BASE, bearer $HANOMAN_TELEGRAM_AGENT_TOKEN, dan header x-hanoman-telegram-update: ${update2.updateId}.`,
+    "- Terbitkan jawaban user-facing secara eksplisit melalui POST $HANOMAN_API_BASE/api/telegram/replies.",
+    "- Kind reply hanya progress|final|decision|failure|confirmation. Jangan mengandalkan layar PTY sebagai balasan.",
+    "- Aksi sulit dibatalkan: terbitkan reply confirmation, tunggu callback approval, baru panggil endpoint aksinya.",
+    "- Jangan pernah kirim internal reasoning, ANSI, echo command, secret, token, env, credential, atau isi file credential.",
+    "- Curated memory dan summary harus kamu kurasi sendiri lewat API context/memory; jangan simpan transcript mentah.",
+    "",
+    "## Input pertama",
+    "",
+    `[Telegram update ${update2.updateId} \xB7 chat ${update2.chatId} \xB7 kind ${update2.kind}]`,
+    update2.text
+  ].join("\n");
+}
+var COMMANDS;
+var init_telegram_operator = __esm({
+  "../runner/src/telegram-operator.ts"() {
+    "use strict";
+    COMMANDS = [
+      "/help",
+      "/status",
+      "/projects",
+      "/project <id>",
+      "/backlog [query]",
+      "/sessions",
+      "/use <session-id>",
+      "/new <brief>",
+      "/stop [session-id]",
+      "/memory [forget <id>|reset]",
+      "/personality [nama|reset]",
+      "/skills"
+    ];
+  }
+});
+
 // ../runner/src/index.ts
 var init_src2 = __esm({
   "../runner/src/index.ts"() {
@@ -6441,6 +6696,7 @@ var init_src2 = __esm({
     init_custom_agents();
     init_verify_scope();
     init_paths();
+    init_telegram_operator();
   }
 });
 
@@ -6568,6 +6824,15 @@ var init_session_phases = __esm({
   }
 });
 
+// src/services/session-id.ts
+var sessionIdForSpec;
+var init_session_id = __esm({
+  "src/services/session-id.ts"() {
+    "use strict";
+    sessionIdForSpec = (specId) => specId.toLowerCase().replace(/[^a-z0-9_-]/g, "_");
+  }
+});
+
 // src/services/tui-dialog.ts
 function readChoiceDialog(paneText2) {
   const lines2 = paneText2.split("\n").map((l) => l.trimEnd());
@@ -6582,7 +6847,7 @@ function readChoiceDialog(paneText2) {
   const found = [];
   for (const line of lines2.slice(0, footer)) {
     const m = ROW.exec(line);
-    if (m) found.push({ n: Number(m[1]), label: (m[2] ?? "").trim() });
+    if (m) found.push({ n: Number(m[1]), label: cleanLabel(m[2] ?? "") });
   }
   if (found.length < 2) return null;
   const run2 = [];
@@ -6606,6 +6871,65 @@ function readChoiceDialog(paneText2) {
     options: rows.filter((r) => !r.free && !r.chat).map((r) => r.label)
   };
 }
+function readTabs(lines2) {
+  for (let i = lines2.length - 1; i >= 0; i--) {
+    const line = lines2[i] ?? "";
+    if (!/[☐☒]/.test(line)) continue;
+    const tabs = [];
+    for (const tok of line.split(/\s{2,}/)) {
+      const m = TAB_BOX.exec(tok.trim());
+      if (m) tabs.push({ header: (m[2] ?? "").trim(), answered: m[1] === "\u2612" });
+    }
+    if (tabs.length) return { tabs, at: i };
+  }
+  return { tabs: [], at: -1 };
+}
+function readTitle(lines2, stripAt, footer) {
+  if (stripAt < 0) return "";
+  for (let i = stripAt + 1; i < footer; i++) {
+    const line = (lines2[i] ?? "").trim();
+    if (!line || RULE.test(line)) continue;
+    return ROW.test(lines2[i] ?? "") ? "" : line;
+  }
+  return "";
+}
+function readReviewScreen(paneText2) {
+  const lines2 = paneText2.split("\n").map((l) => l.trimEnd());
+  const at = lastIndexOf(lines2, REVIEW_PROMPT);
+  if (at < 0) return null;
+  for (const line of lines2.slice(at)) {
+    const m = SUBMIT_ROW.exec(line);
+    if (m) return { submitRow: Number(m[1]) };
+  }
+  return null;
+}
+function readDialogScreen(paneText2) {
+  const lines2 = paneText2.split("\n").map((l) => l.trimEnd());
+  const footer = lastIndexOf(lines2, FOOTER);
+  if (lastIndexOf(lines2, REVIEW_PROMPT) > footer) {
+    const review = readReviewScreen(paneText2);
+    if (review) return { kind: "review", submitRow: review.submitRow };
+  }
+  const d = readChoiceDialog(paneText2);
+  if (!d) return null;
+  const { tabs, at } = readTabs(lines2.slice(0, footer));
+  return {
+    kind: "question",
+    rows: d.rows,
+    freeIndex: d.freeIndex,
+    options: d.options,
+    notes: d.freeIndex === null && NOTES_FOOTER.test(lines2[footer] ?? ""),
+    tabs,
+    title: readTitle(lines2, at, footer)
+  };
+}
+function dialogKey(paneText2) {
+  const s = readDialogScreen(paneText2);
+  if (!s) return "none";
+  if (s.kind === "review") return "review";
+  const tabs = s.tabs.map((t) => `${t.answered ? "x" : "o"}${t.header}`).join(",");
+  return `q|${tabs}|${s.title || s.options.join("|")}`;
+}
 function freeTextFilled(paneText2, n) {
   const row = readChoiceDialog(paneText2)?.rows.find((r) => r.n === n);
   if (!row) return false;
@@ -6623,7 +6947,37 @@ async function answerChoiceDialog(io, freeIndex, line, chunkMs) {
   io.enter();
   return true;
 }
-var FOOTER, ROW, PLACEHOLDER, CHAT_ROW, DIALOG_SETTLE_MS;
+function notesFilled(paneText2) {
+  const lines2 = paneText2.split("\n").map((l) => l.trimEnd());
+  for (let i = lines2.length - 1; i >= 0; i--) {
+    const m = NOTES_LINE.exec(lines2[i] ?? "");
+    if (!m) continue;
+    const v = (m[1] ?? "").trim();
+    return v.length > 0 && !NOTES_PLACEHOLDER.test(v);
+  }
+  return false;
+}
+async function answerNotesDialog(io, line, chunkMs) {
+  io.literal("n");
+  await io.sleep(DIALOG_SETTLE_MS);
+  for (const chunk of goalChunks(line)) {
+    io.literal(chunk);
+    await io.sleep(chunkMs);
+  }
+  await io.sleep(DIALOG_SETTLE_MS);
+  if (!notesFilled(io.capture())) return false;
+  io.enter();
+  return true;
+}
+async function submitReview(io, submitRow) {
+  io.literal(String(submitRow));
+  for (let i = 0; i < SUBMIT_TRIES; i++) {
+    await io.sleep(DIALOG_SETTLE_MS);
+    if (!readReviewScreen(io.capture())) return true;
+  }
+  return false;
+}
+var FOOTER, ROW, PLACEHOLDER, CHAT_ROW, SIDE_PANEL, cleanLabel, REVIEW_PROMPT, SUBMIT_ROW, NOTES_FOOTER, TAB_BOX, lastIndexOf, RULE, DIALOG_SETTLE_MS, NOTES_PLACEHOLDER, NOTES_LINE, SUBMIT_TRIES;
 var init_tui_dialog = __esm({
   "src/services/tui-dialog.ts"() {
     "use strict";
@@ -6632,7 +6986,21 @@ var init_tui_dialog = __esm({
     ROW = /^\s*[❯>›]?\s*(\d{1,2})\.\s+(\S.*)$/;
     PLACEHOLDER = /^(?:type something\.?|other)$/i;
     CHAT_ROW = /^chat about this$/i;
+    SIDE_PANEL = /\s{2,}[│┃┌┐└┘├┤╭╮╰╯─━].*$/;
+    cleanLabel = (s) => s.replace(SIDE_PANEL, "").trim();
+    REVIEW_PROMPT = /^\s*ready to submit your answers\?\s*$/i;
+    SUBMIT_ROW = /^\s*[❯>›]?\s*(\d{1,2})\.\s+submit answers\s*$/i;
+    NOTES_FOOTER = /\bn to add notes\b/i;
+    TAB_BOX = /^([☐☒])\s*(.+)$/;
+    lastIndexOf = (lines2, re) => {
+      for (let i = lines2.length - 1; i >= 0; i--) if (re.test(lines2[i] ?? "")) return i;
+      return -1;
+    };
+    RULE = /^[\s─━╌╍_=]*$/;
     DIALOG_SETTLE_MS = 250;
+    NOTES_PLACEHOLDER = /^(?:press n to add notes|add notes on this design(?:…|\.\.\.)?)$/i;
+    NOTES_LINE = /(?:^|\s)Notes:\s*(.*)$/;
+    SUBMIT_TRIES = 8;
   }
 });
 
@@ -6751,6 +7119,7 @@ function registerCustomAgentSource(fn) {
 function sessionKind(o, projectId, cwd) {
   if (o.specId) return "spec";
   if (o.flow === "reverse" || o.flow === "prd" || o.flow === "scaffold" || o.flow === "breakdown") return o.flow;
+  if (projectId.startsWith("telegram:")) return "telegram";
   if (projectId.startsWith("vps")) return "vps";
   if (o.command) return "shell";
   if (cwd.includes("/.worktrees/")) return "worktree";
@@ -6921,18 +7290,13 @@ async function sendToPane(id, text, chunkMs = 50) {
   const line = text.replace(/\s*\r?\n\s*/g, " ").trim();
   if (!line) return false;
   try {
-    const io = {
-      capture: () => capturePane(id, DIALOG_CAPTURE_LINES),
-      literal: (s) => {
-        tmux("send-keys", "-t", name(id), "-l", s);
-      },
-      enter: () => {
-        tmux("send-keys", "-t", name(id), "Enter");
-      },
-      sleep
-    };
-    const free = readChoiceDialog(io.capture())?.freeIndex ?? null;
-    if (free !== null) return await answerChoiceDialog(io, free, line, chunkMs);
+    const io = dialogIO(id);
+    const screen = readDialogScreen(io.capture());
+    if (screen?.kind === "review") return await submitReview(io, screen.submitRow);
+    if (screen?.kind === "question") {
+      if (screen.freeIndex !== null) return await answerChoiceDialog(io, screen.freeIndex, line, chunkMs);
+      if (screen.notes) return await answerNotesDialog(io, line, chunkMs);
+    }
     for (const chunk of goalChunks(line)) {
       io.literal(chunk);
       await sleep(chunkMs);
@@ -6943,6 +7307,28 @@ async function sendToPane(id, text, chunkMs = 50) {
     return false;
   }
 }
+function interruptPane(id) {
+  const pane = getSession(id);
+  if (!pane || pane.exited) return false;
+  try {
+    tmux("send-keys", "-t", name(id), "Escape");
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function submitPaneDialog(id) {
+  const p = getSession(id);
+  if (!p || p.exited) return false;
+  try {
+    const io = dialogIO(id);
+    const screen = readDialogScreen(io.capture());
+    if (screen?.kind !== "review") return false;
+    return await submitReview(io, screen.submitRow);
+  } catch {
+    return false;
+  }
+}
 async function armGoalInTui(id, condition, o = {}) {
   const pollMs = o.pollMs ?? 500, readyTries = o.readyTries ?? 20;
   const settleMs = o.settleMs ?? 1200, verifyTries = o.verifyTries ?? 12;
@@ -7117,13 +7503,14 @@ function spawnPty(...args) {
     );
   }
 }
-var socket, PREFIX, MAX_SCROLLBACK, POLL_MS, markerFilled, attached, claudeBin, shellBin, codexBin, agentBin, rootBypassEnv, frame, name, promptFilePath, goalGatePath, goalStatePath, agentsFilePath, NO_SERVER, TmuxError, sq, sessionIdForSpec, idFor, FMT, listSessions, liveDecisions, getSession, hooks, emitBirth, emitDeath, customAgentSource, customAgentsFor, sleep, paneText, DIALOG_CAPTURE_LINES, GOAL_ARMED_MARKERS, goalArmed, phaseKey, paneComplete, sessionFinished, poll, detach;
+var socket, PREFIX, MAX_SCROLLBACK, POLL_MS, markerFilled, attached, claudeBin, shellBin, codexBin, agentBin, rootBypassEnv, frame, name, promptFilePath, goalGatePath, goalStatePath, agentsFilePath, NO_SERVER, TmuxError, sq, idFor, FMT, listSessions, liveDecisions, getSession, hooks, emitBirth, emitDeath, customAgentSource, customAgentsFor, sleep, paneText, dialogIO, DIALOG_CAPTURE_LINES, GOAL_ARMED_MARKERS, goalArmed, phaseKey, paneComplete, sessionFinished, poll, detach;
 var init_pty = __esm({
   "src/services/pty.ts"() {
     "use strict";
     init_src2();
     init_src();
     init_session_phases();
+    init_session_id();
     init_tui_dialog();
     init_config2();
     socket = () => effectiveStr("HANOMAN_TMUX_SOCKET") ?? "hanoman";
@@ -7157,7 +7544,6 @@ var init_pty = __esm({
       }
     };
     sq = (s) => `'${s.split("'").join("'\\''")}'`;
-    sessionIdForSpec = (specId) => specId.toLowerCase().replace(/[^a-z0-9_-]/g, "_");
     idFor = (specId) => specId ? sessionIdForSpec(specId) : randomUUID().slice(0, 8);
     FMT = [
       "#{session_name}",
@@ -7219,6 +7605,16 @@ var init_pty = __esm({
         return "";
       }
     };
+    dialogIO = (id) => ({
+      capture: () => capturePane(id, DIALOG_CAPTURE_LINES),
+      literal: (s) => {
+        tmux("send-keys", "-t", name(id), "-l", s);
+      },
+      enter: () => {
+        tmux("send-keys", "-t", name(id), "Enter");
+      },
+      sleep
+    });
     DIALOG_CAPTURE_LINES = 60;
     GOAL_ARMED_MARKERS = {
       claude: ["/goal"],
@@ -7321,6 +7717,8 @@ var init_rename_project = __esm({
 var sync_exports = {};
 __export(sync_exports, {
   SYNCED: () => SYNCED,
+  __DATE_FIELDS: () => __DATE_FIELDS,
+  __FIELDS: () => __FIELDS,
   __FIELDS_FOR_TEST: () => __FIELDS_FOR_TEST,
   applyPush: () => applyPush,
   backfillFeed: () => backfillFeed,
@@ -7459,13 +7857,13 @@ async function upsertLocal(entity, id, version, data) {
 function setAcceptedHook(hook) {
   onAccepted = hook;
 }
-var SYNCED, DELEGATE, FIELDS, DATE_FIELDS, onAccepted, __FIELDS_FOR_TEST;
+var SYNCED, DELEGATE, FIELDS, DATE_FIELDS, __FIELDS, __DATE_FIELDS, onAccepted, __FIELDS_FOR_TEST;
 var init_sync = __esm({
   "src/services/sync.ts"() {
     "use strict";
     init_db();
     init_rename_project();
-    SYNCED = ["project", "spec", "vps", "sessionResult", "ticket", "ticketAttachment", "customAgent"];
+    SYNCED = ["project", "spec", "vps", "sessionResult", "ticket", "ticketAttachment", "customAgent", "githubIssue"];
     DELEGATE = {
       project: prisma.project,
       spec: prisma.spec,
@@ -7473,7 +7871,8 @@ var init_sync = __esm({
       sessionResult: prisma.sessionResult,
       ticket: prisma.ticket,
       ticketAttachment: prisma.ticketAttachment,
-      customAgent: prisma.customAgent
+      customAgent: prisma.customAgent,
+      githubIssue: prisma.githubIssue
     };
     FIELDS = {
       project: ["name", "desc", "kind", "stack", "gitRemote", "updatedAt"],
@@ -7493,7 +7892,28 @@ var init_sync = __esm({
       // ada: `upsert` yang tak menyebut kolom ber-default TETAP berhasil, jadi kolom yang terlewat
       // mendarat sebagai default palsu di tiap client tanpa satu pun error (kelas ADR-0090/0093).
       // `version` tak pernah masuk FIELDS — ia stempel mekanisme sync itu sendiri.
-      customAgent: ["projectId", "name", "description", "instructions", "tools", "model", "mentions", "enabled", "createdAt", "updatedAt"]
+      customAgent: ["projectId", "name", "description", "instructions", "tools", "model", "mentions", "enabled", "createdAt", "updatedAt"],
+      // SPEC-471 · ADR-0095 · SELURUH kolom bermakna ikut. `status`/`specId` termasuk: keputusan
+      // triase adalah bagian keadaan yang harus dilihat sama oleh semua mesin — tanpa itu satu
+      // mesin bisa menerima ulang issue yang di mesin lain sudah jadi backlog.
+      githubIssue: [
+        "projectId",
+        "repoSlug",
+        "number",
+        "title",
+        "body",
+        "authorLogin",
+        "labels",
+        "url",
+        "issueState",
+        "status",
+        "specId",
+        "issueCreatedAt",
+        "issueUpdatedAt",
+        "pulledAt",
+        "createdAt",
+        "updatedAt"
+      ]
     };
     DATE_FIELDS = {
       project: ["updatedAt"],
@@ -7502,8 +7922,11 @@ var init_sync = __esm({
       sessionResult: ["createdAt", "updatedAt"],
       ticket: ["createdAt", "updatedAt"],
       ticketAttachment: ["createdAt", "updatedAt"],
-      customAgent: ["createdAt", "updatedAt"]
+      customAgent: ["createdAt", "updatedAt"],
+      githubIssue: ["issueCreatedAt", "issueUpdatedAt", "pulledAt", "createdAt", "updatedAt"]
     };
+    __FIELDS = FIELDS;
+    __DATE_FIELDS = DATE_FIELDS;
     __FIELDS_FOR_TEST = FIELDS;
   }
 });
@@ -9670,7 +10093,7 @@ var require_extension = __commonJS({
       if (dest[name2] === void 0) dest[name2] = [elem];
       else dest[name2].push(elem);
     }
-    function parse2(header) {
+    function parse3(header2) {
       const offers = /* @__PURE__ */ Object.create(null);
       let params = /* @__PURE__ */ Object.create(null);
       let mustUnescape = false;
@@ -9682,8 +10105,8 @@ var require_extension = __commonJS({
       let code = -1;
       let end2 = -1;
       let i = 0;
-      for (; i < header.length; i++) {
-        code = header.charCodeAt(i);
+      for (; i < header2.length; i++) {
+        code = header2.charCodeAt(i);
         if (extensionName === void 0) {
           if (end2 === -1 && tokenChars[code] === 1) {
             if (start === -1) start = i;
@@ -9694,7 +10117,7 @@ var require_extension = __commonJS({
               throw new SyntaxError(`Unexpected character at index ${i}`);
             }
             if (end2 === -1) end2 = i;
-            const name2 = header.slice(start, end2);
+            const name2 = header2.slice(start, end2);
             if (code === 44) {
               push(offers, name2, params);
               params = /* @__PURE__ */ Object.create(null);
@@ -9715,7 +10138,7 @@ var require_extension = __commonJS({
               throw new SyntaxError(`Unexpected character at index ${i}`);
             }
             if (end2 === -1) end2 = i;
-            push(params, header.slice(start, end2), true);
+            push(params, header2.slice(start, end2), true);
             if (code === 44) {
               push(offers, extensionName, params);
               params = /* @__PURE__ */ Object.create(null);
@@ -9723,7 +10146,7 @@ var require_extension = __commonJS({
             }
             start = end2 = -1;
           } else if (code === 61 && start !== -1 && end2 === -1) {
-            paramName = header.slice(start, i);
+            paramName = header2.slice(start, i);
             start = end2 = -1;
           } else {
             throw new SyntaxError(`Unexpected character at index ${i}`);
@@ -9747,7 +10170,7 @@ var require_extension = __commonJS({
             } else {
               throw new SyntaxError(`Unexpected character at index ${i}`);
             }
-          } else if (code === 34 && header.charCodeAt(i - 1) === 61) {
+          } else if (code === 34 && header2.charCodeAt(i - 1) === 61) {
             inQuotes = true;
           } else if (end2 === -1 && tokenChars[code] === 1) {
             if (start === -1) start = i;
@@ -9758,7 +10181,7 @@ var require_extension = __commonJS({
               throw new SyntaxError(`Unexpected character at index ${i}`);
             }
             if (end2 === -1) end2 = i;
-            let value = header.slice(start, end2);
+            let value = header2.slice(start, end2);
             if (mustUnescape) {
               value = value.replace(/\\/g, "");
               mustUnescape = false;
@@ -9780,7 +10203,7 @@ var require_extension = __commonJS({
         throw new SyntaxError("Unexpected end of input");
       }
       if (end2 === -1) end2 = i;
-      const token = header.slice(start, end2);
+      const token = header2.slice(start, end2);
       if (extensionName === void 0) {
         push(offers, token, params);
       } else {
@@ -9810,7 +10233,7 @@ var require_extension = __commonJS({
         }).join(", ");
       }).join(", ");
     }
-    module.exports = { format, parse: parse2 };
+    module.exports = { format, parse: parse3 };
   }
 });
 
