hanoman 0.2.0 → 0.2.2

package/dist/server.js

@@ -4913,6 +4913,12 @@ var init_agent = __esm({
       // capability domain produk masing-masing; domain ini tidak memberi akses shell atau sesi.
       "telegram:read",
       "telegram:write",
+      // ADR-0157 · papan Tim (`/api/tasks`, `/api/members`). Domain TERSENDIRI, bukan menumpang
+      // `backlog`: kartu tim adalah pekerjaan MANUSIA yang `status`-nya bebas dipindah, sementara
+      // `Spec.stage` diturunkan dari fase sesi (ADR-0008/0024). Menumpangkannya berarti satu centang
+      // "Backlog — tulis" diam-diam membuka papan orang, dan sebaliknya.
+      "team:read",
+      "team:write",
       // ADR-0155 · akses KETIGA: `danger`. Dipecah dari `:write` karena keempat operasi ini bukan
       // "menulis lebih banyak", melainkan menjalankan sesuatu di luar proses hanoman — sesi agen di
       // worktree, perintah di VPS, git yang mengubah sejarah, penghapusan artefak dokumen.
@@ -4957,6 +4963,8 @@ var init_agent = __esm({
       { id: "agents:write", domain: "agents", access: "write", label: "Custom agent \u2014 tulis", desc: "Buat/ubah/hapus custom agent; definisinya dipakai setiap sesi baru.", risk: "exec" },
       { id: "telegram:read", domain: "telegram", access: "read", label: "Telegram \u2014 baca", desc: "Baca status gateway, binding, memory, dan audit Telegram." },
       { id: "telegram:write", domain: "telegram", access: "write", label: "Telegram \u2014 tulis", desc: "Perbarui context/memory dan terbitkan reply sesi operator Telegram." },
+      { id: "team:read", domain: "team", access: "read", label: "Tim \u2014 baca", desc: "Lihat kartu papan Tim & direktori anggota." },
+      { id: "team:write", domain: "team", access: "write", label: "Tim \u2014 tulis", desc: "Buat/ubah/hapus kartu papan Tim & anggota; eskalasi kartu jadi backlog item." },
       // ADR-0155 · akses `danger`. Tak satu pun diimplikasikan `:write` di domainnya; manusia harus
       // mencentangnya sendiri di Settings → Akses AI Agent.
       { id: "sessions:spawn", domain: "sessions", access: "danger", label: "Sesi \u2014 buka sesi baru", desc: "Membuka sesi agen BARU di worktree (menjalankan claude/codex dengan izin penuh). Dipisah dari Sesi \u2014 tulis: mengendalikan sesi yang sudah ada tak lagi cukup untuk membuka yang baru.", risk: "rce" },
@@ -6520,7 +6528,15 @@ var init_api = __esm({
       breakdown: (id, prd) => `${API}/projects/${id}/breakdown?prd=${encodeURIComponent(prd)}`,
       specsBatch: `${API}/specs/batch`,
       // SPEC-182 · IDE Visual
-      ideTree: (id, ref = "") => `${API}/projects/${id}/tree${ref ? `?ref=${encodeURIComponent(ref)}` : ""}`,
+      // `hidden` menyertakan entri .gitignore; `under` membuka satu tingkat isi sebuah direktori.
+      ideTree: (id, ref = "", opts) => {
+        const q = new URLSearchParams();
+        if (ref) q.set("ref", ref);
+        if (opts?.hidden) q.set("hidden", "1");
+        if (opts?.under) q.set("under", opts.under);
+        const s2 = q.toString();
+        return `${API}/projects/${id}/tree${s2 ? `?${s2}` : ""}`;
+      },
       ideFile: (id, path, ref = "") => `${API}/projects/${id}/file${path ? `?path=${encodeURIComponent(path)}${ref ? `&ref=${encodeURIComponent(ref)}` : ""}` : ""}`,
       ideGraph: (id, limit = 200, opts) => {
         const p3 = new URLSearchParams({ limit: String(limit) });
@@ -7640,6 +7656,51 @@ var init_webhook = __esm({
   }
 });
 
+// ../shared/src/team.ts
+var TASK_STATUSES, zTaskStatus, memberId, zEmail, zName, zIso, zCreateMember, zPatchMember, zCreateTask, zPatchTask, ESCALATE_SOURCES, zEscalateTask;
+var init_team = __esm({
+  "../shared/src/team.ts"() {
+    "use strict";
+    init_zod();
+    init_enums();
+    TASK_STATUSES = ["backlog", "doing", "review", "done"];
+    zTaskStatus = external_exports.enum(TASK_STATUSES);
+    memberId = (email) => email.trim().toLowerCase();
+    zEmail = external_exports.string().trim().min(3).max(200).email();
+    zName = external_exports.string().trim().min(1).max(120);
+    zIso = external_exports.string().datetime({ offset: true });
+    zCreateMember = external_exports.object({
+      name: zName,
+      email: zEmail,
+      role: external_exports.string().trim().max(60).nullable().optional()
+    });
+    zPatchMember = zCreateMember.omit({ email: true }).partial().extend({
+      active: external_exports.boolean().optional()
+    });
+    zCreateTask = external_exports.object({
+      title: external_exports.string().trim().min(1).max(300),
+      detail: external_exports.string().max(2e4).nullable().optional(),
+      projectId: external_exports.string().max(120).nullable().optional(),
+      status: zTaskStatus.default("backlog"),
+      priority: zPriority.default("sedang"),
+      memberId: external_exports.string().max(200).nullable().optional(),
+      startDate: zIso.nullable().optional(),
+      dueDate: zIso.nullable().optional(),
+      order: external_exports.number().finite().optional()
+    });
+    zPatchTask = zCreateTask.partial();
+    ESCALATE_SOURCES = ["brief", "qa", "audit"];
+    zEscalateTask = external_exports.object({
+      source: external_exports.enum(ESCALATE_SOURCES).default("brief"),
+      priority: zPriority.default("sedang"),
+      // Dipakai HANYA saat kartunya belum punya project (`nextSpecId` butuh repo, dan repo milik
+      // project). Route menolak 400 bila ia menyebut project LAIN — kartu tak boleh berpindah project
+      // sebagai efek samping yang tak diminta.