@@ -9823,7 +10246,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes5, createHash: createHash5 } = __require("crypto");
+    var { randomBytes: randomBytes6, createHash: createHash8 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -9844,7 +10267,7 @@ var require_websocket = __commonJS({
     var {
       EventTarget: { addEventListener, removeEventListener }
     } = require_event_target();
-    var { format, parse: parse2 } = require_extension();
+    var { format, parse: parse3 } = require_extension();
     var { toBuffer } = require_buffer_util();
     var kAborted = Symbol("kAborted");
     var protocolVersions = [8, 13];
@@ -10361,7 +10784,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes5(16).toString("base64");
+      const key = randomBytes6(16).toString("base64");
       const request = isSecure ? https.request : http.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -10491,7 +10914,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket2, socket2, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash5("sha1").update(key + GUID).digest("base64");
+        const digest = createHash8("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket2, socket2, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -10521,7 +10944,7 @@ var require_websocket = __commonJS({
           }
           let extensions;
           try {
-            extensions = parse2(secWebSocketExtensions);
+            extensions = parse3(secWebSocketExtensions);
           } catch (err) {
             const message = "Invalid Sec-WebSocket-Extensions header";
             abortHandshake(websocket2, socket2, message);
@@ -10813,13 +11236,13 @@ var require_subprotocol = __commonJS({
   "../node_modules/.pnpm/ws@8.21.0/node_modules/ws/lib/subprotocol.js"(exports, module) {
     "use strict";
     var { tokenChars } = require_validation();
-    function parse2(header) {
+    function parse3(header2) {
       const protocols = /* @__PURE__ */ new Set();
       let start = -1;
       let end2 = -1;
       let i = 0;
-      for (i; i < header.length; i++) {
-        const code = header.charCodeAt(i);
+      for (i; i < header2.length; i++) {
+        const code = header2.charCodeAt(i);
         if (end2 === -1 && tokenChars[code] === 1) {
           if (start === -1) start = i;
         } else if (i !== 0 && (code === 32 || code === 9)) {
@@ -10829,7 +11252,7 @@ var require_subprotocol = __commonJS({
             throw new SyntaxError(`Unexpected character at index ${i}`);
           }
           if (end2 === -1) end2 = i;
-          const protocol2 = header.slice(start, end2);
+          const protocol2 = header2.slice(start, end2);
           if (protocols.has(protocol2)) {
             throw new SyntaxError(`The "${protocol2}" subprotocol is duplicated`);
           }
@@ -10842,14 +11265,14 @@ var require_subprotocol = __commonJS({
       if (start === -1 || end2 !== -1) {
         throw new SyntaxError("Unexpected end of input");
       }
-      const protocol = header.slice(start, i);
+      const protocol = header2.slice(start, i);
       if (protocols.has(protocol)) {
         throw new SyntaxError(`The "${protocol}" subprotocol is duplicated`);
       }
       protocols.add(protocol);
       return protocols;
     }
-    module.exports = { parse: parse2 };
+    module.exports = { parse: parse3 };
   }
 });
 
@@ -10860,7 +11283,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash5 } = __require("crypto");
+    var { createHash: createHash8 } = __require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -11167,7 +11590,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket2, 503);
-        const digest = createHash5("sha1").update(key + GUID).digest("base64");
+        const digest = createHash8("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -11814,13 +12237,13 @@ var require_HeaderParser = __commonJS({
         this._parseHeader();
       }
       this.ss.matches = this.ss.maxMatches;
-      const header = this.header;
+      const header2 = this.header;
       this.header = {};
       this.buffer = "";
       this.finished = true;
       this.nread = this.npairs = 0;
       this.maxed = false;
-      this.emit("header", header);
+      this.emit("header", header2);
     };
     HeaderParser.prototype._parseHeader = function() {
       if (this.npairs === this.maxHeaderPairs) {
@@ -11899,9 +12322,9 @@ var require_Dicer = __commonJS({
       this._pause = false;
       const self = this;
       this._hparser = new HeaderParser(cfg);
-      this._hparser.on("header", function(header) {
+      this._hparser.on("header", function(header2) {
         self._inHeader = false;
-        self._part.emit("header", header);
+        self._part.emit("header", header2);
       });
     }
     inherits(Dicer, WritableStream);
@@ -12917,7 +13340,7 @@ var require_multipart = __commonJS({
           field.emit("end");
           field.removeAllListeners("end");
         }
-        part.on("header", function(header) {
+        part.on("header", function(header2) {
           let contype;
           let fieldname;
           let parsed;
@@ -12925,8 +13348,8 @@ var require_multipart = __commonJS({
           let encoding;
           let filename;
           let nsize = 0;
-          if (header["content-type"]) {
-            parsed = parseParams(header["content-type"][0]);
+          if (header2["content-type"]) {
+            parsed = parseParams(header2["content-type"][0]);
             if (parsed[0]) {
               contype = parsed[0].toLowerCase();
               for (i = 0, len = parsed.length; i < len; ++i) {
@@ -12943,8 +13366,8 @@ var require_multipart = __commonJS({
           if (charset === void 0) {
             charset = defCharset;
           }
-          if (header["content-disposition"]) {
-            parsed = parseParams(header["content-disposition"][0]);
+          if (header2["content-disposition"]) {
+            parsed = parseParams(header2["content-disposition"][0]);
             if (!RE_FIELD.test(parsed[0])) {
               return skipPart(part);
             }
@@ -12961,8 +13384,8 @@ var require_multipart = __commonJS({
           } else {
             return skipPart(part);
           }
-          if (header["content-transfer-encoding"]) {
-            encoding = header["content-transfer-encoding"][0].toLowerCase();
+          if (header2["content-transfer-encoding"]) {
+            encoding = header2["content-transfer-encoding"][0].toLowerCase();
           } else {
             encoding = "7bit";
           }
@@ -14038,7 +14461,7 @@ var require_stream_wormhole = __commonJS({
   "../node_modules/.pnpm/stream-wormhole@1.1.0/node_modules/stream-wormhole/index.js"(exports, module) {
     "use strict";
     module.exports = (stream, throwError) => {
-      return new Promise((resolve14, reject) => {
+      return new Promise((resolve14, reject2) => {
         if (typeof stream.resume !== "function") {
           return resolve14();
         }
@@ -14062,7 +14485,7 @@ var require_stream_wormhole = __commonJS({
         function onError(err) {
           cleanup();
           if (throwError) {
-            reject(err);
+            reject2(err);
           } else {
             resolve14();
           }
@@ -14280,7 +14703,7 @@ var require_secure_json_parse = __commonJS({
       }
       return obj;
     }
-    function parse2(text, reviver, options2) {
+    function parse3(text, reviver, options2) {
       const stackTraceLimit = Error.stackTraceLimit;
       Error.stackTraceLimit = 0;
       try {
@@ -14300,9 +14723,9 @@ var require_secure_json_parse = __commonJS({
         Error.stackTraceLimit = stackTraceLimit;
       }
     }
-    module.exports = parse2;
-    module.exports.default = parse2;
-    module.exports.parse = parse2;
+    module.exports = parse3;
+    module.exports.default = parse3;
+    module.exports.parse = parse3;
     module.exports.safeParse = safeParse;
     module.exports.scan = filter;
   }
@@ -14499,13 +14922,13 @@ var require_multipart2 = __commonJS({
           }
         };
         const parts = () => {
-          return new Promise((resolve14, reject) => {
+          return new Promise((resolve14, reject2) => {
             handle((val) => {
               if (val instanceof Error) {
                 if (val.message === "Unexpected end of multipart data") {
                   resolve14(null);
                 } else {
-                  reject(val);
+                  reject2(val);
                 }
               } else {
                 resolve14(val);
@@ -15339,8 +15762,10 @@ var DEFAULT_SETTING = {
   // SPEC-376 · ADR-0080 · uji hanya yang berubah
   conflict: CONFLICT_DEFAULTS,
   // SPEC-383 · ADR-0081 · default sesi konflik (opt-in, mati)
-  lead: LEAD_DEFAULTS
+  lead: LEAD_DEFAULTS,
   // SPEC-409 · ADR-0091 · hanoman-lead (master switch mati)
+  telegram: TELEGRAM_DEFAULTS
+  // SPEC-476 · ADR-0096 · gateway Telegram opt-in
 };
 async function getSetting() {
   const raw = (await prisma.setting.findUnique({ where: { id: 1 } }))?.data;
@@ -15388,18 +15813,18 @@ function ensureCodexTrust(repoDir, home) {
     canonical = realpathSync2(repoDir);
   } catch {
   }
-  const header = `[projects."${canonical}"]`;
+  const header2 = `[projects."${canonical}"]`;
   try {
     let existing = "";
     try {
       existing = readFileSync4(path, "utf8");
     } catch {
     }
-    if (existing.includes(header)) return;
+    if (existing.includes(header2)) return;
     mkdirSync5(codexHome(home), { recursive: true });
     const lead = existing === "" || existing.endsWith("\n") ? "" : "\n";
     appendFileSync(path, `${lead}
-${header}
+${header2}
 trust_level = "trusted"
 `);
   } catch {
@@ -15695,6 +16120,7 @@ async function readEscalation(specId, sessions = listSessions()) {
 // src/services/spec-deps.ts
 init_db();
 init_src2();
+init_session_id();
 var REASON_LABEL = {
   missing: "tak ditemukan",
   unfinished: "belum selesai",
@@ -15707,7 +16133,7 @@ function dependsOnOf(spec) {
   for (const x of v) if (typeof x === "string" && x !== "" && !out3.includes(x)) out3.push(x);
   return out3;
 }
-function blockersFor(spec, deps, isMerged) {
+function blockersFor(spec, deps, tipOf, isMerged) {
   const ids = dependsOnOf(spec);
   if (ids.length === 0) return [];
   const base = spec.branchFrom ?? "HEAD";
@@ -15722,7 +16148,8 @@ function blockersFor(spec, deps, isMerged) {
       out3.push({ id, reason: "unfinished" });
       continue;
     }
-    if (d.headSha && !isMerged(d.headSha, base)) out3.push({ id, reason: "unmerged" });
+    const tip = tipOf(d);
+    if (tip && !isMerged(tip, base)) out3.push({ id, reason: "unmerged" });
   }
   return out3;
 }
@@ -15743,6 +16170,7 @@ function reaches(edges, from, target2) {
 }
 var TTL_MS = 15e3;
 var mergeCache = /* @__PURE__ */ new Map();
+var tipCache = /* @__PURE__ */ new Map();
 function mergedInto(repoDir, sha, baseRef) {
   const key = `${repoDir} ${sha} ${baseRef}`;
   const hit = mergeCache.get(key);
@@ -15757,7 +16185,24 @@ function mergedInto(repoDir, sha, baseRef) {
   mergeCache.set(key, { at: now, v });
   return v;
 }
+function workTip(repoDir, dep) {
+  if (dep.headSha) return dep.headSha;
+  const branch = `hanoman/${sessionIdForSpec(dep.id)}`;
+  const key = `${repoDir} ${branch}`;
+  const hit = tipCache.get(key);
+  const now = Date.now();
+  if (hit && now - hit.at < TTL_MS) return hit.v;
+  let v = null;
+  try {
+    v = realGit.revParse(repoDir, branch);
+  } catch {
+    v = null;
+  }
+  tipCache.set(key, { at: now, v });
+  return v;
+}
 var merger = (repoDir) => (sha, base) => repoDir ? mergedInto(repoDir, sha, base) : false;
+var tipper = (repoDir) => (d) => repoDir ? workTip(repoDir, d) : d.headSha;
 var depRows = (ids) => prisma.spec.findMany({
   where: { id: { in: ids } },
   select: { id: true, stage: true, headSha: true }
@@ -15766,7 +16211,7 @@ async function blockersForSpec(spec, repoDir) {
   const ids = dependsOnOf(spec);
   if (ids.length === 0) return [];
   const rows = await depRows(ids);
-  return blockersFor(spec, new Map(rows.map((r) => [r.id, r])), merger(repoDir));
+  return blockersFor(spec, new Map(rows.map((r) => [r.id, r])), tipper(repoDir), merger(repoDir));
 }
 async function decorateBlocked(specs) {
   const ids = [...new Set(specs.flatMap(dependsOnOf))];
@@ -15782,7 +16227,8 @@ async function decorateBlocked(specs) {
       continue;
     }
     if (!repos.has(s.projectId)) repos.set(s.projectId, await resolveRepoDir(s.projectId));
-    out3.push({ ...s, dependsOn: own, blockedBy: blockersFor(s, deps, merger(repos.get(s.projectId))) });
+    const repo = repos.get(s.projectId);
+    out3.push({ ...s, dependsOn: own, blockedBy: blockersFor(s, deps, tipper(repo), merger(repo)) });
   }
   return out3;
 }
@@ -16307,10 +16753,10 @@ var _Tokenizer = class {
         item.align.push(null);
       }
     }
-    for (const header of headers) {
+    for (const header2 of headers) {
       item.header.push({
-        text: header,
-        tokens: this.lexer.inline(header)
+        text: header2,
+        tokens: this.lexer.inline(header2)
       });
     }
     for (const row of rows) {
@@ -17158,10 +17604,10 @@ ${quote}</blockquote>
     return `<p>${text}</p>
 `;
   }
-  table(header, body) {
+  table(header2, body) {
     if (body)
       body = `<tbody>${body}</tbody>`;
-    return "<table>\n<thead>\n" + header + "</thead>\n" + body + "</table>\n";
+    return "<table>\n<thead>\n" + header2 + "</thead>\n" + body + "</table>\n";
   }
   tablerow(content) {
     return `<tr>
@@ -17312,12 +17758,12 @@ var _Parser = class __Parser {
         }
         case "table": {
           const tableToken = token;
-          let header = "";
+          let header2 = "";
           let cell = "";
           for (let j = 0; j < tableToken.header.length; j++) {
             cell += this.renderer.tablecell(this.parseInline(tableToken.header[j].tokens), { header: true, align: tableToken.align[j] });
           }
-          header += this.renderer.tablerow(cell);
+          header2 += this.renderer.tablerow(cell);
           let body = "";
           for (let j = 0; j < tableToken.rows.length; j++) {
             const row = tableToken.rows[j];
@@ -17327,7 +17773,7 @@ var _Parser = class __Parser {
             }
             body += this.renderer.tablerow(cell);
           }
-          out3 += this.renderer.table(header, body);
+          out3 += this.renderer.table(header2, body);
           continue;
         }
         case "blockquote": {
@@ -18276,6 +18722,24 @@ async function notificationsFeed() {
   return { items, unread };
 }
 
+// src/services/spec-head.ts
+init_db();
+init_src2();
+var readHead = (wt) => {
+  try {
+    return realGit.headSha(wt);
+  } catch {
+    return null;
+  }
+};
+async function recordHeadSha(specId, worktree, read = readHead) {
+  const sha = read(worktree);
+  if (!sha) return null;
+  await prisma.spec.update({ where: { id: specId }, data: { headSha: sha } }).catch(() => {
+  });
+  return sha;
+}
+
 // src/services/live-specs.ts
 async function liveSpecs(filter = {}) {
   const specs = await prisma.spec.findMany({
@@ -18291,14 +18755,16 @@ async function liveSpecs(filter = {}) {
     if (!entry) return s;
     const next = stageForRun(entry.phases, entry.cwd, s.id);
     if (!next || STAGES.indexOf(next) <= STAGES.indexOf(s.stage)) return s;
-    advanced.push({ id: s.id, from: s.stage, stage: next });
+    advanced.push({ id: s.id, from: s.stage, stage: next, cwd: entry.cwd });
     if (next === "done") doneNow.push({ specId: s.id, title: s.title, projectId: s.projectId });
     return { ...s, stage: next };
   });
   if (advanced.length)
     await Promise.all(advanced.map(async (a) => {
       const res = await prisma.spec.updateMany({ where: { id: a.id, stage: a.from }, data: { stage: a.stage } }).catch(() => ({ count: 0 }));
-      if (res.count > 0) await notifySynced("spec", a.id);
+      if (res.count === 0) return;
+      if (a.stage === "done") await recordHeadSha(a.id, a.cwd);
+      await notifySynced("spec", a.id);
     }));
   await Promise.all(doneNow.map((d) => recordCompletion(d.specId, d.title, d.projectId)));
   return decorateBlocked(out3);
@@ -20093,6 +20559,18 @@ async function terminal_default(app2) {
     if (!s?.flow || !phases) return reply.code(404).send({ error: "not found" });
     return { flow: s.flow, phases };
   });
+  app2.post("/terminal/sessions/:id/steer", async (req, reply) => {
+    const parsed = zTerminalSteerInput.safeParse(req.body);
+    if (!parsed.success) return reply.code(400).send({ error: "invalid body" });
+    const ok2 = await sendToPane(req.params.id, parsed.data.text);
+    if (!ok2) return reply.code(404).send({ error: "live session not found" });
+    return reply.code(202).send({ accepted: true });
+  });
+  app2.post("/terminal/sessions/:id/interrupt", async (req, reply) => {
+    const ok2 = interruptPane(req.params.id);
+    if (!ok2) return reply.code(404).send({ error: "live session not found" });
+    return reply.code(202).send({ accepted: true });
+  });
   const sessionWorktree = async (id) => {
     const s = getSession(id);
     if (!s) return { ok: false, code: 404, msg: "not found" };
@@ -20156,11 +20634,7 @@ async function terminal_default(app2) {
       if (repoDir) {
         if (s.specId) {
           if (s.flow) await advanceStage(s.specId, repoDir, id, s.flow, s.cwd);
-          try {
-            const headSha = realGit.headSha(s.cwd);
-            await prisma.spec.update({ where: { id: s.specId }, data: { headSha } });
-          } catch {
-          }
+          await recordHeadSha(s.specId, s.cwd);
         }
         killSession(id);
         if (ownsWorktree(repoDir, s.cwd)) realGit.removeWorktree(repoDir, s.cwd);
@@ -21665,11 +22139,11 @@ function clamp(text) {
   const buf = Buffer.from(text, "utf8");
   if (buf.byteLength <= MAX_TRANSCRIPT_BYTES) return { body: text, truncated: false };
   const cut = buf.byteLength - MAX_TRANSCRIPT_BYTES;
-  let tail2 = buf.subarray(cut).toString("utf8");
-  const nl = tail2.indexOf("\n");
-  if (nl >= 0) tail2 = tail2.slice(nl + 1);
+  let tail3 = buf.subarray(cut).toString("utf8");
+  const nl = tail3.indexOf("\n");
+  if (nl >= 0) tail3 = tail3.slice(nl + 1);
   return { body: `\u2026 ${cut} byte awal dipangkas (batas ${MAX_TRANSCRIPT_BYTES} byte) \u2026
-${tail2}`, truncated: true };
+${tail3}`, truncated: true };
 }
 async function saveTranscript(text) {
   if (!text.trim()) return { key: "", bytes: 0, truncated: false };
@@ -22629,10 +23103,22 @@ function leadArgv(o) {
   ];
 }
 var leadEnv = (agent, base = process.env, uid = process.getuid?.()) => agent === "claude" ? { ...rootBypassEnv(uid), ...base } : { ...base };
+var EXPLAIN_MAX = 500;
+var tail = (s) => {
+  const t = s.trim();
+  return t.length > EXPLAIN_MAX ? `\u2026${t.slice(-EXPLAIN_MAX)}` : t;
+};
+function leadFailureReason(agent, timeoutMs, err, stdout, stderr) {
+  if (err.killed) return `lead ${agent} kehabisan waktu ${timeoutMs} ms`;
+  const fromErr = err.message.startsWith("Command failed:") ? "" : err.message;
+  const detail = [tail(stderr), tail(stdout)].filter(Boolean).join(" \xB7 ") || tail(fromErr) || "tanpa keluaran";
+  const how = err.signal ? `sinyal ${err.signal}` : `exit ${err.code ?? "?"}`;
+  return `lead ${agent} gagal (${how}): ${detail}`;
+}
 function think(prompt, o) {
   const bin = binFor(o.agent);
   const args = leadArgv({ agent: o.agent, model: o.model, effort: o.effort, prompt });
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve14, reject2) => {
     const child = execFile9(bin, args, {
       cwd: o.cwd,
       timeout: o.timeoutMs,
@@ -22642,8 +23128,7 @@ function think(prompt, o) {
       killSignal: "SIGTERM"
     }, (err, stdout, stderr) => {
       if (err) {
-        const killed = err.killed;
-        reject(new Error(killed ? `lead ${o.agent} kehabisan waktu ${o.timeoutMs} ms` : `lead ${o.agent} gagal: ${(stderr || err.message).trim().slice(0, 500)}`));
+        reject2(new Error(leadFailureReason(o.agent, o.timeoutMs, err, stdout, stderr)));
         return;
       }
       resolve14(stdout);
@@ -22921,12 +23406,13 @@ Bukti integrasi: ${evidence.join("; ")} \u2192 ${verdict}.` }
 
 // src/services/lead/detect.ts
 init_pty();
+init_tui_dialog();
 import { writeFileSync as writeFileSync4 } from "node:fs";
 