+      projectId: external_exports.string().max(120).optional()
+    });
+  }
+});
+
 // ../shared/src/mcp-schema.ts
 function obj(o) {
   return {
@@ -7651,11 +7712,12 @@ function obj(o) {
     ...o.allOf ? { allOf: o.allOf } : {}
   };
 }
-var str, enumStr, bool, int, strArray, PRIORITY_ENUM, SOURCE_ENUM, STAGE_ENUM, SEVERITY_ENUM, PRIORITY, BRIEF_PAYLOAD, QA_PAYLOAD, GOAL_PAYLOAD, SPEC_PAYLOAD_ONEOF, SOURCE_PAYLOAD_ALLOF, PAGE_PARAMS, DATE_PARAMS;
+var str, enumStr, bool, int, strArray, PRIORITY_ENUM, SOURCE_ENUM, STAGE_ENUM, SEVERITY_ENUM, TASK_STATUS_ENUM, ESCALATE_SOURCE_ENUM, PRIORITY, BRIEF_PAYLOAD, QA_PAYLOAD, GOAL_PAYLOAD, SPEC_PAYLOAD_ONEOF, SOURCE_PAYLOAD_ALLOF, PAGE_PARAMS, DATE_PARAMS;
 var init_mcp_schema = __esm({
   "../shared/src/mcp-schema.ts"() {
     "use strict";
     init_enums();
+    init_team();
     str = (description, extra = {}) => ({ type: "string", description, ...extra });
     enumStr = (values, description) => ({ type: "string", enum: values, description });
     bool = (description) => ({ type: "boolean", description });
@@ -7665,6 +7727,8 @@ var init_mcp_schema = __esm({
     SOURCE_ENUM = zSpecSource.options;
     STAGE_ENUM = zStage.options;
     SEVERITY_ENUM = ["critical", "major", "minor"];
+    TASK_STATUS_ENUM = TASK_STATUSES;
+    ESCALATE_SOURCE_ENUM = ESCALATE_SOURCES;
     PRIORITY = enumStr(
       PRIORITY_ENUM,
       "Prioritas backlog. Nilainya bahasa Indonesia \u2014 `tinggi`, `sedang`, `rendah`. Bukan high/medium/low."
@@ -7744,7 +7808,7 @@ function paginateLocal(items, page, limit) {
   const p3 = Math.max(1, Math.floor(page ?? 1));
   return { items: items.slice((p3 - 1) * size, p3 * size), total: items.length, page: p3, pageSize: size };
 }
-var DEFAULT_MAX_BYTES, DEFAULT_LIMIT, MAX_LIMIT, OBJECTIVE_CLIP, MARK, pick, shapeProject, shapeProjectDetail, SPEC_BASE, shapeSpecDetail, shapeSession, shapeNotification, shapeTicket, shapeGithubIssue, shapeLeadDecision;
+var DEFAULT_MAX_BYTES, DEFAULT_LIMIT, MAX_LIMIT, OBJECTIVE_CLIP, MARK, pick, shapeProject, shapeProjectDetail, SPEC_BASE, shapeSpecDetail, shapeSession, shapeNotification, shapeTicket, shapeGithubIssue, shapeTask, shapeMember, shapeLeadDecision;
 var init_mcp_shape = __esm({
   "../shared/src/mcp-shape.ts"() {
     "use strict";
@@ -7806,6 +7870,25 @@ var init_mcp_shape = __esm({
       ...pick(row, ["id", "projectId", "repoSlug", "number", "title", "authorLogin", "labels", "url", "issueState", "status", "specId", "issueUpdatedAt"]),
       body: clip(row.body, 500)
     });
+    shapeTask = (row) => ({
+      ...pick(row, [
+        "id",
+        "projectId",
+        "title",
+        "status",
+        "priority",
+        "memberId",
+        "startDate",
+        "dueDate",
+        "order",
+        "specId",
+        "spec",
+        "createdAt",
+        "updatedAt"
+      ]),
+      detail: clip(row.detail, 500)
+    });
+    shapeMember = (row) => pick(row, ["id", "name", "email", "role", "active"]);
     shapeLeadDecision = (row) => ({
       ...pick(row, ["id", "projectId", "specId", "sessionId", "gate", "kind", "status", "confidence", "action", "choice", "createdAt"]),
       question: clip(row.question, 300),
@@ -8815,16 +8898,25 @@ var init_ide = __esm({
       {
         name: "hanoman_ide_tree",
         title: "Pohon berkas repo project",
-        description: "Daftar berkas repo project pada sebuah ref. Tanpa `ref` ia membaca working tree apa adanya, termasuk perubahan yang belum di-commit.",
+        description: "Daftar berkas repo project pada sebuah ref. Tanpa `ref` ia membaca working tree apa adanya, termasuk perubahan yang belum di-commit. `hidden` ikut menyertakan yang .gitignore sembunyikan \u2014 direktori yang seluruhnya diabaikan (mis. `node_modules`) diruntuhkan jadi satu entri di `dirs`; buka isinya dengan `under`, satu tingkat per panggilan.",
         inputSchema: obj({
-          properties: { project: PROJECT2, ref: str("Ref git (branch/tag/sha). Kosongkan untuk working tree.") },
+          properties: {
+            project: PROJECT2,
+            ref: str("Ref git (branch/tag/sha). Kosongkan untuk working tree."),
+            hidden: bool("Sertakan berkas & direktori yang diabaikan .gitignore. Tak berlaku bersama `ref`."),
+            under: str("Jalur direktori; balasannya berisi SATU tingkat isinya. Dipakai untuk membuka direktori terabaikan yang diruntuhkan.")