 // src/services/lead/pane.ts
 init_tui_dialog();
 var CLEAN = /[│┃┆┊┌┐└┘├┤┬┴┼─━╭╮╰╯>❯]/g;
-var tail = (text, lines2) => text.split("\n").map((l) => l.replace(CLEAN, " ").trimEnd()).filter((l) => l.trim()).slice(-lines2);
+var tail2 = (text, lines2) => text.split("\n").map((l) => l.replace(CLEAN, " ").trimEnd()).filter((l) => l.trim()).slice(-lines2);
 var CODEX_FINISHED = [
   /Goal achieved/i,
   /Goal unmet/i,
@@ -22939,11 +23425,11 @@ var ASK_SIGNALS = [
   /\b(pilih|apakah|haruskah|mana yang|opsi|which|should i|do you want|proceed\?)\b/i
 ];
 function readPaneQuestion(text, agent) {
-  const lines2 = tail(text, 40);
+  const lines2 = tail2(text, 40);
   const body = lines2.join("\n").trim();
   const choices = readChoiceDialog(text)?.options ?? [];
   if (!body) return { asking: false, question: "", reason: "layar kosong", choices };
-  const question = tail(text, 25).join("\n").trim();
+  const question = tail2(text, 25).join("\n").trim();
   if (agent === "codex") {
     const finished = CODEX_FINISHED.find((re) => re.test(body));
     if (finished) return { asking: false, question, reason: "sesi codex selesai wajar (ADR-0074)", choices };
@@ -22956,9 +23442,16 @@ function readPaneQuestion(text, agent) {
 // src/services/lead/detect.ts
 var answers = /* @__PURE__ */ new Map();
 var capped = /* @__PURE__ */ new Set();
+var failures = /* @__PURE__ */ new Map();
+var failCapped = /* @__PURE__ */ new Set();
+var MAX_CHAIN_STEPS = 6;
+var CHAIN_POLL_MS = 300;
+var CHAIN_POLL_TRIES = 20;
 function resetSession(sessionId2) {
   answers.delete(sessionId2);
   capped.delete(sessionId2);
+  failures.delete(sessionId2);
+  failCapped.delete(sessionId2);
 }
 var prodDetectDeps = {
   live: () => {
@@ -22994,6 +23487,8 @@ var prodDetectDeps = {
     } catch {
     }
   },
+  submit: (id) => submitPaneDialog(id),
+  sleep: (ms) => new Promise((r) => setTimeout(r, ms)),
   decide,
   decideDeps: prodDecideDeps,
   optIn: leadProjects,
@@ -23025,7 +23520,7 @@ async function scanAndAnswer(deps = prodDetectDeps) {
     if ((answers.get(s.id) ?? 0) >= cfg.maxAutoAnswers) {
       if (!capped.has(s.id)) {
         capped.add(s.id);
-        const row2 = await recordDecision({
+        const row = await recordDecision({
           projectId: s.projectId,
           specId: s.specId,
           sessionId: s.id,
@@ -23040,7 +23535,7 @@ async function scanAndAnswer(deps = prodDetectDeps) {
           weighty: true
         });
         await deps.notify(
-          row2.id,
+          row.id,
           `Lead berhenti menjawab sesi ${s.id} (batas ${cfg.maxAutoAnswers}\xD7 tercapai)`,
           s.projectId,
           s.specId ?? null,
@@ -23050,16 +23545,79 @@ async function scanAndAnswer(deps = prodDetectDeps) {
       skip("batas jawaban otomatis tercapai");
       continue;
     }
+    if ((failures.get(s.id) ?? 0) >= cfg.maxAutoAnswers) {
+      if (!failCapped.has(s.id)) {
+        failCapped.add(s.id);
+        const row = await recordDecision({
+          projectId: s.projectId,
+          specId: s.specId,
+          sessionId: s.id,
+          gate: "detected",
+          kind: "quality",
+          question: `Keputusan untuk sesi ${s.id} gagal disusun ${cfg.maxAutoAnswers}\xD7 berturut-turut.`,
+          answer: "Berhenti mencoba; serahkan ke operator.",
+          reason: "Kegagalan beruntun menandakan sebab yang tak hilang dengan mengulang (kunci/kuota agen, biner tak terpasang) \u2014 mencoba lagi tiap denyut hanya membakar kuota. Alasan percobaan terakhir ada di baris jejak `gagal` tepat di atas ini.",
+          refs: [],
+          confidence: "tinggi",
+          action: "none",
+          weighty: true
+        });
+        await deps.notify(
+          row.id,
+          `Lead berhenti mencoba sesi ${s.id} (${cfg.maxAutoAnswers}\xD7 gagal berturut-turut)`,
+          s.projectId,
+          s.specId ?? null,
+          s.id
+        );
+      }
+      skip("batas kegagalan beruntun tercapai");
+      continue;
+    }
     const agent = deps.agentOf(s.id) ?? "claude";
     const read = readPaneQuestion(deps.pane(s.id), agent);
     if (!read.asking) {
       skip(read.reason);
       continue;
     }
+    const chain = await runChain(s, agent, deps);
+    if (chain.acted && chain.done) {
+      deps.clearMarker(s.decisionFile);
+      answers.set(s.id, (answers.get(s.id) ?? 0) + 1);
+      failures.delete(s.id);
+      out3.answered.push(s.id);
+      continue;
+    }
+    if (chain.failed) failures.set(s.id, (failures.get(s.id) ?? 0) + 1);
+    skip(chain.reason);
+  }
+  return out3;
+}
+async function runChain(s, agent, deps) {
+  let acted = false;
+  for (let step = 0; step < MAX_CHAIN_STEPS; step++) {
+    const text = deps.pane(s.id);
+    const screen = readDialogScreen(text);
+    if (screen?.kind === "review") {
+      if (!await deps.submit(s.id))
+        return { acted, done: false, failed: true, reason: "gagal menekan Submit answers" };
+      acted = true;
+      continue;
+    }
+    if (step > 0 && !screen) return { acted, done: true, failed: false, reason: "" };
+    const read = readPaneQuestion(text, agent);
+    if (!read.asking) {
+      return step === 0 ? { acted, done: false, failed: false, reason: read.reason } : { acted, done: true, failed: false, reason: "" };
+    }
     const notes = [`Sesi ini menunggu di terminal; teks di bawah adalah layar terakhirnya. Jawablah sebagai masukan yang bisa langsung diketik ke terminal itu (isi \`reply\`).`];
     if (read.choices.length) {
       notes.push("Layarnya adalah dialog pilihan. `reply` akan dimasukkan sebagai JAWABAN BEBAS ke dialog itu, jadi tulislah jawaban yang berdiri sendiri \u2014 sebut opsi yang kamu pilih beserta alasan singkatnya, bukan nomornya saja.");
     }
+    if (screen?.kind === "question" && screen.tabs.length > 1) {
+      const at = screen.tabs.findIndex((t) => !t.answered);
+      notes.push(
+        `Dialog ini BERANTAI: ${screen.tabs.length} pertanyaan dalam satu tanya (${screen.tabs.map((t) => `${t.answered ? "sudah" : "belum"}: ${t.header}`).join(", ")}). Yang sedang tampil pertanyaan ke-${at + 1}; jawab HANYA pertanyaan itu \u2014 sisanya akan ditanyakan sesudah ini.`
+      );
+    }
     const row = await deps.decide({
       projectId: s.projectId,
       specId: s.specId,
@@ -23070,26 +23628,32 @@ async function scanAndAnswer(deps = prodDetectDeps) {
       options: read.choices.length ? read.choices : void 0,
       notes
     }, deps.decideDeps);
-    if (!row || row.status !== "berlaku") {
-      skip("lead tak menghasilkan keputusan yang berlaku");
-      continue;
-    }
+    if (!row) return { acted, done: false, failed: false, reason: "lead tak menghasilkan keputusan yang berlaku" };
+    if (row.status !== "berlaku")
+      return { acted, done: false, failed: true, reason: "lead tak menghasilkan keputusan yang berlaku" };
     const reply = takeReply(row.id) || row.answer;
-    const sent = await deps.send(s.id, reply);
-    if (!sent) {
-      skip("gagal mengetik ke pane");
-      continue;
-    }
-    deps.clearMarker(s.decisionFile);
-    answers.set(s.id, (answers.get(s.id) ?? 0) + 1);
-    out3.answered.push(s.id);
+    if (!await deps.send(s.id, reply))
+      return { acted, done: false, failed: true, reason: "gagal mengetik ke pane" };
+    acted = true;
+    if (!screen) return { acted, done: true, failed: false, reason: "" };
+    if (!await waitScreenChange(s.id, dialogKey(text), deps))
+      return { acted, done: false, failed: true, reason: "layar dialog tak berubah sesudah dijawab" };
   }
-  return out3;
+  return { acted, done: false, failed: true, reason: "batas langkah rantai dialog tercapai" };
+}
+async function waitScreenChange(id, before, deps) {
+  for (let i = 0; i < CHAIN_POLL_TRIES; i++) {
+    await deps.sleep(CHAIN_POLL_MS);
+    if (dialogKey(deps.pane(id)) !== before) return true;
+  }
+  return false;
 }
 function sweep(liveIds) {
   const live = new Set(liveIds);
   for (const id of [...answers.keys()]) if (!live.has(id)) answers.delete(id);
   for (const id of [...capped]) if (!live.has(id)) capped.delete(id);
+  for (const id of [...failures.keys()]) if (!live.has(id)) failures.delete(id);
+  for (const id of [...failCapped]) if (!live.has(id)) failCapped.delete(id);
 }
 
 // src/services/lead/pulse.ts
@@ -23715,60 +24279,832 @@ async function custom_agents_default(app2) {
   });
 }
 
-// src/app.ts
-var import_multipart = __toESM(require_multipart2(), 1);
+// src/routes/github-issues.ts
+init_zod();
+init_db();
 
-// src/routes/auth.ts
-init_src();
+// src/services/github-issues.ts
 init_db();
 
-// src/services/auth.ts
+// src/services/github-repo.ts
 init_db();
-import { randomBytes as randomBytes3, scrypt as scryptCb, timingSafeEqual, createHash as createHash3 } from "node:crypto";
-import { promisify as promisify9 } from "node:util";
-var scrypt = promisify9(scryptCb);
-var COOKIE_NAME = "hn_session";
-var SESSION_TTL_MS = 7 * 24 * 3600 * 1e3;
-async function hashPassword(pw) {
-  const salt = randomBytes3(16);
-  const key = await scrypt(pw, salt, 64);
-  return `${salt.toString("hex")}:${key.toString("hex")}`;
-}
-async function verifyPassword(pw, stored) {
-  const [saltHex, hashHex] = stored.split(":");
-  if (!saltHex || !hashHex) return false;
-  const key = await scrypt(pw, Buffer.from(saltHex, "hex"), 64);
-  const want = Buffer.from(hashHex, "hex");
-  return key.length === want.length && timingSafeEqual(key, want);
+function parse2(url2) {
+  const u = url2.trim();
+  let m = /^git@([^:]+):([^/]+)\/(.+?)(?:\.git)?$/.exec(u);
+  if (!m) m = /^https?:\/\/(?:[^@/]+@)?([^/]+)\/([^/]+)\/(.+?)(?:\.git)?\/?$/.exec(u);
+  if (!m || !m[1] || !m[2] || !m[3]) return null;
+  return { host: m[1], owner: m[2], repo: m[3] };
+}
+function githubSlugFromUrl(url2) {
+  const p = parse2(url2);
+  if (!p || !p.host.includes("github.")) return null;
+  return { owner: p.owner, repo: p.repo, slug: `${p.owner}/${p.repo}` };
+}
+async function resolveGithubRepo(projectId) {
+  const project = await prisma.project.findUnique({ where: { id: projectId } });
+  if (!project) return { ok: false, kind: "no-project", error: `project "${projectId}" tidak ada` };
+  const candidates = [];
+  if (project.gitRemote) candidates.push(project.gitRemote);
+  const repoDir = await resolveRepoDir(projectId).catch(() => null);
+  if (repoDir) {
+    const origin = (await listRemotes(repoDir)).find((r) => r.name === "origin");
+    if (origin?.fetch) candidates.push(origin.fetch);
+  }
+  if (candidates.length === 0)
+    return {
+      ok: false,
+      kind: "no-remote",
+      error: "project belum punya remote GitHub (isi gitRemote atau tambahkan origin di repo lokalnya)"
+    };
+  for (const url2 of candidates) {
+    const gh = githubSlugFromUrl(url2);
+    if (gh) return { ok: true, repo: gh };
+  }
+  const host2 = parse2(candidates[0])?.host ?? candidates[0];
+  return {
+    ok: false,
+    kind: "not-github",
+    error: `remote project ber-host "${host2}", bukan GitHub \u2014 tarik issue hanya mendukung GitHub`
+  };
 }
-var newSessionToken = () => randomBytes3(32).toString("base64url");
-var sessionId = (token) => createHash3("sha256").update(token).digest("hex");
-async function createSession2(userId) {
-  const token = newSessionToken();
-  await prisma.session.create({
-    data: { id: sessionId(token), userId, expiresAt: new Date(Date.now() + SESSION_TTL_MS) }
-  });
-  return token;
+
+// src/services/github-fetch.ts
+init_config2();
+import { execFile as execFile10 } from "node:child_process";
+var labelNames = (l) => (l ?? []).map((x) => typeof x === "string" ? x : x.name ?? "").filter(Boolean);
+var norm = (s) => s.toLowerCase() === "closed" ? "closed" : "open";
+function issueFromGh(raw) {
+  return {
+    number: raw.number,
+    title: raw.title,
+    body: raw.body ?? "",
+    authorLogin: raw.author?.login ?? "",
+    labels: labelNames(raw.labels),
+    url: raw.url,
+    issueState: norm(raw.state),
+    issueCreatedAt: raw.createdAt,
+    issueUpdatedAt: raw.updatedAt
+  };
 }
-async function lookupSession(token) {
-  const s = await prisma.session.findUnique({ where: { id: sessionId(token) }, include: { user: true } });
-  if (!s) return null;
-  if (s.expiresAt.getTime() < Date.now()) {
-    await prisma.session.delete({ where: { id: s.id } }).catch(() => {
+function issuesFromRest(raw) {
+  let skippedPullRequests = 0;
+  const issues = [];
+  for (const r of raw) {
+    if (r.pull_request !== void 0) {
+      skippedPullRequests++;
+      continue;
+    }
+    issues.push({
+      number: r.number,
+      title: r.title,
+      body: r.body ?? "",
+      authorLogin: r.user?.login ?? "",
+      labels: labelNames(r.labels),
+      url: r.html_url,
+      issueState: norm(r.state),
+      issueCreatedAt: r.created_at,
+      issueUpdatedAt: r.updated_at
     });
-    return null;
   }
-  return { id: s.user.id, email: s.user.email, createdAt: s.user.createdAt.toISOString() };
+  return { issues, skippedPullRequests };
 }
-async function deleteSession(token) {
-  await prisma.session.deleteMany({ where: { id: sessionId(token) } });
-}
-async function deleteUserSessions(userId, exceptToken) {
-  await prisma.session.deleteMany({
-    where: { userId, ...exceptToken ? { id: { not: sessionId(exceptToken) } } : {} }
+var GH_FIELDS = "number,title,body,author,labels,url,state,createdAt,updatedAt";
+var API2 = "https://api.github.com";
+var defaultRunGh = (args, env) => new Promise((resolve14, reject2) => {
+  execFile10(
+    args[0],
+    args.slice(1),
+    { env, maxBuffer: 1 << 26, encoding: "utf8", timeout: 6e4 },
+    (err, stdout, stderr) => {
+      const e = err;
+      if (e && (e.code === "ENOENT" || e.code === "EACCES")) return reject2(e);
+      resolve14({ code: err ? Number(err.code ?? 1) : 0, stdout, stderr });
+    }
+  );
+});
+var defaultHttpGet = async (url2, headers) => {
+  const res = await fetch(url2, {
+    headers: { Accept: "application/vnd.github+json", "User-Agent": "hanoman", ...headers }
   });
+  const json = await res.json().catch(() => null);
+  return { status: res.status, json };
+};
+function classifyGhStderr(stderr) {
+  const s = stderr.toLowerCase();
+  if (s.includes("gh auth login") || s.includes("bad credentials") || s.includes("http 401")) return "unauth";
+  if (s.includes("disabled issues")) return "issues-disabled";
+  if (s.includes("could not resolve to a repository") || s.includes("http 404")) return "not-found";
+  return "other";
 }
-var fails = /* @__PURE__ */ new Map();
+async function viaGh(repo, opts, deps) {
+  const bin = deps.ghBin ?? effectiveStr("HANOMAN_GH_BIN") ?? "gh";
+  const args = [
+    bin,
+    "issue",
+    "list",
+    "--repo",
+    repo.slug,
+    "--state",
+    opts.state,
+    "--limit",
+    String(opts.limit),
+    "--json",
+    GH_FIELDS
+  ];
+  const env = { ...process.env };
+  if (deps.token) env.GH_TOKEN = deps.token;
+  let out3;
+  try {
+    out3 = await (deps.runGh ?? defaultRunGh)(args, env);
+  } catch {
+    return { fallback: true, reason: "gh tak terpasang" };
+  }
+  if (out3.code !== 0) {
+    const kind = classifyGhStderr(out3.stderr);
+    if (kind === "unauth") return { fallback: true, reason: "gh tak terautentikasi" };
+    return { ok: false, kind, error: out3.stderr.trim() || `gh keluar dengan kode ${out3.code}` };
+  }
+  let raw;
+  try {
+    raw = JSON.parse(out3.stdout || "[]");
+  } catch {
+    return { ok: false, kind: "other", error: "keluaran gh bukan JSON" };
+  }
+  return { ok: true, issues: raw.map(issueFromGh), via: "gh", skippedPullRequests: 0 };
+}
+async function viaRest(repo, opts, deps) {
+  const get = deps.httpGet ?? defaultHttpGet;
+  const headers = {};
+  if (deps.token) headers.Authorization = `Bearer ${deps.token}`;
+  const meta = await get(`${API2}/repos/${repo.slug}`, headers);
+  if (meta.status === 404)
+    return { ok: false, kind: "not-found", error: `repo "${repo.slug}" tak ditemukan atau tak terjangkau` };
+  if (meta.status === 401 || meta.status === 403)
+    return { ok: false, kind: "unauthorized", error: "GitHub menolak kredensial \u2014 isi GITHUB_TOKEN di Settings" };
+  if (meta.status !== 200) return { ok: false, kind: "other", error: `GitHub menjawab HTTP ${meta.status}` };
+  if (meta.json?.has_issues === false)
+    return { ok: false, kind: "issues-disabled", error: `repo "${repo.slug}" mematikan fitur issue` };
+  const issues = [];
+  let skippedPullRequests = 0;
+  for (let page = 1; issues.length < opts.limit && page <= 10; page++) {
+    const per = Math.min(100, opts.limit - issues.length);
+    const res = await get(
+      `${API2}/repos/${repo.slug}/issues?state=${opts.state}&per_page=${per}&page=${page}`,
+      headers
+    );
+    if (res.status === 404) return { ok: false, kind: "not-found", error: `repo "${repo.slug}" tak ditemukan` };
+    if (res.status === 401 || res.status === 403)
+      return { ok: false, kind: "unauthorized", error: "GitHub menolak kredensial" };
+    if (res.status !== 200) return { ok: false, kind: "other", error: `GitHub menjawab HTTP ${res.status}` };
+    const batch = Array.isArray(res.json) ? res.json : [];
+    if (batch.length === 0) break;
+    const n = issuesFromRest(batch);
+    issues.push(...n.issues);
+    skippedPullRequests += n.skippedPullRequests;
+    if (batch.length < per) break;
+  }
+  return { ok: true, issues: issues.slice(0, opts.limit), via: "rest", skippedPullRequests };
+}
+async function fetchIssues(repo, opts, deps = {}) {
+  const token = deps.token ?? effectiveStr("GITHUB_TOKEN") ?? void 0;
+  const first = await viaGh(repo, opts, { ...deps, token });
+  if (!("fallback" in first)) return first;
+  return viaRest(repo, opts, { ...deps, token });
+}
+
+// src/services/github-issues.ts
+var issueRowId = (projectId, slug, number) => `${projectId}:${slug}#${number}`;
+async function pullIssues(projectId, opts = {}, deps = {}) {
+  const resolved = await resolveGithubRepo(projectId);
+  if (!resolved.ok) return { ok: false, kind: resolved.kind, error: resolved.error };
+  const state = opts.state ?? "open";
+  const limit = Math.min(Math.max(opts.limit ?? 200, 1), 1e3);
+  const got = await fetchIssues(resolved.repo, { state, limit }, deps);
+  if (!got.ok) return { ok: false, kind: got.kind, error: got.error };
+  const slug = resolved.repo.slug;
+  const now = /* @__PURE__ */ new Date();
+  let created = 0, updated = 0;
+  for (const i of got.issues) {
+    const id = issueRowId(projectId, slug, i.number);
+    const exists = await prisma.githubIssue.findUnique({ where: { id }, select: { id: true } });
+    const fresh = {
+      title: i.title,
+      body: i.body,
+      authorLogin: i.authorLogin,
+      labels: i.labels,
+      url: i.url,
+      issueState: i.issueState,
+      issueCreatedAt: new Date(i.issueCreatedAt),
+      issueUpdatedAt: new Date(i.issueUpdatedAt),
+      pulledAt: now
+    };
+    await prisma.githubIssue.upsert({
+      where: { id },
+      create: { id, projectId, repoSlug: slug, number: i.number, status: "new", specId: null, ...fresh },
+      update: fresh
+    });
+    if (exists) updated++;
+    else created++;
+    await notifySynced("githubIssue", id);
+  }
+  return {
+    ok: true,
+    repo: slug,
+    pulled: got.issues.length,
+    created,
+    updated,
+    via: got.via,
+    skippedPullRequests: got.skippedPullRequests
+  };
+}
+
+// src/services/github-accept.ts
+init_src();
+init_db();
+var backlinkOf = (i) => `Dari GitHub issue ${i.repoSlug}#${i.number} (${i.url}).`;
+async function acceptGithubIssue(issue2, opts) {
+  if (issue2.specId) {
+    const spec2 = await prisma.spec.findUnique({ where: { id: issue2.specId } });
+    if (spec2) return { spec: spec2, created: false };
+  }
+  const labels = Array.isArray(issue2.labels) ? issue2.labels : [];
+  const source = opts.source ?? sourceForLabels(labels);
+  const priority = opts.priority ?? "sedang";
+  const backlink = backlinkOf(issue2);
+  const detail = `${issue2.body}
+
+Pelapor: @${issue2.authorLogin}
+Label: ${labels.length ? labels.join(", ") : "(tanpa label)"}
+${backlink}`;
+  const payload = source === "qa" ? {
+    severity: "major",
+    steps: "Reproduksi dari deskripsi issue.",
+    expected: "Perilaku yang diharapkan pelapor issue.",
+    actual: detail,
+    env: ""
+  } : { context: detail, outcome: "", constraints: "", priority };
+  const repoDir = await resolveRepoDir(issue2.projectId).catch(() => null);
+  let spec = null;
+  for (let attempt = 0; attempt < 3 && !spec; attempt++) {
+    const sid = await nextSpecId(repoDir);
+    try {
+      spec = await prisma.spec.create({
+        data: {
+          id: sid,
+          projectId: issue2.projectId,
+          title: issue2.title,
+          source,
+          stage: "brainstorming",
+          priority,
+          author: `GitHub \xB7 ${opts.author}`,
+          objective: `${issue2.title}. ${backlink}`,
+          payload
+        }
+      });
+    } catch (e) {
+      if (e.code === "P2002" && attempt < 2) continue;
+      throw e;
+    }
+  }
+  await prisma.githubIssue.update({
+    where: { id: issue2.id },
+    data: { status: "accepted", specId: spec.id }
+  });
+  await notifySynced("spec", spec.id);
+  await notifySynced("githubIssue", issue2.id);
+  return { spec, created: true };
+}
+
+// src/routes/github-issues.ts
+var zPull = external_exports.object({
+  state: external_exports.enum(["open", "all"]).optional(),
+  limit: external_exports.number().int().min(1).max(1e3).optional()
+}).default({});
+var zAccept = external_exports.object({
+  priority: external_exports.enum(["tinggi", "sedang", "rendah"]).optional(),
+  source: external_exports.enum(["qa", "brief", "audit"]).optional()
+}).default({});
+var zAcceptMany = external_exports.object({
+  ids: external_exports.array(external_exports.string().min(1)).min(1).max(100),
+  priority: external_exports.enum(["tinggi", "sedang", "rendah"]).optional(),
+  source: external_exports.enum(["qa", "brief", "audit"]).optional()
+});
+var STATUS = {
+  "no-project": 404,
+  "not-found": 404,
+  "no-remote": 400,
+  "not-github": 400,
+  "issues-disabled": 400,
+  unauthorized: 401,
+  other: 502
+};
+var view7 = (i) => ({
+  id: i.id,
+  projectId: i.projectId,
+  repoSlug: i.repoSlug,
+  number: i.number,
+  title: i.title,
+  body: i.body,
+  authorLogin: i.authorLogin,
+  labels: Array.isArray(i.labels) ? i.labels : [],
+  url: i.url,
+  issueState: i.issueState,
+  status: i.status,
+  specId: i.specId,
+  issueCreatedAt: i.issueCreatedAt.toISOString(),
+  issueUpdatedAt: i.issueUpdatedAt.toISOString(),
+  pulledAt: i.pulledAt.toISOString()
+});
+async function githubIssues(app2) {
+  app2.post("/projects/:id/github/pull", async (req, reply) => {
+    const { id } = req.params;
+    const parsed = zPull.safeParse(req.body ?? {});
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    const r = await pullIssues(id, parsed.data);
+    if (!r.ok) return reply.code(STATUS[r.kind] ?? 400).send({ error: r.error });
+    return reply.code(200).send(r);
+  });
+  app2.get("/projects/:id/github/issues", async (req, reply) => {
+    const { id } = req.params;
+    const { status } = req.query;
+    const project = await prisma.project.findUnique({ where: { id }, select: { id: true } });
+    if (!project) return reply.code(404).send({ error: "not found" });
+    const items = await prisma.githubIssue.findMany({
+      where: { projectId: id, ...status ? { status } : {} },
+      orderBy: [{ number: "desc" }]
+    });
+    return reply.send({ items: items.map(view7) });
+  });
+  app2.post("/github-issues/accept", async (req, reply) => {
+    const parsed = zAcceptMany.safeParse(req.body ?? {});
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    const { ids, priority, source } = parsed.data;
+    const author = req.user?.email ?? "system";
+    const created = [];
+    const failed = [];
+    for (const id of ids) {
+      const issue2 = await prisma.githubIssue.findUnique({ where: { id } });
+      if (!issue2) {
+        failed.push({ id, error: "not found" });
+        continue;
+      }
+      try {
+        created.push((await acceptGithubIssue(issue2, { author, priority, source })).spec);
+      } catch (e) {
+        failed.push({ id, error: e.message });
+      }
+    }
+    return reply.code(201).send({ created, failed });
+  });
+  app2.post("/github-issues/:id/accept", async (req, reply) => {
+    const { id } = req.params;
+    const parsed = zAccept.safeParse(req.body ?? {});
+    if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+    const issue2 = await prisma.githubIssue.findUnique({ where: { id } });
+    if (!issue2) return reply.code(404).send({ error: "not found" });
+    const { spec, created } = await acceptGithubIssue(issue2, {
+      author: req.user?.email ?? "system",
+      priority: parsed.data.priority,
+      source: parsed.data.source
+    });
+    return reply.code(created ? 201 : 200).send(created ? { spec } : { spec, alreadyPromoted: true });
+  });
+  app2.post("/github-issues/:id/reject", async (req, reply) => {
+    const { id } = req.params;
+    const issue2 = await prisma.githubIssue.findUnique({ where: { id } });
+    if (!issue2) return reply.code(404).send({ error: "not found" });
+    const row = await prisma.githubIssue.update({ where: { id }, data: { status: "rejected" } });
+    await notifySynced("githubIssue", id);
+    return reply.send({ id: row.id, status: row.status });
+  });
+  app2.post("/github-issues/:id/unlink", async (req, reply) => {
+    const { id } = req.params;
+    const issue2 = await prisma.githubIssue.findUnique({ where: { id } });
+    if (!issue2) return reply.code(404).send({ error: "not found" });
+    const row = await prisma.githubIssue.update({ where: { id }, data: { status: "new", specId: null } });
+    await notifySynced("githubIssue", id);
+    return reply.send({ id: row.id, status: row.status, specId: row.specId });
+  });
+}
+
+// src/routes/telegram.ts
+init_zod();
+init_src();
+init_db();
+import { randomBytes as randomBytes3 } from "node:crypto";
+
+// src/services/telegram/runtime.ts
+var stoppedStatus = () => ({
+  configured: false,
+  enabled: false,
+  running: false,
+  readiness: "disabled",
+  botUsername: null,
+  allowlistCount: 0,
+  agentTokenConfigured: false,
+  missingCapabilities: [],
+  lastUpdateAt: null,
+  lastError: null
+});
+var registration = {
+  agentTokenId: null,
+  status: stoppedStatus()
+};
+var stopRuntime = null;
+function setTelegramRuntime(input) {
+  registration = {
+    agentTokenId: input.agentTokenId === void 0 ? registration.agentTokenId : input.agentTokenId,
+    status: input.status ?? registration.status
+  };
+}
+function updateTelegramRuntimeStatus(patch) {
+  registration = { ...registration, status: { ...registration.status, ...patch } };
+}
+function telegramRuntimeStatus() {
+  return { ...registration.status };
+}
+function telegramGatewayAgentTokenId() {
+  return registration.agentTokenId;
+}
+function registerTelegramRuntimeStop(stop) {
+  stopRuntime = stop;
+}
+async function stopTelegramRuntime() {
+  const stop = stopRuntime;
+  stopRuntime = null;
+  if (stop) await stop();
+}
+
+// src/services/telegram/store.ts
+import { Prisma } from "@prisma/client";
+var isUnique = (error) => error instanceof Prisma.PrismaClientKnownRequestError && error.code === "P2002";
+var TelegramStore = class {
+  constructor(db) {
+    this.db = db;
+  }
+  async recordUpdate(input) {
+    try {
+      await this.db.$transaction(async (tx) => {
+        await tx.telegramUpdate.create({ data: {
+          updateId: input.updateId,
+          chatId: input.chatId ?? null,
+          userId: input.userId ?? null,
+          kind: input.kind,
+          digest: input.digest
+        } });
+        const current = await tx.telegramGatewayState.findUnique({ where: { id: 1 }, select: { offset: true } });
+        const offset = Math.max(current?.offset ?? 0, input.updateId + 1);
+        await tx.telegramGatewayState.upsert({
+          where: { id: 1 },
+          create: { id: 1, offset, lastUpdateAt: /* @__PURE__ */ new Date() },
+          update: { offset, lastUpdateAt: /* @__PURE__ */ new Date() }
+        });
+      });
+      return true;
+    } catch (error) {
+      if (isUnique(error)) return false;
+      throw error;
+    }
+  }
+  async offset() {
+    return (await this.db.telegramGatewayState.findUnique({ where: { id: 1 } }))?.offset ?? 0;
+  }
+  async claimUpdate(updateId) {
+    return (await this.db.telegramUpdate.updateMany({
+      where: { updateId, state: "received" },
+      data: { state: "dispatching", claimedAt: /* @__PURE__ */ new Date() }
+    })).count === 1;
+  }
+  async markDispatched(updateId) {
+    await this.db.telegramUpdate.updateMany({
+      where: { updateId, state: "dispatching" },
+      data: { state: "dispatched", dispatchedAt: /* @__PURE__ */ new Date() }
+    });
+  }
+  async rejectUpdate(updateId, reason) {
+    return (await this.db.telegramUpdate.updateMany({
+      where: { updateId, state: "received" },
+      data: { state: "rejected", rejectReason: reason }
+    })).count === 1;
+  }
+  async recoverUncertainClaims() {
+    return (await this.db.telegramUpdate.updateMany({
+      where: { state: { in: ["received", "dispatching"] } },
+      data: { state: "uncertain" }
+    })).count;
+  }
+  async ensureChat(input) {
+    return this.db.telegramChat.upsert({
+      where: { chatId: input.chatId },
+      create: input,
+      update: { userId: input.userId }
+    });
+  }
+  async chatContext(chatId) {
+    const chat = await this.db.telegramChat.findUnique({ where: { chatId } });
+    if (!chat) return null;
+    const memories = await this.db.telegramMemory.findMany({ where: { chatId }, orderBy: { createdAt: "asc" } });
+    return {
+      chatId: chat.chatId,
+      userId: chat.userId,
+      sessionId: chat.sessionId,
+      activeProjectId: chat.activeProjectId,
+      activeSessionId: chat.activeSessionId,
+      personalityAgentId: chat.personalityAgentId,
+      summary: chat.summary,
+      agent: chat.agent,
+      model: chat.model,
+      effort: chat.effort,
+      memories: memories.map(this.memoryView)
+    };
+  }
+  patchChat(chatId, patch) {
+    return this.db.telegramChat.update({ where: { chatId }, data: patch });
+  }
+  async bindSession(chatId, sessionId2) {
+    await this.db.telegramChat.update({ where: { chatId }, data: { sessionId: sessionId2 } });
+  }
+  async rateLimitExceeded(userId, since, limit) {
+    return await this.db.telegramUpdate.count({ where: { userId, receivedAt: { gte: since } } }) > limit;
+  }
+  async markUpdateUncertain(updateId, reason) {
+    await this.db.telegramUpdate.updateMany({
+      where: { updateId, state: "dispatching" },
+      data: { state: "uncertain", rejectReason: reason }
+    });
+  }
+  async addMemory(chatId, content) {
+    return this.memoryView(await this.db.telegramMemory.create({ data: { chatId, content } }));
+  }
+  async forgetMemory(chatId, id) {
+    return (await this.db.telegramMemory.deleteMany({ where: { id, chatId } })).count === 1;
+  }
+  async resetMemory(chatId) {
+    const chat = await this.db.telegramChat.findUnique({ where: { chatId }, select: { chatId: true } });
+    if (!chat) return false;
+    await this.db.$transaction([
+      this.db.telegramMemory.deleteMany({ where: { chatId } }),
+      this.db.telegramChat.update({ where: { chatId }, data: { summary: null } })
+    ]);
+    return true;
+  }
+  memoryView(row) {
+    return { ...row, createdAt: row.createdAt.toISOString(), updatedAt: row.updatedAt.toISOString() };
+  }
+  async enqueueReply(input) {
+    const dedupeKey = `${input.chatId}:${input.updateId}:${input.kind}`;
+    try {
+      return await this.db.$transaction(async (tx) => {
+        const existing = await tx.telegramOutbox.findUnique({ where: { dedupeKey } });
+        if (existing) return existing;
+        let confirmationId = null;
+        if (input.confirmation) {
+          const confirmation = await tx.telegramConfirmation.create({ data: {
+            callbackToken: input.confirmation.callbackToken,
+            chatId: input.chatId,
+            userId: input.confirmation.userId,
+            updateId: input.updateId,
+            description: input.confirmation.description,
+            method: input.confirmation.method,
+            path: input.confirmation.path,
+            expiresAt: input.confirmation.expiresAt
+          } });
+          confirmationId = confirmation.id;
+        }
+        return tx.telegramOutbox.create({ data: {
+          chatId: input.chatId,
+          updateId: input.updateId,
+          kind: input.kind,
+          dedupeKey,
+          text: input.text,
+          confirmationId
+        } });
+      });
+    } catch (error) {
+      if (!isUnique(error)) throw error;
+      return await this.db.telegramOutbox.findUnique({ where: { dedupeKey } });
+    }
+  }
+  async claimNextOutbox() {
+    for (; ; ) {
+      const row = await this.db.telegramOutbox.findFirst({ where: { state: "pending" }, orderBy: { createdAt: "asc" } });
+      if (!row) return null;
+      const claimed = await this.db.telegramOutbox.updateMany({
+        where: { id: row.id, state: "pending" },
+        data: { state: "sending", claimedAt: /* @__PURE__ */ new Date() }
+      });
+      if (claimed.count === 1) return this.db.telegramOutbox.findUnique({ where: { id: row.id } });
+    }
+  }
+  async recoverUncertainOutbox() {
+    return (await this.db.telegramOutbox.updateMany({ where: { state: "sending" }, data: { state: "uncertain" } })).count;
+  }
+  markOutboxSent(id, telegramMessageId) {
+    return this.db.telegramOutbox.updateMany({
+      where: { id, state: "sending" },
+      data: { state: "sent", telegramMessageId, sentAt: /* @__PURE__ */ new Date() }
+    });
+  }
+  markOutboxFailed(id, error) {
+    return this.db.telegramOutbox.updateMany({ where: { id, state: "sending" }, data: { state: "failed", error } });
+  }
+  markOutboxUncertain(id, error) {
+    return this.db.telegramOutbox.updateMany({ where: { id, state: "sending" }, data: { state: "uncertain", error } });
+  }
+  confirmation(id) {
+    return this.db.telegramConfirmation.findUnique({ where: { id } });
+  }
+  async resolveConfirmation(input) {
+    const now = input.now ?? /* @__PURE__ */ new Date();
+    const row = await this.db.telegramConfirmation.findUnique({ where: { callbackToken: input.callbackToken } });
+    if (!row || row.chatId !== input.chatId || row.userId !== input.userId || row.state !== "pending") return "invalid";
+    if (row.expiresAt <= now) {
+      await this.db.telegramConfirmation.updateMany({
+        where: { id: row.id, state: "pending" },
+        data: { state: "expired" }
+      });
+      return "expired";
+    }
+    const state = input.action === "approve" ? "approved" : "denied";
+    const changed = await this.db.telegramConfirmation.updateMany({
+      where: { id: row.id, state: "pending" },
+      data: { state, ...state === "approved" ? { approvedAt: now } : {} }
+    });
+    return changed.count === 1 ? state : "invalid";
+  }
+  async audit(input) {
+    const row = await this.db.telegramAudit.create({ data: {
+      chatId: input.chatId ?? null,
+      userId: input.userId ?? null,
+      updateId: input.updateId ?? null,
+      action: input.action,
+      outcome: input.outcome,
+      correlationId: input.correlationId ?? null,
+      method: input.method ?? null,
+      path: input.path ?? null,
+      statusCode: input.statusCode ?? null
+    } });
+    return { ...row, createdAt: row.createdAt.toISOString() };
+  }
+  async listAudit(input) {
+    const where = {
+      ...input.chatId ? { chatId: input.chatId } : {},
+      ...input.updateId !== void 0 ? { updateId: input.updateId } : {}
+    };
+    const [rows, total] = await this.db.$transaction([
+      this.db.telegramAudit.findMany({ where, orderBy: { createdAt: "desc" }, take: input.take, skip: input.skip }),
+      this.db.telegramAudit.count({ where })
+    ]);
+    return { items: rows.map((row) => ({ ...row, createdAt: row.createdAt.toISOString() })), total };
+  }
+};
+
+// src/routes/telegram.ts
+var store = new TelegramStore(prisma);
+var zContextPatch = external_exports.object({
+  activeProjectId: external_exports.string().min(1).nullable().optional(),
+  activeSessionId: external_exports.string().min(1).nullable().optional(),
+  personalityAgentId: external_exports.string().min(1).nullable().optional(),
+  summary: external_exports.string().trim().min(1).max(4e3).nullable().optional()
+}).refine((value) => Object.keys(value).length > 0, "empty patch");
+var zMemory = external_exports.object({ content: external_exports.string().trim().min(1).max(1e3) });
+async function telegramRoutes(app2) {
+  app2.get("/telegram/status", async () => telegramRuntimeStatus());
+  app2.get("/telegram/chats/:chatId/context", async (req, reply) => {
+    const context = await store.chatContext(req.params.chatId);
+    return context ?? reply.code(404).send({ error: "chat not found" });
+  });
+  app2.patch("/telegram/chats/:chatId/context", async (req, reply) => {
+    const parsed = zContextPatch.safeParse(req.body);
+    if (!parsed.success) return reply.code(400).send({ error: "invalid body" });
+    const chatId = req.params.chatId;
+    try {
+      await store.patchChat(chatId, parsed.data);
+    } catch {
+      return reply.code(404).send({ error: "chat not found" });
+    }
+    return store.chatContext(chatId);
+  });
+  app2.post("/telegram/chats/:chatId/memories", async (req, reply) => {
+    const parsed = zMemory.safeParse(req.body);
+    if (!parsed.success) return reply.code(400).send({ error: "invalid body" });
+    const chatId = req.params.chatId;
+    if (!await prisma.telegramChat.findUnique({ where: { chatId }, select: { chatId: true } })) {
+      return reply.code(404).send({ error: "chat not found" });
+    }
+    return reply.code(201).send(await store.addMemory(chatId, parsed.data.content));
+  });
+  app2.delete("/telegram/chats/:chatId/memories/:id", async (req, reply) => {
+    const { chatId, id } = req.params;
+    if (!await store.forgetMemory(chatId, id)) return reply.code(404).send({ error: "memory not found" });
+    return reply.code(204).send();
+  });
+  app2.delete("/telegram/chats/:chatId/memories", async (req, reply) => {
+    if (!await store.resetMemory(req.params.chatId)) {
+      return reply.code(404).send({ error: "chat not found" });
+    }
+    return reply.code(204).send();
+  });
+  app2.post("/telegram/replies", async (req, reply) => {
+    const parsed = zTelegramReplyInput.safeParse(req.body);
+    if (!parsed.success) return reply.code(400).send({ error: "invalid body" });
+    const input = parsed.data;
+    const update2 = await prisma.telegramUpdate.findFirst({
+      where: { updateId: input.updateId, chatId: input.chatId, state: { in: ["dispatching", "dispatched"] } }
+    });
+    if (!update2?.userId) return reply.code(409).send({ error: "update/chat correlation invalid" });
+    const outbox = await store.enqueueReply({
+      chatId: input.chatId,
+      updateId: input.updateId,
+      kind: input.kind,
+      text: input.text,
+      ...input.confirmation ? { confirmation: {
+        callbackToken: randomBytes3(12).toString("base64url"),
+        userId: update2.userId,
+        description: input.confirmation.description,
+        method: input.confirmation.method,
+        path: input.confirmation.path,
+        expiresAt: new Date(Date.now() + 10 * 6e4)
+      } } : {}
+    });
+    if (input.summary !== void 0) await store.patchChat(input.chatId, { summary: input.summary });
+    for (const memory of input.remember ?? []) await store.addMemory(input.chatId, memory);
+    await store.audit({
+      chatId: input.chatId,
+      userId: update2.userId,
+      updateId: input.updateId,
+      action: "reply-enqueue",
+      outcome: input.kind,
+      correlationId: `tg:${input.updateId}`
+    });
+    return reply.code(202).send({ id: outbox.id, state: outbox.state });
+  });
+  app2.get("/telegram/audit", async (req, reply) => {
+    const parsed = external_exports.object({
+      chatId: external_exports.string().optional(),
+      updateId: external_exports.coerce.number().int().nonnegative().optional(),
+      take: external_exports.coerce.number().int().min(1).max(100).default(50),
+      skip: external_exports.coerce.number().int().min(0).default(0)
+    }).safeParse(req.query);
+    if (!parsed.success) return reply.code(400).send({ error: "invalid query" });
+    return store.listAudit(parsed.data);
+  });
+}
+
+// src/app.ts
+var import_multipart = __toESM(require_multipart2(), 1);
+
+// src/routes/auth.ts
+init_src();
+init_db();
+
+// src/services/auth.ts
+init_db();
+import { randomBytes as randomBytes4, scrypt as scryptCb, timingSafeEqual, createHash as createHash3 } from "node:crypto";
+import { promisify as promisify9 } from "node:util";
+var scrypt = promisify9(scryptCb);
+var COOKIE_NAME = "hn_session";
+var SESSION_TTL_MS = 7 * 24 * 3600 * 1e3;
+async function hashPassword(pw) {
+  const salt = randomBytes4(16);
+  const key = await scrypt(pw, salt, 64);
+  return `${salt.toString("hex")}:${key.toString("hex")}`;
+}
+async function verifyPassword(pw, stored) {
+  const [saltHex, hashHex] = stored.split(":");
+  if (!saltHex || !hashHex) return false;
+  const key = await scrypt(pw, Buffer.from(saltHex, "hex"), 64);
+  const want = Buffer.from(hashHex, "hex");
+  return key.length === want.length && timingSafeEqual(key, want);
+}
+var newSessionToken = () => randomBytes4(32).toString("base64url");
+var sessionId = (token) => createHash3("sha256").update(token).digest("hex");
+async function createSession2(userId) {
+  const token = newSessionToken();
+  await prisma.session.create({
+    data: { id: sessionId(token), userId, expiresAt: new Date(Date.now() + SESSION_TTL_MS) }
+  });
+  return token;
+}
+async function lookupSession(token) {
+  const s = await prisma.session.findUnique({ where: { id: sessionId(token) }, include: { user: true } });
+  if (!s) return null;
+  if (s.expiresAt.getTime() < Date.now()) {
+    await prisma.session.delete({ where: { id: s.id } }).catch(() => {
+    });
+    return null;
+  }
+  return { id: s.user.id, email: s.user.email, createdAt: s.user.createdAt.toISOString() };
+}
+async function deleteSession(token) {
+  await prisma.session.deleteMany({ where: { id: sessionId(token) } });
+}
+async function deleteUserSessions(userId, exceptToken) {
+  await prisma.session.deleteMany({
+    where: { userId, ...exceptToken ? { id: { not: sessionId(exceptToken) } } : {} }
+  });
+}
+var fails = /* @__PURE__ */ new Map();
 function loginThrottle(ip) {
   const f = fails.get(ip);
   return { blocked: !!f && f.until > Date.now() };
@@ -23796,7 +25132,7 @@ function cookieOpts() {
 }
 