+          },
           required: ["project"]
         }),
         mode: "read",
         capability: "ide:read",
         samplePath: "/projects/hanoman/tree",
         sampleMethod: "GET",
-        build: (a) => ({ method: "GET", path: `${p(a.project)}/tree`, query: query({ ref: s(a.ref) }) }),
+        build: (a) => ({
+          method: "GET",
+          path: `${p(a.project)}/tree`,
+          query: query({ ref: s(a.ref), hidden: a.hidden ? "1" : "", under: s(a.under) })
+        }),
         shape: (raw) => raw
       },
       {
@@ -10907,6 +10999,311 @@ var init_lead2 = __esm({
   }
 });
 
+// ../shared/src/mcp-catalog/team.ts
+var TASK_ID, MEMBER_ID, nullable, CLEAR, TASK_FIELDS, taskBody, TASKS, MEMBERS, DESTRUCTIVE, TEAM_TOOLS;
+var init_team2 = __esm({
+  "../shared/src/mcp-catalog/team.ts"() {
+    "use strict";
+    init_mcp_schema();
+    init_mcp_shape();
+    init_helpers();
+    TASK_ID = str("Id kartu papan Tim, seperti muncul di hanoman_tasks_list.");
+    MEMBER_ID = str("Id anggota \u2014 email ternormalisasi (huruf kecil), seperti muncul di hanoman_members_list.");
+    nullable = (v) => {
+      if (typeof v !== "string") return void 0;
+      return v === "" ? null : v;
+    };
+    CLEAR = " Kirim string KOSONG untuk mengosongkannya; tak menyebutnya sama sekali berarti biarkan apa adanya.";
+    TASK_FIELDS = {
+      title: str("Judul kartu, satu baris."),
+      detail: str("Isi kartu. Markdown bebas." + CLEAR),
+      project: str("Id project pemilik kartu. Kartu BOLEH tanpa project \u2014 papan Tim tak mensyaratkannya." + CLEAR),
+      status: enumStr(TASK_STATUS_ENUM, "Kolom papan. Milik MANUSIA dan bebas dipindah \u2014 ini BUKAN `stage` backlog, yang diturunkan dari fase sesi."),
+      priority: PRIORITY,
+      member: str("Id anggota yang ditugaskan (email huruf kecil), dari hanoman_members_list." + CLEAR),
+      startDate: str("Tanggal mulai, ISO 8601 berzona mis. `2026-09-01T00:00:00.000Z`. `besok` ditolak." + CLEAR),
+      dueDate: str("Tanggal jatuh tempo, ISO 8601 berzona. Ini tanggal KARTU, bukan estimasi backlog." + CLEAR)
+    };
+    taskBody = (a) => {
+      const body = {};
+      if (s(a.title)) body.title = s(a.title);
+      if (s(a.status)) body.status = s(a.status);
+      if (s(a.priority)) body.priority = s(a.priority);
+      if (n(a.order) !== void 0) body.order = n(a.order);
+      for (const [key, arg] of [
+        ["detail", a.detail],
+        ["projectId", a.project],
+        ["memberId", a.member],
+        ["startDate", a.startDate],
+        ["dueDate", a.dueDate]
+      ]) {
+        const v = nullable(arg);
+        if (v !== void 0) body[key] = v;
+      }
+      return body;
+    };
+    TASKS = [
+      {
+        name: "hanoman_tasks_list",
+        title: "Kartu papan Tim",
+        description: "Kartu kerja MANUSIA di papan Tim, terurut sesuai posisinya di kolom. Empat kolom: `backlog`, `doing`, `review`, `done` \u2014 milik manusia, tak diturunkan dari sesi agen. `specId`/`spec` terisi hanya untuk kartu yang sudah dieskalasi jadi backlog item; `specId` terisi sementara `spec` null berarti tautannya PUTUS (backlognya sudah dihapus), bukan belum dieskalasi.",
+        inputSchema: obj({
+          properties: {
+            project: str("Id project. Tanpa ini, seluruh project \u2014 termasuk kartu tanpa project."),
+            status: enumStr(TASK_STATUS_ENUM, "Kolom papan."),
+            member: MEMBER_ID,
+            q: str("Cari substring pada judul + detail, tak peka huruf besar-kecil. Disaring SEBELUM paginasi, jadi hasilnya tak buta terhadap kartu di luar halaman pertama."),
+            ...PAGE_PARAMS
+          }
+        }),
+        mode: "read",
+        capability: "team:read",
+        samplePath: "/tasks",
+        sampleMethod: "GET",
+        build: (a) => ({
+          method: "GET",
+          path: "/tasks",
+          query: query({
+            projectId: s(a.project),
+            status: s(a.status),
+            memberId: s(a.member),
+            q: s(a.q),
+            page: n(a.page) === void 0 ? void 0 : String(n(a.page)),
+            limit: n(a.limit) === void 0 ? void 0 : String(n(a.limit))
+          })
+        }),
+        shape: (raw) => reshapePage(raw, shapeTask)
+      },
+      {
+        name: "hanoman_task_create",
+        title: "Buat kartu papan Tim",
+        description: "Membuat kartu kerja manusia di papan Tim. Kartu BARU tak pernah tertaut backlog \u2014 tautan itu lahir dari hanoman_task_escalate, bukan dari field. Untuk pekerjaan yang akan dikerjakan AGEN, pakai hanoman_backlog_create: papan ini bukan antrean sesi.",
+        inputSchema: obj({ properties: { ...TASK_FIELDS }, required: ["title"] }),
+        mode: "write",
+        capability: "team:write",
+        samplePath: "/tasks",
+        sampleMethod: "POST",