 // src/routes/auth.ts
-var view7 = (u) => ({ id: u.id, email: u.email, createdAt: u.createdAt.toISOString() });
+var view8 = (u) => ({ id: u.id, email: u.email, createdAt: u.createdAt.toISOString() });
 async function issue(reply, userId) {
   const token = await createSession2(userId);
   reply.setCookie(COOKIE_NAME, token, cookieOpts());
@@ -23814,7 +25150,7 @@ async function auth_default(app2) {
       data: { email: p.data.email, passwordHash: await hashPassword(p.data.password) }
     });
     await issue(reply, user.id);
-    return { user: view7(user) };
+    return { user: view8(user) };
   });
   app2.post("/auth/login", async (req, reply) => {
     if (loginThrottle(req.ip).blocked) return reply.code(429).send({ error: "too many attempts" });
@@ -23827,7 +25163,7 @@ async function auth_default(app2) {
     }
     clearLoginFails(req.ip);
     await issue(reply, user.id);
-    return { user: view7(user) };
+    return { user: view8(user) };
   });
   app2.post("/auth/logout", async (req, reply) => {
     const token = req.cookies?.[COOKIE_NAME];
@@ -23835,7 +25171,7 @@ async function auth_default(app2) {
     reply.clearCookie(COOKIE_NAME, { path: "/" });
     return reply.code(204).send();
   });
-  app2.get("/auth/users", async () => (await prisma.user.findMany({ orderBy: { createdAt: "asc" } })).map(view7));
+  app2.get("/auth/users", async () => (await prisma.user.findMany({ orderBy: { createdAt: "asc" } })).map(view8));
   app2.post("/auth/users", async (req, reply) => {
     const p = zSignup.safeParse(req.body);
     if (!p.success) return reply.code(400).send({ error: p.error.flatten() });
@@ -23844,7 +25180,7 @@ async function auth_default(app2) {
     const user = await prisma.user.create({
       data: { email: p.data.email, passwordHash: await hashPassword(p.data.password) }
     });
-    return view7(user);
+    return view8(user);
   });
   app2.delete("/auth/users/:id", async (req, reply) => {
     if (await prisma.user.count() <= 1) return reply.code(400).send({ error: "tak bisa hapus user terakhir" });
@@ -23864,7 +25200,7 @@ async function auth_default(app2) {
     });
     await deleteUserSessions(user.id);
     await issue(reply, user.id);
-    return { user: view7(user) };
+    return { user: view8(user) };
   });
 }
 
@@ -23873,7 +25209,7 @@ init_src();
 
 // src/services/agent-token.ts
 init_db();
-import { randomBytes as randomBytes4, createHash as createHash4, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
+import { randomBytes as randomBytes5, createHash as createHash4, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
 var hash = (token) => createHash4("sha256").update(token).digest("hex");
 function toAgentTokenView(t) {
   return {
@@ -23889,7 +25225,7 @@ function toAgentTokenView(t) {
   };
 }
 async function issueAgentToken(input) {
-  const token = "hnm_agt_" + randomBytes4(24).toString("hex");
+  const token = "hnm_agt_" + randomBytes5(24).toString("hex");
   const row = await prisma.agentToken.create({
     data: {
       name: input.name,
@@ -23943,15 +25279,15 @@ async function agent_tokens_default(app2) {
   app2.post("/agent-tokens", async (req, reply) => {
     const p = zAgentTokenCreate.safeParse(req.body);
     if (!p.success) return reply.code(400).send({ error: p.error.flatten() });
-    const { view: view8, token } = await issueAgentToken({ ...p.data, createdBy: req.user?.id });
-    return reply.code(201).send({ ...view8, token });
+    const { view: view9, token } = await issueAgentToken({ ...p.data, createdBy: req.user?.id });
+    return reply.code(201).send({ ...view9, token });
   });
   app2.patch("/agent-tokens/:id", async (req, reply) => {
     const p = zAgentTokenPatch.safeParse(req.body);
     if (!p.success) return reply.code(400).send({ error: p.error.flatten() });
     const { id } = req.params;
-    const view8 = await patchAgentToken(id, p.data);
-    return view8 ? reply.send(view8) : reply.code(404).send({ error: "not found" });
+    const view9 = await patchAgentToken(id, p.data);
+    return view9 ? reply.send(view9) : reply.code(404).send({ error: "not found" });
   });
   app2.delete("/agent-tokens/:id", async (req, reply) => {
     const { id } = req.params;
@@ -24000,10 +25336,12 @@ function capabilityForRoute(method, path) {
   if (top === "scheduler") return rw("settings");
   if (top === "lead") return rw("lead");
   if (top === "custom-agents") return rw("agents");
+  if (top === "telegram") return rw("telegram");
   if (top === "settings" || top === "config") return rw("settings");
   if (top === "specs") return rw("backlog");
   if (top === "notifications") return rw("notifications");
   if (top === "tickets") return rw("support");
+  if (top === "github-issues") return rw("support");
   if (top === "vps") return rw("vps");
   if (top === "prds") return rw("docs");
   if (top === "terminal") {
@@ -24013,6 +25351,7 @@ function capabilityForRoute(method, path) {
   if (top === "projects") {
     const sub = seg[2];
     if (sub === "docs" || sub === "prds") return rw("docs");
+    if (sub === "github") return rw("support");
     if (sub && IDE_SUBS.has(sub)) return rw("ide");
     return rw("projects");
   }
@@ -24028,6 +25367,119 @@ function checkAgentCapability(caps, method, path) {
 
 // src/app.ts
 init_pty();
+
+// src/services/telegram/security.ts
+init_db();
+var store2 = new TelegramStore(prisma);
+function isDestructiveTelegramRequest(method, path, body) {
+  const verb = method.toUpperCase();
+  if (verb === "DELETE") return true;
+  if (verb === "POST") {
+    if (/\/update\/apply$/.test(path)) return true;
+    if (/\/(?:specs|terminal\/sessions)\/[^/]+\/integrate$/.test(path)) return true;
+    if (/\/projects\/[^/]+\/(?:git\/(?:merge|rebase|drop|reset|clean)|branches\/delete)$/.test(path)) return true;
+    if (/\/projects\/[^/]+\/git$/.test(path)) {
+      const data = typeof body === "object" && body !== null ? body : {};
+      return (/* @__PURE__ */ new Set([
+        "merge",
+        "cherry-pick",
+        "revert",
+        "delete-branch",
+        "reset",
+        "delete-tag",
+        "reset-worktree",
+        "clean",
+        "stash-pop",
+        "stash-drop"
+      ])).has(String(data.op ?? ""));
+    }
+    if (/\/vps\/[^/]+\/(?:harden|remediate)$/.test(path)) return true;
+  }
+  if (verb === "PATCH" && /\/specs\/[^/]+$/.test(path)) {
+    const data = typeof body === "object" && body !== null ? body : {};
+    return typeof data.stage === "string" && data.confirmDelete === true;
+  }
+  return false;
+}
+var header = (req, name2) => {
+  const value = req.headers[name2];
+  return typeof value === "string" && value ? value : null;
+};
+async function reject(req, reply, message, updateId) {
+  const path = req.url.split("?")[0] ?? req.url;
+  await store2.audit({
+    updateId: updateId ?? null,
+    action: "api-guard",
+    outcome: `rejected:${message}`,
+    correlationId: updateId === void 0 ? null : `tg:${updateId}`,
+    method: req.method,
+    path,
+    statusCode: 403
+  }).catch(() => {
+  });
+  await reply.code(403).send({ error: message });
+}
+async function guardTelegramGatewayRequest(req, reply) {
+  const gatewayId = telegramGatewayAgentTokenId();
+  if (!gatewayId || req.agent?.id !== gatewayId) return;
+  const correlation = header(req, "x-hanoman-telegram-update");
+  const updateId = correlation && /^\d+$/.test(correlation) ? Number(correlation) : null;
+  if (updateId === null || !Number.isSafeInteger(updateId)) {
+    return reject(req, reply, "telegram correlation required");
+  }
+  const update2 = await prisma.telegramUpdate.findUnique({ where: { updateId } });
+  if (!update2?.chatId || !update2.userId) return reject(req, reply, "telegram correlation invalid", updateId);
+  const path = req.url.split("?")[0] ?? req.url;
+  if (!isDestructiveTelegramRequest(req.method, path, req.body)) return;
+  const confirmationId = header(req, "x-hanoman-telegram-confirmation");
+  if (!confirmationId) return reject(req, reply, "telegram confirmation required", updateId);
+  const consumed = await prisma.telegramConfirmation.updateMany({
+    where: {
+      id: confirmationId,
+      state: "approved",
+      updateId,
+      chatId: update2.chatId,
+      userId: update2.userId,
+      method: req.method,
+      path,
+      expiresAt: { gt: /* @__PURE__ */ new Date() }
+    },
+    data: { state: "used", usedAt: /* @__PURE__ */ new Date() }
+  });
+  if (consumed.count !== 1) return reject(req, reply, "telegram confirmation invalid", updateId);
+  await store2.audit({
+    chatId: update2.chatId,
+    userId: update2.userId,
+    updateId,
+    action: "confirmation-consume",
+    outcome: "accepted",
+    correlationId: `tg:${updateId}`,
+    method: req.method,
+    path
+  }).catch(() => {
+  });
+}
+async function auditTelegramGatewayResponse(req, reply) {
+  const gatewayId = telegramGatewayAgentTokenId();
+  if (!gatewayId || req.agent?.id !== gatewayId) return;
+  const value = header(req, "x-hanoman-telegram-update");
+  const updateId = value && /^\d+$/.test(value) ? Number(value) : null;
+  const update2 = updateId === null ? null : await prisma.telegramUpdate.findUnique({ where: { updateId } });
+  await store2.audit({
+    chatId: update2?.chatId ?? null,
+    userId: update2?.userId ?? null,
+    updateId,
+    action: "api-request",
+    outcome: reply.statusCode < 400 ? "accepted" : "rejected",
+    correlationId: updateId === null ? null : `tg:${updateId}`,
+    method: req.method,
+    path: req.url.split("?")[0] ?? req.url,
+    statusCode: reply.statusCode
+  }).catch(() => {
+  });
+}
+
+// src/app.ts
 var PUBLIC = /* @__PURE__ */ new Set([
   "GET /api/health",
   "GET /api/auth/status",
@@ -24047,6 +25499,7 @@ function buildApp({ requireAuth = true } = {}) {
   });
   app2.register(websocket);
   app2.addHook("onClose", async () => {
+    await stopTelegramRuntime();
     detachAll();
   });
   app2.register(async (api) => {
@@ -24080,6 +25533,8 @@ function buildApp({ requireAuth = true } = {}) {
         return reply.code(401).send({ error: "unauthorized" });
       });
     }
+    api.addHook("preHandler", guardTelegramGatewayRequest);
+    api.addHook("onResponse", auditTelegramGatewayResponse);
     await api.register(auth_default);
     await api.register(health_default);
     await api.register(projects_default);
@@ -24107,6 +25562,8 @@ function buildApp({ requireAuth = true } = {}) {
     await api.register(codex);
     await api.register(lead_default);
     await api.register(custom_agents_default);
+    await api.register(githubIssues);
+    await api.register(telegramRoutes);
   }, { prefix: "/api" });
   if (process.env.NODE_ENV === "production") {
     const dist = pickWebDir(dirname12(fileURLToPath4(import.meta.url)), process.env, existsSync11);
@@ -24224,13 +25681,14 @@ async function reconcile(deps) {
       }
       if (stage === "done") {
         await recordCompletion(item.specId, spec.title, spec.projectId);
+        const head = p?.cwd ? await recordHeadSha(item.specId, p.cwd, deps.headSha) : null;
         const existing = await prisma.sessionResult.findFirst({ where: { specId: item.specId, newStage: "done" } });
         if (!existing) {
           await recordSessionResult({
             projectId: spec.projectId,
             specId: item.specId,
             newStage: "done",
-            commitSha: p?.cwd ? deps.headSha(p.cwd) : null,
+            commitSha: head,
             branch: `hanoman/${item.sessionId}`,
             status: "done"
           }).catch(() => {
@@ -24376,6 +25834,587 @@ function registerTriaseSource() {
 