+        build: (a) => ({ method: "POST", path: "/tasks", body: taskBody(a) }),
+        shape: (raw) => shapeTask(raw)
+      },
+      {
+        name: "hanoman_task_update",
+        title: "Ubah kartu papan Tim",
+        description: "Mengubah kartu papan Tim. Hanya field yang disebut yang ditulis. Kartu yang SUDAH tertaut backlog menolak pindah project dengan 400 \u2014 lepas tautannya dulu lewat hanoman_task_unlink. `specId` sengaja tak bisa diisi di sini.",
+        inputSchema: obj({ properties: { task: TASK_ID, ...TASK_FIELDS }, required: ["task"] }),
+        mode: "write",
+        capability: "team:write",
+        samplePath: "/tasks/t1",
+        sampleMethod: "PATCH",
+        build: (a) => ({ method: "PATCH", path: `/tasks/${enc(String(a.task))}`, body: taskBody(a) }),
+        shape: (raw) => shapeTask(raw)
+      },
+      {
+        name: "hanoman_task_escalate",
+        title: "Eskalasi kartu jadi backlog item",
+        description: "Melahirkan backlog item dari sebuah kartu papan Tim, lalu menautkan keduanya. IDEMPOTEN: kartu yang sudah tertaut menjawab 200 dengan `created: false` dan spec yang sama, bukan membuat backlog kedua. Kartu TANPA project ditolak 400 \u2014 id backlog diturunkan dari repo milik project, jadi sebutkan `project` lebih dulu. Ini TIDAK membuka sesi agen; peluncurannya tetap tindakan terpisah, dan Spec-nya lahir tanpa persetujuan peluncuran bila token pemanggil tak memegang `sessions:write`.",
+        inputSchema: obj({
+          properties: {
+            task: TASK_ID,
+            source: enumStr(ESCALATE_SOURCE_ENUM, "Bentuk backlog yang dilahirkan. Default `brief`. `goal`/`no_effort`/`help` sengaja tak tersedia: dua yang pertama menuntut kalimat yang hanya operator bisa tulis, yang terakhir milik tiket Help Center."),
+            priority: PRIORITY,
+            project: str("Id project tujuan. HANYA dipakai bila kartunya belum punya project \u2014 menyebut project LAIN dari milik kartu ditolak 400.")
+          },
+          required: ["task"]
+        }),
+        mode: "write",
+        capability: "team:write",
+        samplePath: "/tasks/t1/escalate",
+        sampleMethod: "POST",
+        build: (a) => ({
+          method: "POST",
+          path: `/tasks/${enc(String(a.task))}/escalate`,
+          body: query({ source: s(a.source), priority: s(a.priority), projectId: s(a.project) })
+        }),
+        shape: (raw) => raw
+      },
+      {
+        name: "hanoman_task_unlink",
+        title: "Lepas tautan kartu dari backlog",
+        description: "Melepas tautan kartu papan Tim dari backlog item-nya. NON-DESTRUKTIF: backlog item-nya dibiarkan hidup \u2014 hapus manual lewat hanoman_backlog_delete bila memang salah eskalasi. Idempoten: kartu yang memang tak tertaut menjawab 200 apa adanya.",
+        inputSchema: obj({ properties: { task: TASK_ID }, required: ["task"] }),
+        mode: "write",
+        capability: "team:write",
+        samplePath: "/tasks/t1/escalate",
+        sampleMethod: "DELETE",
+        build: (a) => ({ method: "DELETE", path: `/tasks/${enc(String(a.task))}/escalate` }),
+        shape: (raw) => shapeTask(raw)
+      }
+    ];
+    MEMBERS = [
+      {
+        name: "hanoman_members_list",
+        title: "Anggota tim",
+        description: "Direktori orang untuk papan Tim. GLOBAL, bukan per project \u2014 kartu boleh tanpa project. Anggota nonaktif TETAP terdaftar (di bawah): kartu lama yang ditugaskan padanya harus tetap punya nama. `id` = email ternormalisasi, dan itu yang dipakai sebagai `member` di tool kartu.",
+        inputSchema: obj({ properties: { activeOnly: bool("Hanya anggota aktif. Default: semua, nonaktif di urutan bawah."), ...PAGE_PARAMS } }),
+        mode: "read",
+        capability: "team:read",
+        samplePath: "/members",
+        sampleMethod: "GET",
+        build: (a) => ({
+          method: "GET",
+          path: "/members",
+          query: query({
+            active: a.activeOnly === true ? "true" : void 0,
+            page: n(a.page) === void 0 ? void 0 : String(n(a.page)),
+            limit: n(a.limit) === void 0 ? void 0 : String(n(a.limit))
+          })
+        }),
+        shape: (raw) => reshapePage(raw, shapeMember)
+      },
+      {
+        name: "hanoman_member_create",
+        title: "Tambah anggota tim",
+        description: "Menambah orang ke direktori papan Tim. `id` DITURUNKAN dari email (dipangkas + huruf kecil), bukan diacak \u2014 email yang sudah terdaftar menjawab 409 berikut id-nya, bukan membuat baris kedua.",
+        inputSchema: obj({
+          properties: {
+            name: str("Nama yang ditampilkan di kartu."),
+            email: str("Email. Menjadi id anggota sesudah dipangkas & dihurufkecilkan \u2014 dan id itu TAK BISA diubah kemudian."),
+            role: str("Peran, mis. `desainer`. Bebas teks.")