 // src/server.ts
 init_pty();
+
+// src/services/telegram/bootstrap.ts
+init_src2();
+init_db();
+import { mkdirSync as mkdirSync7 } from "node:fs";
+init_pty();
+
+// src/services/telegram/client.ts
+var TelegramApiError = class extends Error {
+  constructor(method, code, message) {
+    super(`Telegram ${method} gagal${code ? ` (${code})` : ""}: ${message}`);
+    this.method = method;
+    this.code = code;
+    this.name = "TelegramApiError";
+  }
+};
+var TelegramApiClient = class {
+  constructor(token, transport = (url2, init) => fetch(url2, init), baseUrl = "https://api.telegram.org") {
+    this.token = token;
+    this.transport = transport;
+    this.baseUrl = baseUrl;
+  }
+  safe(message) {
+    return message.split(this.token).join("[REDACTED]").replace(/https:\/\/api\.telegram\.org\/bot[^/\s]+/g, "https://api.telegram.org/bot[REDACTED]");
+  }
+  async call(method, body, signal) {
+    let response;
+    try {
+      response = await this.transport(`${this.baseUrl}/bot${this.token}/${method}`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify(body),
+        signal
+      });
+    } catch (error) {
+      throw new TelegramApiError(method, void 0, this.safe(error.message || "network error"));
+    }
+    if (!response.ok) throw new TelegramApiError(method, response.status, `HTTP ${response.status}`);
+    let envelope;
+    try {
+      envelope = await response.json();
+    } catch {
+      throw new TelegramApiError(method, response.status, "respons bukan JSON");
+    }
+    if (!envelope.ok || envelope.result === void 0) {
+      throw new TelegramApiError(method, envelope.error_code, this.safe(envelope.description ?? "respons tidak valid"));
+    }
+    return envelope.result;
+  }
+  getMe() {
+    return this.call("getMe", {});
+  }
+  async getUpdates(input) {
+    if (!Number.isInteger(input.offset) || input.offset < 0) throw new Error("offset harus integer non-negatif");
+    if (!Number.isInteger(input.limit) || input.limit < 1 || input.limit > 100) throw new Error("limit harus 1..100");
+    if (!Number.isInteger(input.timeout) || input.timeout < 0 || input.timeout > 50) throw new Error("timeout harus 0..50");
+    return this.call("getUpdates", {
+      offset: input.offset,
+      limit: input.limit,
+      timeout: input.timeout,
+      allowed_updates: ["message", "callback_query"]
+    }, input.signal);
+  }
+  sendMessage(input) {
+    return this.call("sendMessage", {
+      chat_id: input.chatId,
+      text: input.text,
+      ...input.replyMarkup ? { reply_markup: input.replyMarkup } : {}
+    });
+  }
+  editMessageText(input) {
+    return this.call("editMessageText", {
+      chat_id: input.chatId,
+      message_id: input.messageId,
+      text: input.text
+    });
+  }
+  answerCallbackQuery(input) {
+    return this.call("answerCallbackQuery", {
+      callback_query_id: input.callbackQueryId,
+      ...input.text ? { text: input.text } : {}
+    });
+  }
+};
+
+// src/services/telegram/gateway.ts
+import { createHash as createHash6 } from "node:crypto";
+
+// src/services/telegram/protocol.ts
+import { createHash as createHash5 } from "node:crypto";
+var record = (value) => typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
+function normalizeTelegramCommand(text) {
+  const clean = text.trim();
+  const match = clean.match(/^\/([a-z0-9_]+)(?:@[a-z0-9_]+)?(?:\s+([\s\S]*))?$/i);
+  if (!match) return clean;
+  const args = match[2]?.trim().replace(/\s+/g, " ");
+  return `/${match[1].toLowerCase()}${args ? ` ${args}` : ""}`;
+}
+function parseConfirmationCallback(data) {
+  if (data.length > 64) return null;
+  const match = data.match(/^tgcf:([A-Za-z0-9_-]{1,40}):(approve|deny)$/);
+  return match ? { token: match[1], action: match[2] } : null;
+}
+function parseTelegramUpdate(update2, allowlist, maxText = 12e3) {
+  const root = record(update2);
+  const updateId = root && Number.isInteger(root.update_id) && Number(root.update_id) >= 0 ? Number(root.update_id) : null;
+  if (!root || updateId === null) return { ok: false, updateId: null, reason: "malformed" };
+  const callback = record(root.callback_query);
+  const message = callback ? record(callback.message) : record(root.message);
+  const from = callback ? record(callback.from) : record(message?.from);
+  const chat = record(message?.chat);
+  const chatId = typeof chat?.id === "number" && Number.isSafeInteger(chat.id) ? String(chat.id) : void 0;
+  const userId = typeof from?.id === "number" && Number.isSafeInteger(from.id) ? String(from.id) : void 0;
+  if (!message || !from || !chat || !chatId || !userId) return { ok: false, updateId, reason: "malformed", chatId, userId };
+  if (chat.type !== "private") return { ok: false, updateId, reason: "group", chatId, userId };
+  if (from.is_bot === true) return { ok: false, updateId, reason: "sender-bot", chatId, userId };
+  if (!allowlist.has(userId)) return { ok: false, updateId, reason: "not-allowed", chatId, userId };
+  const messageId = typeof message.message_id === "number" && Number.isInteger(message.message_id) ? message.message_id : null;
+  if (messageId === null) return { ok: false, updateId, reason: "malformed", chatId, userId };
+  if (callback) {
+    const callbackQueryId = typeof callback.id === "string" ? callback.id : "";
+    const data = typeof callback.data === "string" ? callback.data : "";
+    const parsed = parseConfirmationCallback(data);
+    if (!callbackQueryId || !parsed) return { ok: false, updateId, reason: "invalid-callback", chatId, userId };
+    return {
+      ok: true,
+      input: {
+        updateId,
+        chatId,
+        userId,
+        messageId,
+        kind: "callback",
+        text: data,
+        callbackQueryId,
+        callbackToken: parsed.token,
+        callbackAction: parsed.action
+      }
+    };
+  }
+  if (typeof message.text !== "string" || !message.text.trim()) {
+    return { ok: false, updateId, reason: "non-text", chatId, userId };
+  }
+  const text = normalizeTelegramCommand(message.text);
+  if (text.length > maxText) return { ok: false, updateId, reason: "too-long", chatId, userId };
+  return {
+    ok: true,
+    input: {
+      updateId,
+      chatId,
+      userId,
+      messageId,
+      kind: text.startsWith("/") ? "command" : "text",
+      text
+    }
+  };
+}
+function inboundDigest(input) {
+  return createHash5("sha256").update(`${input.updateId}\0${input.chatId}\0${input.userId}\0${input.kind}\0${input.text}`, "utf8").digest("hex");
+}
+var ANSI = /[\u001b\u009b](?:\][^\u0007]*(?:\u0007|\u001b\\)|\[[0-?]*[ -/]*[@-~]|[@-_])/g;
+var CONTROLS = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f-\u009f]/g;
+var CREDENTIAL_PATTERNS = [
+  /\b\d{6,}:[A-Za-z0-9_-]{20,}\b/g,
+  /\bhnm_(?:agent_)?[A-Za-z0-9_-]{16,}\b/g,
+  /\bsk-ant-[A-Za-z0-9_-]{16,}\b/g
+];
+function sanitizeTelegramOutput(text, exactSecrets = []) {
+  let clean = text.replace(ANSI, "").replace(CONTROLS, "");
+  for (const secret of [...exactSecrets].filter(Boolean).sort((a, b) => b.length - a.length)) {
+    clean = clean.split(secret).join("[REDACTED]");
+  }
+  for (const pattern of CREDENTIAL_PATTERNS) clean = clean.replace(pattern, "[REDACTED]");
+  return clean.trim();
+}
+function splitTelegramText(text, max = 4096, exactSecrets = []) {
+  if (!Number.isInteger(max) || max < 1) throw new Error("max harus integer positif");
+  const clean = sanitizeTelegramOutput(text, exactSecrets);
+  if (!clean) return [];
+  const chunks = [];
+  let rest = clean;
+  while (rest.length > max) {
+    let cut = max;
+    const before = rest.charCodeAt(cut - 1);
+    const after = rest.charCodeAt(cut);
+    if (before >= 55296 && before <= 56319 && after >= 56320 && after <= 57343) cut--;
+    const window = rest.slice(0, cut);
+    const newline2 = window.lastIndexOf("\n");
+    const space = window.lastIndexOf(" ");
+    const boundary = Math.max(newline2, space);
+    if (boundary >= Math.floor(max / 2)) cut = boundary + 1;
+    chunks.push(rest.slice(0, cut));
+    rest = rest.slice(cut);
+  }
+  if (rest) chunks.push(rest);
+  return chunks;
+}
+
+// src/services/telegram/gateway.ts
+var digestRaw = (update2) => createHash6("sha256").update(JSON.stringify(update2)).digest("hex");
+var TelegramGateway = class {
+  constructor(deps) {
+    this.deps = deps;
+  }
+  abort = null;
+  loopPromise = null;
+  async processUpdates(updates) {
+    for (const raw of updates) await this.processUpdate(raw);
+  }
+  async processUpdate(raw) {
+    const parsed = parseTelegramUpdate(raw, this.deps.allowedUserIds);
+    const root = typeof raw === "object" && raw !== null ? raw : {};
+    const rawUpdateId = Number.isInteger(root.update_id) ? Number(root.update_id) : null;
+    if (rawUpdateId === null || rawUpdateId < 0) return;
+    const meta = parsed.ok ? {
+      updateId: parsed.input.updateId,
+      chatId: parsed.input.chatId,
+      userId: parsed.input.userId,
+      kind: parsed.input.kind,
+      digest: inboundDigest(parsed.input)
+    } : {
+      updateId: rawUpdateId,
+      chatId: parsed.chatId ?? null,
+      userId: parsed.userId ?? null,
+      kind: "rejected",
+      digest: digestRaw(raw)
+    };
+    if (!await this.deps.store.recordUpdate(meta)) return;
+    if (!parsed.ok) {
+      await this.deps.store.rejectUpdate(rawUpdateId, parsed.reason);
+      await this.deps.store.audit({
+        chatId: parsed.chatId ?? null,
+        userId: parsed.userId ?? null,
+        updateId: rawUpdateId,
+        action: "inbound",
+        outcome: `rejected:${parsed.reason}`,
+        correlationId: `tg:${rawUpdateId}`
+      });
+      return;
+    }
+    const input = parsed.input;
+    if (await this.deps.store.rateLimitExceeded(
+      input.userId,
+      new Date(Date.now() - this.deps.rateLimit.windowMs),
+      this.deps.rateLimit.limit
+    )) {
+      await this.deps.store.rejectUpdate(input.updateId, "rate-limit");
+      await this.deps.store.audit({
+        chatId: input.chatId,
+        userId: input.userId,
+        updateId: input.updateId,
+        action: "inbound",
+        outcome: "rejected:rate-limit",
+        correlationId: `tg:${input.updateId}`
+      });
+      return;
+    }
+    if (!await this.deps.store.claimUpdate(input.updateId)) return;
+    try {
+      if (input.kind === "callback" && input.callbackToken && input.callbackAction && input.callbackQueryId) {
+        const outcome = await this.deps.store.resolveConfirmation({
+          callbackToken: input.callbackToken,
+          chatId: input.chatId,
+          userId: input.userId,
+          action: input.callbackAction
+        });
+        const answer = outcome === "approved" ? "Disetujui" : outcome === "denied" ? "Dibatalkan" : outcome === "expired" ? "Konfirmasi kedaluwarsa" : "Konfirmasi tidak valid";
+        await this.deps.client.answerCallbackQuery({ callbackQueryId: input.callbackQueryId, text: answer });
+        if (outcome !== "approved" && outcome !== "denied") {
+          await this.deps.store.markDispatched(input.updateId);
+          return;
+        }
+        input.text = `[confirmation ${outcome}] ${input.callbackToken}`;
+      }
+      const target2 = await this.deps.dispatcher.dispatch(input);
+      await this.deps.store.markDispatched(input.updateId);
+      await this.deps.store.audit({
+        chatId: input.chatId,
+        userId: input.userId,
+        updateId: input.updateId,
+        action: "dispatch",
+        outcome: target2.created ? "session-created" : "session-reused",
+        correlationId: `tg:${input.updateId}`
+      });
+      updateTelegramRuntimeStatus({ lastUpdateAt: (/* @__PURE__ */ new Date()).toISOString(), lastError: null });
+    } catch (error) {
+      await this.deps.store.markUpdateUncertain(input.updateId, "dispatch-failed");
+      await this.deps.store.audit({
+        chatId: input.chatId,
+        userId: input.userId,
+        updateId: input.updateId,
+        action: "dispatch",
+        outcome: "uncertain",
+        correlationId: `tg:${input.updateId}`
+      });
+      throw error;
+    }
+  }
+  async flushOutbox() {
+    for (; ; ) {
+      const row = await this.deps.store.claimNextOutbox();
+      if (!row) return;
+      try {
+        const text = sanitizeTelegramOutput(row.text, this.deps.exactSecrets);
+        const chunks = splitTelegramText(text);
+        if (!chunks.length) {
+          await this.deps.store.markOutboxFailed(row.id, "empty-after-sanitize");
+          continue;
+        }
+        const confirmation = row.confirmationId ? await this.deps.store.confirmation(row.confirmationId) : null;
+        let messageId = 0;
+        for (let index = 0; index < chunks.length; index++) {
+          const isLast = index === chunks.length - 1;
+          const replyMarkup = isLast && confirmation ? {
+            inline_keyboard: [[
+              { text: "Lanjutkan", callback_data: `tgcf:${confirmation.callbackToken}:approve` },
+              { text: "Batalkan", callback_data: `tgcf:${confirmation.callbackToken}:deny` }
+            ]]
+          } : void 0;
+          const message = await this.deps.client.sendMessage({ chatId: row.chatId, text: chunks[index], replyMarkup });
+          messageId = message.message_id;
+        }
+        await this.deps.store.markOutboxSent(row.id, messageId);
+      } catch (error) {
+        const message = sanitizeTelegramOutput(error.message, this.deps.exactSecrets).slice(0, 500);
+        if (error instanceof TelegramApiError && error.code !== void 0) {
+          await this.deps.store.markOutboxFailed(row.id, message);
+        } else {
+          await this.deps.store.markOutboxUncertain(row.id, message || "network-outcome-unknown");
+        }
+      }
+    }
+  }
+  async start() {
+    if (this.loopPromise) return;
+    await this.deps.store.recoverUncertainClaims();
+    await this.deps.store.recoverUncertainOutbox();
+    this.abort = new AbortController();
+    updateTelegramRuntimeStatus({ running: true, readiness: "running", lastError: null });
+    this.loopPromise = this.loop(this.abort.signal).finally(() => {
+      this.loopPromise = null;
+      this.abort = null;
+      updateTelegramRuntimeStatus({ running: false });
+    });
+  }
+  async loop(signal) {
+    while (!signal.aborted) {
+      try {
+        const updates = await this.deps.client.getUpdates({
+          offset: await this.deps.store.offset(),
+          limit: 100,
+          timeout: this.deps.pollTimeout ?? 25,
+          signal
+        });
+        await this.processUpdates(updates);
+        await this.flushOutbox();
+      } catch (error) {
+        if (signal.aborted) return;
+        const message = sanitizeTelegramOutput(error.message, this.deps.exactSecrets).slice(0, 500);
+        updateTelegramRuntimeStatus({ running: false, readiness: "error", lastError: message });
+        if (error instanceof TelegramApiError && error.code === 409) return;
+        await new Promise((resolve14) => setTimeout(resolve14, 1e3));
+      }
+    }
+  }
+  async stop() {
+    this.abort?.abort();
+    await this.loopPromise;
+  }
+};
+
+// src/services/telegram/session.ts
+init_src2();
+import { createHash as createHash7 } from "node:crypto";
+var chatHash = (chatId) => createHash7("sha256").update(chatId).digest("hex").slice(0, 16);
+var telegramOperatorSessionId = (chatId) => `telegram-${chatHash(chatId)}`;
+var formatTelegramTurn = (input) => `[Telegram update ${input.updateId} \xB7 chat ${input.chatId} \xB7 kind ${input.kind}]
+${input.text}`;
+var TelegramSessionCoordinator = class {
+  constructor(deps) {
+    this.deps = deps;
+  }
+  async dispatch(input) {
+    let context = await this.deps.store.chatContext(input.chatId);
+    if (!context) {
+      const defaults = await this.deps.defaults();
+      await this.deps.store.ensureChat({
+        chatId: input.chatId,
+        userId: input.userId,
+        agent: defaults.agent,
+        model: defaults.model,
+        effort: defaults.effort
+      });
+      context = await this.deps.store.chatContext(input.chatId);
+    }
+    if (!context) throw new Error("gagal membuat binding chat Telegram");
+    const sessionId2 = telegramOperatorSessionId(input.chatId);
+    const live = this.deps.port.getSession(sessionId2);
+    if (live && !live.exited) {
+      if (!await this.deps.port.sendToPane(sessionId2, formatTelegramTurn(input))) {
+        throw new Error("pane operator tidak menerima steer");
+      }
+      if (context.sessionId !== sessionId2) await this.deps.store.bindSession(input.chatId, sessionId2);
+      return { sessionId: sessionId2, created: false };
+    }
+    const hash2 = chatHash(input.chatId);
+    const projectId = `telegram:${hash2}`;
+    const cwd = `${this.deps.home.replace(/\/$/, "")}/telegram/${hash2}`;
+    this.deps.ensureDir(cwd);
+    if (context.agent === "codex") this.deps.ensureCodexTrust(cwd);
+    const personality = await this.deps.personality(context.personalityAgentId, context.activeProjectId);
+    const prompt = buildTelegramOperatorPrompt({
+      update: input,
+      personality,
+      summary: context.summary,
+      memories: context.memories
+    });
+    const born = this.deps.port.createSession(projectId, cwd, {
+      id: sessionId2,
+      prompt,
+      agent: context.agent,
+      model: context.model,
+      effort: context.effort,
+      env: {
+        HANOMAN_API_BASE: this.deps.apiBase,
+        HANOMAN_TELEGRAM_AGENT_TOKEN: this.deps.agentToken,
+        HANOMAN_TELEGRAM_CHAT_ID: input.chatId
+      }
+    });
+    if (born.id !== sessionId2 || born.exited) throw new Error("pane operator gagal lahir");
+    await this.deps.store.bindSession(input.chatId, sessionId2);
+    return { sessionId: sessionId2, created: true };
+  }
+};
+
+// src/services/telegram/bootstrap.ts
+var TELEGRAM_REQUIRED_CAPABILITIES = [
+  "projects:read",
+  "projects:write",
+  "backlog:read",
+  "backlog:write",
+  "sessions:read",
+  "sessions:write",
+  "docs:read",
+  "docs:write",
+  "ide:read",
+  "ide:write",
+  "vps:read",
+  "vps:write",
+  "settings:read",
+  "settings:write",
+  "support:read",
+  "support:write",
+  "notifications:read",
+  "notifications:write",
+  "lead:read",
+  "lead:write",
+  "agents:read",
+  "telegram:read",
+  "telegram:write"
+];
+function parseTelegramAllowedUserIds(raw) {
+  const ids = raw.split(/[\s,]+/).filter(Boolean);
+  if (!ids.length) throw new Error("Telegram allowlist wajib berisi numeric user id");
+  if (ids.some((id) => !/^\d+$/.test(id))) throw new Error("Telegram allowlist hanya menerima numeric user id");
+  return new Set(ids);
+}
+var configuredFrom = (env) => Boolean(env.HANOMAN_TELEGRAM_BOT_TOKEN?.trim() && env.HANOMAN_TELEGRAM_ALLOWED_USER_IDS?.trim() && env.HANOMAN_TELEGRAM_AGENT_TOKEN?.trim());
+async function productionFactory(input) {
+  const client = new TelegramApiClient(input.botToken);
+  const me = await client.getMe();
+  const store3 = new TelegramStore(prisma);
+  const coordinator = new TelegramSessionCoordinator({
+    store: store3,
+    port: { getSession, createSession, sendToPane },
+    defaults: sessionAgentDefaults,
+    personality: async (id, projectId) => {
+      if (!id) return null;
+      const row = await prisma.customAgent.findUnique({ where: { id } });
+      if (!row?.enabled || row.projectId !== null && row.projectId !== projectId) return null;
+      return { name: row.name, description: row.description, instructions: row.instructions };
+    },
+    ensureCodexTrust,
+    home: resolveHome(),
+    apiBase: input.apiBase,
+    agentToken: input.agentToken,
+    ensureDir: (path) => mkdirSync7(path, { recursive: true })
+  });
+  const gateway = new TelegramGateway({
+    client,
+    store: store3,
+    dispatcher: coordinator,
+    allowedUserIds: input.allowedUserIds,
+    rateLimit: { limit: 20, windowMs: 6e4 },
+    exactSecrets: [input.botToken, input.agentToken],
+    progress: input.progress
+  });
+  return { gateway, botUsername: me.username ?? null };
+}
+async function installTelegramGateway(_app, options2) {
+  const env = options2.env ?? process.env;
+  const setting = await (options2.getSetting ?? getSetting)();
+  const configured = configuredFrom(env);
+  const base = {
+    configured,
+    enabled: setting.telegram.enabled,
+    running: false,
+    botUsername: null,
+    allowlistCount: 0,
+    agentTokenConfigured: Boolean(env.HANOMAN_TELEGRAM_AGENT_TOKEN?.trim()),
+    missingCapabilities: [],
+    lastUpdateAt: null,
+    lastError: null
+  };
+  if (!setting.telegram.enabled) {
+    setTelegramRuntime({ status: { ...base, readiness: "disabled" } });
+    return;
+  }
+  if (!configured) {
+    setTelegramRuntime({ status: { ...base, readiness: "misconfigured", lastError: "environment Telegram belum lengkap" } });
+    return;
+  }
+  let allowedUserIds;
+  try {
+    allowedUserIds = parseTelegramAllowedUserIds(env.HANOMAN_TELEGRAM_ALLOWED_USER_IDS);
+  } catch (error) {
+    setTelegramRuntime({ status: { ...base, readiness: "misconfigured", lastError: error.message } });
+    return;
+  }
+  const verify = options2.verifyAgentToken ?? verifyAgentToken;
+  const agent = setting.agentAccessEnabled ? await verify(env.HANOMAN_TELEGRAM_AGENT_TOKEN) : null;
+  const missing = agent ? TELEGRAM_REQUIRED_CAPABILITIES.filter((capability) => !agent.capabilities.includes(capability)) : [...TELEGRAM_REQUIRED_CAPABILITIES];
+  if (!agent || missing.length) {
+    setTelegramRuntime({
+      agentTokenId: agent?.id ?? null,
+      status: {
+        ...base,
+        allowlistCount: allowedUserIds.size,
+        missingCapabilities: missing,
+        readiness: "misconfigured",
+        lastError: agent ? "capability AgentToken Telegram belum lengkap" : "AgentToken Telegram tidak valid atau akses agent mati"
+      }
+    });
+    return;
+  }
+  try {
+    const built = await (options2.factory ?? productionFactory)({
+      apiBase: options2.apiBase,
+      botToken: env.HANOMAN_TELEGRAM_BOT_TOKEN,
+      agentToken: env.HANOMAN_TELEGRAM_AGENT_TOKEN,
+      allowedUserIds,
+      progress: setting.telegram.progress
+    });
+    await built.gateway.start();
+    setTelegramRuntime({
+      agentTokenId: agent.id,
+      status: {
+        ...base,
+        configured: true,
+        enabled: true,
+        running: true,
+        readiness: "running",
+        botUsername: built.botUsername,
+        allowlistCount: allowedUserIds.size,
+        missingCapabilities: []
+      }
+    });
+    registerTelegramRuntimeStop(() => built.gateway.stop());
+  } catch {
+    setTelegramRuntime({
+      agentTokenId: agent.id,
+      status: {
+        ...base,
+        allowlistCount: allowedUserIds.size,
+        readiness: "error",
+        lastError: "gagal memverifikasi atau memulai Telegram Bot API"
+      }
+    });
+  }
+}
+
+// src/server.ts
 var app = buildApp();
 var port = Number(process.env.PORT ?? 8787);
 var host = process.env.HOST ?? "127.0.0.1";
@@ -24404,6 +26443,8 @@ app.listen({ port, host }).then(async () => {
   } catch (e) {
     console.error("rekonsiliasi riwayat sesi dilewati \u2014 tmux tak terbaca:", e);
   }
+  const boundPort = app.server.address().port;
+  await installTelegramGateway(app, { apiBase: `http://127.0.0.1:${boundPort}` });
   startVpsMonitor();
   registerBacklogSource();
   registerTriaseSource();