+          },
+          required: ["name", "email"]
+        }),
+        mode: "write",
+        capability: "team:write",
+        samplePath: "/members",
+        sampleMethod: "POST",
+        build: (a) => ({
+          method: "POST",
+          path: "/members",
+          body: { name: String(a.name), email: String(a.email), ...s(a.role) ? { role: s(a.role) } : {} }
+        }),
+        shape: (raw) => shapeMember(raw)
+      },
+      {
+        name: "hanoman_member_update",
+        title: "Ubah anggota tim",
+        description: "Mengubah nama, peran, atau status aktif seorang anggota. `email` TIDAK bisa diubah dan ditolak eksplisit 400: id diturunkan darinya dan sync tak punya operasi rename, jadi id yang berubah meninggalkan baris yatim di setiap mesin lain. Ganti email = hapus lalu buat baru. Menonaktifkan TIDAK melepas kartu-kartunya.",
+        inputSchema: obj({
+          properties: {
+            member: MEMBER_ID,
+            name: str("Nama baru."),
+            role: str("Peran baru." + CLEAR),
+            active: bool("false = nonaktif: tetap terdaftar dan tetap memegang kartunya, hanya turun di daftar.")
+          },
+          required: ["member"]
+        }),
+        mode: "write",
+        capability: "team:write",
+        samplePath: "/members/a@b.id",
+        sampleMethod: "PATCH",
+        build: (a) => {
+          const body = {};
+          if (s(a.name)) body.name = s(a.name);
+          if (typeof a.active === "boolean") body.active = a.active;
+          const role = nullable(a.role);
+          if (role !== void 0) body.role = role;
+          return { method: "PATCH", path: `/members/${enc(String(a.member))}`, body };
+        },
+        shape: (raw) => shapeMember(raw)
+      }
+    ];
+    DESTRUCTIVE = [
+      {
+        name: "hanoman_task_delete",
+        title: "Hapus kartu papan Tim (BERBAHAYA)",
+        description: "BERBAHAYA \u2014 menghapus kartu papan Tim secara permanen di SELURUH mesin yang tersync. Backlog item yang tertaut TIDAK ikut terhapus. Untuk sekadar mengarsipkan, pindahkan kartunya ke kolom `done` lewat hanoman_task_update. Hanya muncul saat tingkat `--danger` menyala.",
+        inputSchema: obj({ properties: { task: TASK_ID }, required: ["task"] }),
+        mode: "danger",
+        capability: "team:write",
+        samplePath: "/tasks/t1",
+        sampleMethod: "DELETE",
+        build: (a) => ({ method: "DELETE", path: `/tasks/${enc(String(a.task))}` }),
+        shape: (raw) => raw
+      },
+      {
+        name: "hanoman_member_delete",
+        title: "Hapus anggota tim (BERBAHAYA)",
+        description: "BERBAHAYA \u2014 menghapus anggota secara permanen di SELURUH mesin yang tersync. Kartu-kartunya TIDAK ikut terhapus: penugasannya dikosongkan (`memberId` jadi null), dan tak ada jejak siapa pemegangnya sebelum itu. Untuk orang yang sekadar berhenti aktif, pakai hanoman_member_update dengan `active: false` \u2014 ia tetap terdaftar dan kartunya tetap bernama. Hanya muncul saat tingkat `--danger` menyala.",
+        inputSchema: obj({ properties: { member: MEMBER_ID }, required: ["member"] }),
+        mode: "danger",
+        capability: "team:write",
+        samplePath: "/members/a@b.id",
+        sampleMethod: "DELETE",
+        build: (a) => ({ method: "DELETE", path: `/members/${enc(String(a.member))}` }),
+        shape: (raw) => raw
+      }
+    ];
+    TEAM_TOOLS = [...TASKS, ...MEMBERS, ...DESTRUCTIVE];
+  }
+});
+
+// ../shared/src/mcp-catalog/system.ts
+var SYSTEM_TOOLS;
+var init_system = __esm({
+  "../shared/src/mcp-catalog/system.ts"() {
+    "use strict";
+    init_mcp_schema();
+    SYSTEM_TOOLS = [
+      {
+        name: "hanoman_limits",
+        title: "Sisa kuota langganan Claude",
+        description: "Sisa kuota langganan Claude milik mesin ini berikut kapan jendelanya reset. Dibaca realtime dan di-cache 30 detik di server. Dipakai untuk memutuskan APAKAH pekerjaan berat layak dimulai sekarang \u2014 bukan gerbang: hanoman tak pernah menolak membuka sesi karena angka ini. Tak menuntut capability apa pun.",
+        inputSchema: obj({ properties: {} }),
+        mode: "read",
+        capability: null,
+        samplePath: "/limits",
+        sampleMethod: "GET",
+        build: () => ({ method: "GET", path: "/limits" }),
+        shape: (raw) => raw
+      },
+      {
+        name: "hanoman_limits_codex",
+        title: "Sisa kuota Codex",
+        description: "Sisa kuota codex, dibaca dari snapshot `rate_limits` di rollout sesi codex terakhir \u2014 TANPA panggilan jaringan, jadi kesegarannya seumur sesi codex terakhir di mesin ini, bukan realtime. Endpoint terpisah dari hanoman_limits karena sumber dan semantik kesegarannya memang beda. Tak menuntut capability apa pun.",
+        inputSchema: obj({ properties: {} }),
+        mode: "read",
+        capability: null,
+        samplePath: "/limits/codex",
+        sampleMethod: "GET",
+        build: () => ({ method: "GET", path: "/limits/codex" }),
+        shape: (raw) => raw
+      },
+      {
+        name: "hanoman_update_status",
+        title: "Status versi & pembaruan",
+        description: "Versi hanoman yang berjalan, versi terbaru di registry npm, dan apakah instance ini PUNYA supervisor yang bisa memasangnya (`canApply`). Baca-saja: memasang pembaruan me-restart instance dan sengaja tetap tindakan manusia di dashboard \u2014 tak ada tool untuk itu, apa pun tingkat modenya. Tak menuntut capability apa pun.",
+        inputSchema: obj({ properties: {} }),
+        mode: "read",
+        capability: null,
+        samplePath: "/update",
+        sampleMethod: "GET",
+        build: () => ({ method: "GET", path: "/update" }),
+        shape: (raw) => raw
+      },
+      {
+        name: "hanoman_fs_browse",
+        title: "Telusuri folder mesin ini",
+        description: "Sub-folder nyata di MESIN tempat hanoman berjalan, berikut path absolutnya \u2014 dipakai untuk mengisi `repoDir` saat mengikat project ke codebase yang sudah ada (hanoman_project_binding_set), yang tanpa ini hanya bisa ditebak. Hanya direktori, berkas tak ikut; yang berawalan titik disembunyikan. Tanpa `path`, ia mulai dari home. Tak menuntut capability apa pun.",
+        inputSchema: obj({
+          properties: {
+            path: str("Path absolut folder yang dibuka. Kosong = folder home pengguna yang menjalankan hanoman. Folder yang tak terbaca menjawab 400, bukan daftar kosong.")
+          }
+        }),
+        mode: "read",
+        capability: null,
+        samplePath: "/fs/browse",
+        sampleMethod: "GET",
+        build: (a) => ({
+          method: "GET",
+          path: "/fs/browse",
+          ...typeof a.path === "string" && a.path !== "" ? { query: { path: a.path } } : {}
+        }),
+        shape: (raw) => raw
+      }
+    ];
+  }
+});
+
 // ../shared/src/mcp-catalog/index.ts
 var MCP_TOOLS;
 var init_mcp_catalog = __esm({
@@ -10927,6 +11324,8 @@ var init_mcp_catalog = __esm({
     init_notifications();
     init_support();
     init_lead2();
+    init_team2();
+    init_system();
     MCP_TOOLS = [
       ...ABOUT_TOOLS,
       ...PROJECTS_TOOLS,
@@ -10940,7 +11339,12 @@ var init_mcp_catalog = __esm({
       ...SESSIONS_TOOLS,
       ...NOTIFICATIONS_TOOLS,
       ...SUPPORT_TOOLS,
-      ...LEAD_TOOLS
+      ...LEAD_TOOLS,
+      // ADR-0157 · papan Tim (kerja manusia) lalu status instance. Keduanya di ekor daftar dengan
+      // sengaja: urutan di sini = urutan yang dibaca model, dan pekerjaan sehari-hari agen tetap
+      // backlog/sesi/IDE — bukan kartu orang lain.
+      ...TEAM_TOOLS,
+      ...SYSTEM_TOOLS
     ];
   }
 });
@@ -11247,51 +11651,6 @@ var init_presence = __esm({
   }
 });
 
-// ../shared/src/team.ts
-var TASK_STATUSES, zTaskStatus, memberId, zEmail, zName, zIso, zCreateMember, zPatchMember, zCreateTask, zPatchTask, ESCALATE_SOURCES, zEscalateTask;
-var init_team = __esm({
-  "../shared/src/team.ts"() {
-    "use strict";
-    init_zod();
-    init_enums();
-    TASK_STATUSES = ["backlog", "doing", "review", "done"];
-    zTaskStatus = external_exports.enum(TASK_STATUSES);
-    memberId = (email) => email.trim().toLowerCase();
-    zEmail = external_exports.string().trim().min(3).max(200).email();
-    zName = external_exports.string().trim().min(1).max(120);
-    zIso = external_exports.string().datetime({ offset: true });
-    zCreateMember = external_exports.object({
-      name: zName,
-      email: zEmail,
-      role: external_exports.string().trim().max(60).nullable().optional()
-    });
-    zPatchMember = zCreateMember.omit({ email: true }).partial().extend({
-      active: external_exports.boolean().optional()
-    });
-    zCreateTask = external_exports.object({
-      title: external_exports.string().trim().min(1).max(300),
-      detail: external_exports.string().max(2e4).nullable().optional(),
-      projectId: external_exports.string().max(120).nullable().optional(),
-      status: zTaskStatus.default("backlog"),
-      priority: zPriority.default("sedang"),
-      memberId: external_exports.string().max(200).nullable().optional(),
-      startDate: zIso.nullable().optional(),
-      dueDate: zIso.nullable().optional(),
-      order: external_exports.number().finite().optional()
-    });
-    zPatchTask = zCreateTask.partial();
-    ESCALATE_SOURCES = ["brief", "qa", "audit"];
-    zEscalateTask = external_exports.object({
-      source: external_exports.enum(ESCALATE_SOURCES).default("brief"),
-      priority: zPriority.default("sedang"),
-      // Dipakai HANYA saat kartunya belum punya project (`nextSpecId` butuh repo, dan repo milik
-      // project). Route menolak 400 bila ia menyebut project LAIN — kartu tak boleh berpindah project
-      // sebagai efek samping yang tak diminta.
-      projectId: external_exports.string().max(120).optional()
-    });
-  }
-});
-
 // ../shared/src/index.ts
 var init_src = __esm({
   "../shared/src/index.ts"() {
@@ -26508,6 +26867,7 @@ function ownsWorktree(repoDir, cwd) {
 import { execFile as execFile7 } from "node:child_process";
 import { promisify as promisify6 } from "node:util";
 import { existsSync as existsSync7 } from "node:fs";
+import { readdir as readdir2 } from "node:fs/promises";
 import { resolve as resolve14 } from "node:path";
 var exec6 = promisify6(execFile7);
 var GIT4 = { maxBuffer: 1 << 24 };
@@ -26527,6 +26887,43 @@ async function listRepoTree(repoDir, ref = "") {
     return [];
   }
 }
+async function listIgnoredEntries(repoDir) {
+  const empty = { files: [], dirs: [] };
+  if (!repoDir || !existsSync7(repoDir)) return empty;
+  try {
+    const { stdout } = await exec6(
+      "git",
+      ["ls-files", "--others", "--ignored", "--exclude-standard", "--directory", "--no-empty-directory", "-z"],
+      { cwd: repoDir, ...GIT4 }
+    );
+    const files = [], dirs = [];
+    for (const e of new Set(splitZ2(stdout))) {
+      if (e.endsWith("/")) dirs.push(e.slice(0, -1));
+      else files.push(e);
+    }
+    return { files: files.sort(), dirs: dirs.sort() };
+  } catch {
+    return empty;
+  }
+}
+var DIR_ENTRY_MAX = 5e3;
+async function listDirEntries(repoDir, rel) {
+  const empty = { files: [], dirs: [], truncated: false };
+  if (!repoDir) return empty;
+  const abs = repoAbsPath(repoDir, rel);
+  let raw;
+  try {
+    raw = await readdir2(abs, { withFileTypes: true });
+  } catch {
+    return empty;
+  }
+  const files = [], dirs = [];
+  for (const d of raw.slice(0, DIR_ENTRY_MAX)) {
+    if (d.name === ".git") continue;
+    (d.isDirectory() ? dirs : files).push(`${rel}/${d.name}`);
+  }
+  return { files: files.sort(), dirs: dirs.sort(), truncated: raw.length > DIR_ENTRY_MAX };
+}
 async function readRepoFile2(repoDir, rel, ref = "") {
   if (!repoDir) return null;
   repoAbsPath(repoDir, rel, !!ref);
@@ -31222,7 +31619,7 @@ async function dropSpecAttachments(specId) {
 
 // src/services/spec-attachment-dir.ts
 init_db();
-import { mkdir as mkdir4, readdir as readdir2, readFile as readFile3, rm as rm4, writeFile as writeFile3 } from "node:fs/promises";
+import { mkdir as mkdir4, readdir as readdir3, readFile as readFile3, rm as rm4, writeFile as writeFile3 } from "node:fs/promises";
 import { join as join13 } from "node:path";
 init_session_id();
 init_uploads();
@@ -31287,7 +31684,7 @@ async function syncSpecAttachmentsDir(specId, projectId) {
   }
   await writeFile3(join13(dir2, INDEX), renderIndex(specId, items), { mode: 384 });
   const keep = /* @__PURE__ */ new Set([INDEX, ...items.map((a) => a.filename)]);
-  for (const name2 of await readdir2(dir2)) {
+  for (const name2 of await readdir3(dir2)) {
     if (!keep.has(name2)) await rm4(join13(dir2, name2), { recursive: true, force: true }).catch(() => {
     });
   }
@@ -35153,8 +35550,25 @@ async function ide_default(app2) {
   app2.get("/projects/:id/tree", async (req, reply) => {
     const repoDir = await repoOf(req.params.id);
     if (repoDir === void 0) return reply.code(404).send({ error: "not found" });
-    const ref = req.query.ref ?? "";
-    return { ref, files: await listRepoTree(repoDir, ref) };
+    const q = req.query;
+    const ref = q.ref ?? "";
+    const hidden = q.hidden === "1" || q.hidden === "true";
+    if (q.under) {
+      try {
+        return { ref: "", ...await listDirEntries(repoDir, q.under), ignored: [] };
+      } catch (e) {
+        return entryError(reply, e);
+      }
+    }
+    const files = await listRepoTree(repoDir, ref);
+    if (!hidden || ref) return { ref, files, dirs: [], ignored: [] };
+    const ign = await listIgnoredEntries(repoDir);
+    return {
+      ref,
+      files: [...files, ...ign.files].sort(),
+      dirs: ign.dirs,
+      ignored: [...ign.files, ...ign.dirs]
+    };
   });
   app2.get("/projects/:id/file", async (req, reply) => {
     const id = req.params.id;
@@ -35597,7 +36011,7 @@ async function finishGraphOp(reply, id, repoDir, r, verb) {
 }
 
 // src/routes/fs.ts
-import { readdir as readdir3 } from "node:fs/promises";
+import { readdir as readdir4 } from "node:fs/promises";
 import { homedir as homedir4 } from "node:os";
 import { resolve as resolve17, dirname as dirname9, join as join16 } from "node:path";
 async function fs_default(app2) {
@@ -35605,7 +36019,7 @@ async function fs_default(app2) {
     const q = req.query.path;
     const dir2 = q && q.trim() ? resolve17(q.trim()) : homedir4();
     try {
-      const ents = await readdir3(dir2, { withFileTypes: true });
+      const ents = await readdir4(dir2, { withFileTypes: true });
       const entries3 = ents.filter((e) => e.isDirectory() && !e.name.startsWith(".")).map((e) => ({ name: e.name, path: join16(dir2, e.name) })).sort((a, b) => a.name.localeCompare(b.name));
       const parent = dirname9(dir2);
       return { path: dir2, parent: parent === dir2 ? null : parent, entries: entries3 };
@@ -39011,7 +39425,7 @@ async function getLimits() {
 }
 
 // src/services/codex-limits.ts
-import { open as open3, readdir as readdir4, stat as stat2 } from "node:fs/promises";
+import { open as open3, readdir as readdir5, stat as stat2 } from "node:fs/promises";
 import { homedir as homedir8 } from "node:os";
 import { join as join24 } from "node:path";
 var TTL_MS3 = 3e4;
@@ -39048,7 +39462,7 @@ function toWindow(slot, raw, reached) {
 async function recentRollouts(dir2) {
   let entries3;
   try {
-    entries3 = (await readdir4(dir2, { recursive: true })).filter((f) => f.endsWith(".jsonl"));
+    entries3 = (await readdir5(dir2, { recursive: true })).filter((f) => f.endsWith(".jsonl"));
   } catch {
     return [];
   }
@@ -40764,7 +41178,7 @@ import { randomUUID as randomUUID9 } from "node:crypto";
 init_config2();
 init_src2();
 import { randomUUID as randomUUID8 } from "node:crypto";
-import { mkdir as mkdir5, writeFile as writeFile4, readFile as readFile4, unlink as unlink4, readdir as readdir5, stat as stat3 } from "node:fs/promises";
+import { mkdir as mkdir5, writeFile as writeFile4, readFile as readFile4, unlink as unlink4, readdir as readdir6, stat as stat3 } from "node:fs/promises";
 import { join as join25, resolve as resolve19, basename as basename6 } from "node:path";
 var MAX_TRANSCRIPT_BYTES = 1024 * 1024;
 function transcriptDir() {
@@ -40809,7 +41223,7 @@ async function listTranscripts() {
   const dir2 = transcriptDir();
   let names;
   try {
-    names = await readdir5(dir2);
+    names = await readdir6(dir2);
   } catch (e) {
     if (e.code === "ENOENT") return [];
     throw e;
@@ -42878,7 +43292,10 @@ async function tasks_default(app2) {
       projectId,
       source,
       priority,
-      author: req.user?.email ?? "system",
+      // ADR-0157 · agen punya NAMA di sini. Tanpa cabang kedua setiap eskalasi lewat MCP menulis
+      // `Tim · system`, dan asal-usul backlog jadi tak bisa ditelusuri persis pada jalur yang baru
+      // saja dibuka — `launchPrincipal` di bawah sudah membedakan keduanya, penulisnya harus juga.
+      author: req.user?.email ?? (req.agent ? `agent:${req.agent.id}` : "system"),
       launchApprovedBy: launchPrincipal(req)
     });
     const view13 = taskView(r.task, { id: r.spec.id, stage: r.spec.stage, priority: r.spec.priority });
@@ -45092,6 +45509,7 @@ function capabilityForRoute(method, path) {
     return rw("vps");
   }
   if (top === "prds") return rw("docs");
+  if (top === "tasks" || top === "members") return rw("team");
   if (top === "terminal") {
     if (seg[1] === "workspace") return "COOKIE_ONLY";
     if (seg[seg.length - 1] === "ws") return "sessions:write";